beziworld

BeziWorld Activity Log records what users do on your WordPress site: who logged in, who failed to log in, who changed a role, who edited their profile, who created or edited content, and more. The focus is user activity, and the goal is to make the capabilities competing plugins reserve for paid upgrades available for free.
Designed for performance. Events are stored in a dedicated, indexed custom table (never in wp_posts), written in batches to keep request overhead low, while security-relevant events are persisted immediately. Retention pruning keeps the table lean automatically.
Designed for trust. Each event is signed with a per-site HMAC and sealed into a hash-chained sequence of checkpoints, making after-the-fact tampering — including row insertion or deletion — detectable. Because an attacker with full server access could recompute local signatures, the latest checkpoint signature can be anchored off-host (emailed or sent to a webhook) so the integrity proof leaves the machine.
Designed for privacy. IP logging is optional and can be anonymised at capture time. The plugin never phones home and never loads code from external servers.
<h4>Highlights</h4>
<ul>
<li>Authentication and account activity: logins, logouts, failed logins (rate-limited to prevent log flooding), registration, role changes, profile and user-metadata changes, password resets, application passwords, user deletion.</li>
<li>Content activity: posts, pages and custom post types created, updated (with a field-level diff), status changes, trashing, restoring and permanent deletion; comments, media and taxonomy terms.</li>
<li>Clean, readable event viewer with severity badges, expandable detail rows, sorting, filtering and full-text search.</li>
<li>Granular configuration: enable or disable whole event groups or individual events.</li>
<li>Exclusion rules by IP/CIDR, user login, user ID, role and request path.</li>
<li>Plugin/theme and settings changes, navigation menus, and the GDPR personal-data request lifecycle.</li>
<li>Optional integrations: WooCommerce (orders, status changes, stock) and Yoast SEO (metadata and settings).</li>
<li>Real-time notifications — Slack, Discord, Telegram, email and generic webhook — by urgency or chosen event codes, delivered immediately or as an hourly digest. Free.</li>
<li>Optional login geolocation (via a provider you wire) with an automatic alert on a login from a new country.</li>
<li>Scheduled HTML summary reports emailed to the administrator (daily or weekly).</li>
<li>Statistics screen with daily-volume chart and category, user and event breakdowns.</li>
<li>Active session management: see who is logged in and terminate sessions. Free.</li>
<li>Tamper-evident integrity: per-row HMAC plus a hash-chained checkpoint sequence with optional off-host anchoring (email/webhook), verifiable with WP-CLI (<code>wp bzal verify-integrity</code>).</li>
<li>Real-time notifications also fire on a chosen set of event codes, regardless of urgency.</li>
<li>Configurable severity per event code, driving notifications and the security badge.</li>
<li>Optional anomaly detection: flags a rapid bulk-delete burst by one user and off-hours admin logins as high-severity alerts.</li>
<li>Admin-bar quick view: the latest events and a 24-hour security badge on every screen.</li>
<li>“Users online” view: who currently holds a session, with their most recent action, time and IP.</li>
<li>CSV and JSON export of the filtered log, with spreadsheet-formula-injection protection.</li>
<li>Read access via the REST API (offset and cursor pagination, plus an integrity-anchor endpoint) and optionally GraphQL, gated by capability.</li>
<li>Granular configuration: enable/disable whole event groups or individual events; exclusion rules by IP/CIDR, user, role and path.</li>
<li>Configurable retention with on-demand cleanup; UTC storage with display in your chosen timezone.</li>
<li>Fully translatable, with bundled Polish, German and Czech translations.</li>
</ul>
<h3>External services</h3>
This plugin works fully offline. It does not connect to any external service on its own. The following optional integrations are disabled by default and only ever contact a destination that you enter in the settings; each transmits a short summary of a logged event (such as the event description, the acting user’s login, the time, and — when IP logging is enabled — the IP address) at the moment the event occurs or, in digest mode, once per hour.
<ul>
<li>Slack — when you enter a Slack Incoming Webhook URL, matching events are POSTed to that webhook. See the Slack Terms of Service (https://slack.com/terms-of-service) and Privacy Policy (https://slack.com/trust/privacy/privacy-policy).</li>
<li>Discord — when you enter a Discord webhook URL, matching events are POSTed to that webhook. See the Discord Terms (https://discord.com/terms) and Privacy Policy (https://discord.com/privacy).</li>
<li>Telegram — when you enter a Telegram bot token and chat ID, matching events are sent through the Telegram Bot API at api.telegram.org. See the Telegram Terms (https://telegram.org/tos) and Privacy Policy (https://telegram.org/privacy).</li>
<li>Generic webhook — when you enter a custom webhook URL (for notifications or for off-host integrity anchoring), the corresponding payload is POSTed to that URL. The destination is yours; review its provider’s terms and privacy policy.</li>
<li>Login geolocation — disabled unless you both enable it and wire a provider through the <code>bzal_geolocate_country</code> filter. The plugin bundles no geolocation provider and makes no geolocation request by itself; any lookup is performed by the provider you supply, under that provider’s terms.</li>
</ul>
Summary reports and notification emails are delivered through your site’s own WordPress mail system to the recipients you configure; they are not sent to any third party by this plugin.

