Fumiki Takahashi

Hametuha INC.

This plugin integrates <a href="https://slack.com" rel="nofollow ugc">Slack</a> and WordPress.
<h4>Core Conception</h4>
By default, this plugin does nothing. It’s true. 
Slack has many API integration, but hameslack uses 2 of them.
<ul>
<li><a href="https://api.slack.com/incoming-webhooks" rel="nofollow ugc">Incoming Webhook</a> to post to slack.</li>
<li><a href="https://api.slack.com/apps" rel="nofollow ugc">Slack App</a> to interact with slack.</li>
</ul>
Upper is easier. This plugin helps the connection between Slack and WordPress and you can concentrate on what you should do with slack.
<h4>Use Cases</h4>
Here is a list of use case of us on WordPress with many editors.
<ul>
<li>Easy Post notification to slack if some post is awaiting review.</li>
<li>Difficult Post access summary to slack once a week, because my colleague doesn’t open Google Analytics.</li>
<li>Very Difficult Convert slack conversation to single post and make interview post.</li>
</ul>
For more details, please read the <a href="https://github.com/hametuha/hameslack/blob/master/addons/README.md" rel="nofollow ugc">Addons documentation</a>.
<h4>How to Integrate</h4>
The simplest usage is post to slack. You can do like below:
<pre>
do_action( 'hameslack', $text_to_post, $attachments, $channel );
</pre>
Function <code>hameslack_post( $content, $attachment, $channel )</code> is also available, but I prefer to use <code>do_action</code> to avoid annoying <code>if ( function_exists('func_name'))</code>.
Everything works fine if you set properly.
<h4>Deprecated API</h4>
<ul>
<li>Sending Invitation <code>deprecated at 2.0</code>: this endpoint was unofficial and official one is only for Enterprise grid. Users now can send invitation reqeust from their profile page.</li>
<li>Outgoind Webhook <code>deprecated at 2.0</code>: Slack recommends Events API instead.</li>
</ul>
<h3>Install</h3>
<h4>From Plugin Repository</h4>
Click install and activate it.
<h4>From GitHub</h4>
Download from <a href="https://github.com/hametuha/hameslack/releases" rel="nofollow ugc">Releases</a> and you can use it. Any pull requests are welcomed.
<h4>Enter Credentials</h4>
To post a message to slack, you need Payload URL. <a href="https://api.slack.com/apps/" rel="nofollow ugc">Create an app</a> and activate “Incoming Webhooks”. 
Now you can get payload URL.
To get Bot Token, go to “OAuth & Permissions”. By installing your app to your workspace, Bot token will be generated.
<h4>Do something</h4>
As mentioned above, this plugin does nothing by default. Enable built-in addons from the settings page, or read the <a href="https://github.com/hametuha/hameslack/blob/master/addons/README.md" rel="nofollow ugc">Addons documentation</a> to write your own.
If you have any request, please make issue on <a href="https://github.com/hametuha/hameslack" rel="nofollow ugc">github</a>.
<h3>Development</h3>
This plugin requires custom code to work with your Slack workspace. Here’s how to set up a local development environment.
<h4>Prerequisites</h4>
<ul>
<li>Node.js >= 22 (managed via <a href="https://volta.sh/" rel="nofollow ugc">Volta</a>)</li>
<li>Docker Desktop (for <a href="https://developer.wordpress.org/block-editor/reference-guides/packages/packages-env/" rel="nofollow ugc">wp-env</a>)</li>
<li><a href="https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/get-started/" rel="nofollow ugc">cloudflared</a> (for Slack Webhook testing)</li>
</ul>
<h4>Getting Started</h4>
<pre><h3>Install dependencies</h3>npm install
composer install<h3>Start WordPress local environment</h3>npm start<h3>Build assets</h3>npm run package<h3>Watch for changes during development</h3>npm run watch
</pre>
<h4>Receiving Slack Webhooks Locally</h4>
Slack requires a public HTTPS URL for Event Subscriptions and Interactive Components. Use Cloudflare Tunnel to expose your local environment:
<pre><h3>In a separate terminal, start the tunnel</h3>npm run tunnel
</pre>
This gives you a temporary public URL like <code>https://random-name.trycloudflare.com</code>. Then:
<ol>
<li>Go to your <a href="https://api.slack.com/apps" rel="nofollow ugc">Slack App settings</a></li>
<li>Update Event Subscriptions Request URL to <code>https://random-name.trycloudflare.com/wp-json/hameslack/v1/...</code></li>
<li>Update Interactivity & Shortcuts Request URL similarly</li>
<li>The URL changes each time you restart the tunnel</li>
</ol>
Note: Make sure WordPress permalink settings are not set to “Plain” — pretty permalinks are required for <code>/wp-json/</code> to work through the tunnel.
<h4>NPM Scripts</h4>
 Command 
 Description
 <code>npm start</code> 
 Start wp-env
 <code>npm run package</code> 
 Build all assets (CSS + JS)
 <code>npm run watch</code> 
 Watch for file changes
 <code>npm run tunnel</code> 
 Open Cloudflare Tunnel to localhost:8888
 <code>npm run lint</code> 
 Run ESLint + Stylelint
 <code>npm run fix</code> 
 Auto-fix lint errors
 <code>npm test</code> 
 Run PHPUnit tests

