CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

bitcoinapi

PermaLogger is a comprehensive WordPress activity logging plugin that tracks user actions and system events in your WordPress admin area. All events are logged locally and can be synced to the PermaLogger external service for immutable storage and analysis using blockchain technology.
<h4>Features</h4>
<ul>
<li>User Login Tracking – Monitor successful and failed login attempts</li>
<li>Profile Updates – Track changes to user profiles including password changes</li>
<li>Email Changes – Log when users update their email addresses</li>
<li>Dashboard Movement – Track page navigation within the WordPress admin</li>
<li>Post & Page Tracking – Monitor creation, updates, deletions, and status changes</li>
<li>Content Diff Tracking – Optional git-style diffs showing exact content changes</li>
<li>Admin Hooks – Comprehensive tracking of all WordPress admin hooks (optional)</li>
<li>Local Database Storage – All logs stored in your WordPress database</li>
<li>API Sync – Automatic syncing to external PermaLogger service</li>
<li>Log Viewer – Built-in interface to view and filter logs</li>
<li>Pagination & Filtering – Easy navigation through your activity logs</li>
</ul>
<h4>Use Cases</h4>
<ul>
<li>Security auditing and compliance</li>
<li>Debugging user-reported issues</li>
<li>Monitoring content changes</li>
<li>Tracking admin activity</li>
<li>Compliance with data regulations</li>
</ul>
<h4>Privacy & Data</h4>
PermaLogger logs user actions including usernames, IP addresses, and timestamps. The plugin can sync this data to an external service (PermaLogger.com) if you provide an API key. You should inform your users about this tracking in your privacy policy.
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.0 or higher</li>
<li>bitcoinapi.io API key (get one at https://bitcoinapi.io)</li>
</ul>
<h3>External Services</h3>
This plugin connects to the BitcoinAPI external service to sync and store WordPress activity logs. This connection is required for the plugin’s core functionality of providing immutable, blockchain-based log storage.
What is sent: 
* User activity data including usernames, user IDs, email addresses, IP addresses 
* Timestamps of actions performed 
* Details of WordPress actions (login attempts, profile updates, email changes, page/post modifications, admin navigation, etc.) 
* Request data associated with tracked events
When is data sent: 
* Data is sent automatically when the temporary log file reaches 100KB in size 
* Each batch contains all logged events since the last sync 
* Syncing only occurs if you have provided a valid API key
Service Information: 
* Service Provider: BitcoinAPI 
* Service Used: Log Storage and Blockchain Timestamping 
* API Endpoint: https://bitcoinapi.io/api/ 
* Terms of Service: https://bitcoinapi.io/terms 
* Privacy Policy: https://bitcoinapi.io/privacy
Important Notes: 
* All logs are stored locally in your WordPress database regardless of API sync status 
* You must provide a valid API key from https://bitcoinapi.io for external syncing to occur 
* Without an API key, the plugin will still log events locally but will not sync externally 
* Users should be informed about this data transmission in your site’s privacy policy
<h3>Privacy Policy</h3>
PermaLogger logs user activity on your WordPress site. The following data is collected:
<ul>
<li>Username and user ID</li>
<li>Email address</li>
<li>IP address</li>
<li>Timestamp of actions</li>
<li>Details of actions performed (page visits, content changes, etc.)</li>
</ul>
If you provide an API key, this data is transmitted to BitcoinAPI external service via HTTPS (bitcoinapi.io). Make sure to disclose this data collection in your site’s privacy policy and obtain necessary user consent.
<h3>Support</h3>
For support, feature requests, or bug reports, please visit: 
* Plugin Support Forum: (will be available after plugin approval) 
* Documentation: https://bitcoinapi.io/docs 
* Website: https://bitcoinapi.io 
* Contact: support@bitcoinapi.io
<h3>Credits</h3>
Developed by BitcoinAPI 
https://bitcoinapi.io

PermaLogger

Track all hookable actions in the WP-Admin area and log them to PermaLogger's external service for comprehensive activity monitoring.

CloudAware Security Audit vs PermaLogger