BeziWorld Activity Log

Advanced, fast and secure user-activity log with a tamper-evident audit trail. Every feature free — no paid tiers.

WPWhiteSecurity

Melapress

robertabela

<h3>Monitor activity on your WordPress sites and get clear insights into what’s happening with detailed user and event logging.</h3>
Keep <a href="https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wsal" rel="nofollow ugc">WordPress logs</a> of everything that happens on your sites and multisite networks with WP Activity Log instantly, without writing a line of code.
<ul>
<li>Easily detect suspicious activity on your WordPress site before it escalates</li>
<li>Record failed login attempts to detect potential security breaches and strengthen site protection</li>
<li>Track user logins and logouts to ensure SLAs are consistently met</li>
<li>Monitor user activity and productivity to boost accountability</li>
<li>Know exactly what all your users are doing in real time</li>
<li>Know what happened before an outage for faster, easier troubleshooting</li>
<li>Ensure compliance with regulations and standards like GDPR and PCI DSS</li>
<li>Better manage & organize your site and users for smoother operations</li>
<li>Simple setup ensures you start benefiting quickly and easily</li>
</ul>
WP Activity Log is a complete logging solution, helping hundreds of thousands of administrators and security professionals track changes on their websites thanks to real-time user activity monitoring.
💎 Need more extensive features? Unlock advanced reporting, exports/mirroring, session management, and real-time alerts with <a href="https://melapress.com/wordpress-activity-log/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wsal" rel="nofollow ugc">WP Activity Log premium or enterprise</a>.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/pgFEMIvKFTA?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h3>What WordPress changes WP Activity Log tracks</h3>
A website activity log is important for improving troubleshooting, compliance, user management, and security. 
Get WP Activity Log and keep track of events on your site. The log not only tells you that a post, a user profile, or an object was updated, it also lets you know exactly what changed, when, and includes a user log (by whom), so you always have the information you need.
Below is a summary of the changes that the plugin can keep a record of:
<ul>
<li>
Post, page, and custom post type changes: Status, content changes, title, URL, custom field, and other metadata changes
</li>
<li>
Tags and category changes: Creating, modifying, deleting, and adding/removing them from posts
</li>
<li>
Widget and menu changes: Creating, modifying, or deleting them
</li>
<li>
User changes: User created or registered, deleted, or added to a site on multisite network
</li>
<li>
User profile changes: Password, email, display name, and role changes
</li>
<li>
Access logging: User login, logout, failed logins, and terminating other sessions
</li>
<li>
WordPress core and settings changes: Installed updates, permalinks, default role, URL, and other site-wide changes
</li>
<li>
WordPress multisite network changes: Adding, deleting, or archiving sites, adding or removing users from sites, etc.
</li>
<li>
Plugin and Theme changes: Installing, activating, deactivating, uninstalling, and updating
</li>
<li>
WordPress database changes: When a plugin adds or removes a table
</li>
<li>
Third-party plugin changes: WooCommerce Stores & products, Yoast SEO, RankMath, Termly, WPForms, Gravity Forms, Advanced Custom Fields (ACF), MainWP, ManageWP, WP Umbrella, and other popular WordPress plugins
</li>
<li>
WordPress site file changes: New files added, or existing files modified or deleted.
</li>
</ul>
<h4>Event details recorded</h4>
Detailed event logging ensures that for every event that the plugin records, it reports the:
<ul>
<li>Date & time (and milliseconds) of when it happened</li>
<li>User & role of the user who did the change</li>
<li>Source IP address from where the change happened</li>
<li>The object on which the change has taken place</li>
</ul>
Refer to <a href="https://melapress.com/support/kb/wp-activity-log-list-event-ids/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal" rel="nofollow ugc">WordPress activity log event IDs</a> for a complete list of all the changes WP Activity Log can keep a record of and a detailed explanation of what change every event ID represents.
<h3>💎 Upgrade to WP Activity Log Premium and get even more</h3>
The premium edition of WP Activity Log takes WordPress user activity tracking to the next level. It comes bundled with even more features, including log mirroring, enterprise-grade support, user session management, and much more!
<h4>Premium features list</h4>
<ul>
<li>See who is logged in and monitor their current activities in real-time</li>
<li>Log off any user at the click of a button</li>
<li>Generate fully-configurable HTML and CSV reports for easy data analysis</li>
<li>Receive email, SMS, and Slack notifications for important changes (fully configurable)</li>
<li>Use search filters to fine-tune results and find what you need in seconds</li>
<li>Store the activity logs in an external database to enhance security and scalability</li>
<li>Mirror the activity log to log management systems such as AWS CloudWatch, Loggly, Papertrail, and others in real-time</li>
<li>Mirror the logs to business communication systems like Slack</li>
<li>Send a copy of your website’s activity log to a log file on your web server</li>
<li>Archive old activity log data to another database for improved storage and log management</li>
<li>Add notes to activity log entries for better context and internal documentation</li>
</ul>