HameSlack

wpazleen

Sabbir Sam

wpxpertise

Function Deck

Activity Guard is a powerful all-in-one WordPress Activity Log, WooCommerce Events, and Security Plugin designed to track every activity happening on your WordPress website.
It monitors user behavior, admin changes, WooCommerce events and analytics, forum activities, and system-level changes in real time. Whenever a critical change occurs, it instantly sends notifications via the Admin Dashboard, Slack, Telegram, and Email.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/KXT0QcnFLOg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
🚀 <a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Activity Guard</a> | 📖 <a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a> | 💬 <a href="https://wpazleen.com/support/" rel="nofollow ugc">Pro Support</a>
Let’s grow, connect, and build together! 🚀
<ul>
<li>
🤝 Join our community on Facebook: <a href="https://www.facebook.com/wpazleens" rel="nofollow ugc">Facebook</a>
</li>
<li>
🎥 Subscribe to our YouTube channel: <a href="https://www.youtube.com/channel/UCqR5SPvn6N2ZBq7AyYKfEnA" rel="nofollow ugc">YouTube</a>
</li>
<li>
🐦 Follow us on X (Twitter): <a href="https://x.com/wpazleen" rel="nofollow ugc">X / Twitter</a>
</li>
</ul>
This top-rated Activity Log and Security Plugin helps you track user activity in WordPress efficiently. From user login and logout, role changes, plugin activation or deactivation, to tracking and blocking suspicious IP addresses- everything can be managed easily through Activity Guard. As a result, your user log and email log always remain clean, organized, and accessible.
The plugin’s detailed logging system clearly records where the change originated from (IP or source address), who made the change (user or admin), and when it occurred. This makes it a powerful Activity Log plugin with built-in IP address tracking.
It is one of the best WordPress plugins for tracking all changes and plays a vital role in keeping your website secure. Whether you are a site owner, developer, WooCommerce store manager, or an agency, Activity Guard helps you detect threats early, monitor changes accurately, and take immediate action.
Trusted by administrators and security professionals, Activity Guard offers real-time user monitoring, a comprehensive audit log, and advanced WordPress security features. With the built-in User Session Management, you can instantly log off any suspicious user, ensuring maximum protection for your website.
<h3>🔝 All Features at a Glance  </h3>
<ul>
<li>
🔐 Website Security & Advanced Protection 
Proactively protect your site against unauthorized access, attacks, and suspicious behavior with layered security controls.
</li>
<li>
📊 Complete Activity Log System 
Log every meaningful event across WordPress core, users, content, plugins, themes, and WooCommerce all in one place.
</li>
<li>
🧩 User Tracking & System Logs 
Monitor user sessions, role changes, login history, system actions, cron jobs, and background processes.
</li>
<li>
🛎️ Multi-Channel Notifier System 
Receive real-time alerts via Slack, Telegram, Email, and Admin Notifications for critical events and security incidents.
</li>
<li>