Refer to the <a href="https://melapress.com/wordpress-activity-log/features/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wsal" rel="nofollow ugc">WP Activity Log plugin features and benefits page</a> to learn more about the benefits of upgrading to WP Activity Log Premium.
<h3>🔌 WP Activity Log third-party plugin support</h3>
All WP Activity Log editions include activity tracking for third-party plugins, including (in alphabetical order):
<ul>
<li>Advanced Custom Fields (ACF) – Log changes to post types, taxonomies, and taxonomy terms</li>
<li>bbPress – Track changes to forums, topics, and bbPress settings</li>
<li>Gravity Forms – Track changes to Gravity Forms settings, forms, and entries (leads)</li>
<li>LearnDash – Track changes to courses, lessons, and other system changes, as well as student activity such as course, lesson, and quiz enrollments and completions.</li>
<li>MemberPress – Log changes to plugin settings, memberships, payments, subscriptions, and other actions</li>
<li>Multisite & management tools – Track changes across your network for MainWP, ManageWP, Modular DS, Infinite WP, WP Umbrella, WP Remote, and other multisite management plugins</li>
<li>Paid Membership Pro – Log changes to membership levels, user assignments, and more. Premium users can also track order and checkout activity, and access a Members Activity panel inside each member’s profile for instant visibility into recent actions.</li>
<li>RankMath – Log changes to RankMath settings, SEO configurations, and on-page SEO edits</li>
<li>Redirection – Keep a log of changes to redirections and redirection groups</li>
<li>Termly – Log changes to Termly settings and configurations</li>
<li>WooCommerce – Keep a log of changes to store settings, orders, products, coupons, and more</li>
<li>WPForms – Log changes to WPForms settings, forms, form files, and entries (leads)</li>
<li>Yoast SEO – Track changes to Yoast SEO settings and on-page SEO in the Yoast SEO meta box</li>
</ul>
<h3>Extra Features for Enhanced Monitoring and Management</h3>
Both free and premium editions of WP Activity Log include a number of non-logging specific features that make the plugin a complete WordPress monitoring solution. Here is what is included:
<h4>Free</h4>
<ul>
<li>Built-in support for reverse proxies and web application firewalls</li>
<li>Integration with WhatIsMyIpAddress.com – get all information about an IP address with a single click</li>
<li>Limit who can view the WordPress activity log by users or roles</li>
<li>Enable or disable individual event IDs from the activity log</li>
<li>Configurable dashboard widget highlighting the most recent critical activity</li>
<li>Configurable WordPress activity log retention policies</li>
<li>Display user avatars in events for better recognizability</li>
<li>And much more!</li>
</ul>
<h4>Premium</h4>
Everything that’s included in the Free edition, plus:
<ul>
<li>Full WordPress multisite support</li>
<li>Create custom alerts & notifications to monitor additional functionality</li>
<li>Import and export plugin settings</li>
<li>Real-time activity log visible in the WordPress admin toolbar</li>
<li>And much more!</li>
</ul>
<h3>🛠️ Free and premium plugin support</h3>
If you encounter any issues with the free edition of WP Activity Log, you can post and get help on the <a href="https://wordpress.org/support/plugin/wp-security-audit-log/" rel="ugc">WordPress.org support forums</a>. You can also find more technical information and plugin documentation on the <a href="https://melapress.com/support/kb/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal" rel="nofollow ugc">Melapress knowledge base</a>.
Premium plugins include a full year of free updates and dedicated one-to-one premium email support. This means you get direct access to our support team who will assist you with any questions or issues related to the plugins.
<h3>As featured on:</h3>
<ul>
<li><a href="https://kinsta.com/blog/wordpress-activity-log/" rel="nofollow ugc">Kinsta</a></li>
<li><a href="https://pagely.com/blog/2015/01/log-wordpress-dashboard-activity-improved-security-auditing/" rel="nofollow ugc">Pagely</a></li>
<li><a href="https://www.shoutmeloud.com/wordpress-security-audit-log.html" rel="nofollow ugc">Shout Me Loud</a></li>
<li><a href="https://thedevcouple.com/wp-security-audit-log-review/" rel="nofollow ugc">The Dev Couple</a></li>
<li><a href="http://www.wpkube.com/improve-wordpress-security-wp-security-audit-log/" rel="nofollow ugc">WPKube</a></li>
<li><a href="https://www.techwibe.com/wp-security-audit-log-wordpress-plugin/" rel="nofollow ugc">Techwibe</a></li>
<li><a href="https://tidyrepo.com/wp-security-audit-log-wordpress-activity-log/" rel="nofollow ugc">Tidy Repo</a></li>
<li><a href="http://www.kitploit.com/2016/10/wp-security-audit-log-ultimate.html" rel="nofollow ugc">KitPloit</a></li>
<li>and many others.</li>
</ul>
<h3>MAINTAINED & SUPPORTED BY MELAPRESS</h3>
Melapress develops high-quality WordPress management and security plugins such as Melapress Login Security, WP 2FA, and Melapress Role Editor.
Browse our list of <a href="https://melapress.com/?utm_source=wp+repo&utm_medium=repo+link&utm_campaign=wordpress_org&utm_content=wsal" rel="nofollow ugc">WordPress security and administration plugins</a> to see how our plugins can help you better manage and improve the security and administration of your WordPress websites and users.
<h3>Installing WP Activity Log</h3>
<h3>Install WP Activity Log from within WordPress</h3>
<ol>
<li>Visit ‘Plugins > Add New’</li>
<li>Search for ‘WP Activity Log’</li>
<li>Install and activate the WP Activity Log plugin</li>
<li>Allow or skip diagnostic tracking</li>
</ol>
<h3>Install WP Activity Log manually</h3>
<ol>
<li>Extract the plugin ZIP file and upload it to the <code>/wp-content/plugins/</code> directory</li>
<li>Activate the WP Activity Log plugin from the ‘Plugins’ menu in WordPress</li>
<li>Allow or skip diagnostic tracking</li>
</ol>

WP Activity Log

The plugin logs just about anything you might need in WP. The free version has enough features to fit the needs for a simple setup where you might want to have basic monitoring on the site. The premium version is excellent with integration options for CloudWatch on AWS which allow for consolidated log management when running the plugin across a number of sites. The dev team is also super helpful and responsive! 

Great plugin and great integrations!

The plugin has been excellent.  It gives us the data we need to track usage.  Even more than that is the phenomenal service they provide. Highly recommended. 

Great Plugin and Support

Thanks, it helps me a lot to track user activity. 

Detail Orientated


If you are willing to pay for the premium version then you have an awesome plugin (probably the best of breed).



BUT the version in the repository lacks even the basic functionality (e.g. search) needed for it to be useful.


Free version is useless

Easy to use


Active support, prompt response time, and attention to detail.



Functionality is great, however, there is an excessive amount of "purchase me" links that clutter the admin menu.


Active support, prompt response time, and attention to detail.


They answered quickly and offered a solution that was directly applicable to my situation.


Prompt, efficient, professional support.


Outstanding plugin with fabulous support. 


Breath of Fresh Air


I work for a marketing company and am in charge of keeping all of our contracted sites up to date, in doing so we also need to track who is doing what, where, and when... this plugin does exactly that.



Futhermore, I had an slight issue today, the support team literally had a fix to me within minutes.  Wish all plugin devs were like you folks :)



Thank you very much!


Excellent Tracking and Support


Really useful solution and great support!


Great solution!


Someone must not have thought the update with the email summaries through, what about people who use this on a global scale. Perhaps 100s of websites all now emailing them ever single week. The feature is nice, the implementation is shockingly short sighted. 


Ill advised update


Because my previous review was removed I am adding this one. You still get one star. Bad decisions guys.


Re-Review


Works pretty well.



It has been a lifesaver when my users accidentally break things. Helped me quickly identify issues and take action. 



Highly recommended for keeping track of changes and maintaining control over your site! Nice you can "hide it" from other users.


Perfect! A Must-Have!

The #1 user-rated activity log plugin for event logging, activity monitoring and change tracking.

BeziWorld Activity Log vs WP Activity Log