🛒 WooCommerce Monitoring & Analytics 
Includes a full WooCommerce activity log, sales analytics, customer insights, and order behavior tracking.
</li>
<li>
🔍 Plugin Vulnerability Scanner 
Detect vulnerable, outdated, abandoned, or risky plugins before they become a threat.
</li>
<li>
📈 WordPress Forum Monitoring 
Track forum activities, topic changes, replies, moderation actions, and user interactions.
</li>
<li>
🧱 Firewall with Emergency Shutdown 
Instantly block malicious traffic and force-logout active sessions during emergencies.
</li>
<li>
⏱ Cron Job & Downtime Monitoring 
Monitor scheduled tasks, detect failures, and get alerts when your site goes down.
</li>
</ul>
<h3>🛍️ Perfect for</h3>
<ul>
<li>
Enhancing Website Security 
Instantly detect suspicious activity on WordPress, block threats, and remotely trigger emergency shutdowns.
</li>
<li>
Admin & Team Management 
Learn how to monitor user activity on a WordPress site with detailed audit logs, role tracking, and accountability.
</li>
<li>
Developers & Agencies 
Track plugin/theme updates, configuration changes, fatal errors, and debug logs across multiple client sites.
</li>
<li>
Real-Time Activity Logging 
Track who changed a WordPress page or post, including edits, deletions, status changes, and metadata updates.
</li>
<li>
WooCommerce Store Owners 
Receive alerts for orders, payments, refunds, coupons, stock changes, shipping updates, and customer actions.
</li>
<li>
WooCommerce Incomplete Orders Analytics 
Analyze abandoned carts, checkout drop-offs, recovery potential, recovery rate, and customer cart interactions.
</li>
</ul>
<h3>🛡️ Advanced Security Features</h3>
<ul>
<li>IP Blocking (Manual, CIDR, Conditional Rules) </li>
<li>Emergency shutdown for active user sessions </li>
<li>Cloudflare Turnstile login protection </li>
<li>Custom HTTP security headers & WordPress version hiding </li>
<li>Core file integrity scanner </li>
<li>Bot detection and automatic blocking </li>
<li>Disable or restrict XML-RPC </li>
<li>File Integrity Monitoring (core, plugins, themes) </li>
<li>404 error tracking </li>
<li>Block vulnerability scanners </li>
<li>Block TOR network access </li>
<li>Admin dashboard visitor tracking </li>
<li>Login rate limiting (login log protection) </li>
<li>Suspicious HTTP request alerts </li>
<li>Cron job and downtime monitoring</li>
</ul>
<h3>🧱 Plugin Security Scanner</h3>
<ul>
<li>Automatically scan plugins, themes, and core files for known vulnerabilities </li>
<li>Detect outdated or insecure plugins </li>
<li>Flag abandoned or poorly rated plugins </li>
<li>Confirm compatibility with current WordPress version </li>
<li>Cross-check issues against multiple vulnerability databases</li>
</ul>
<h3>🔔 Updates and Notifier System  </h3>
<ul>
<li>🚨 Real-time alerts for Core File Changes via Slack, Telegram, and Email </li>
<li>📦 Plugin and theme update alerts with updater name  </li>
<li>🛍 WooCommerce sales and coupon usage notifications  </li>
<li>🕒 Incomplete order follow-ups to recover lost sales  </li>
<li>✏️ Product edits, stock changes, and shipping updates  </li>
<li>📪 Billing and shipping address modifications  </li>
<li>🌟 Daily review and 🆘 support notifications  </li>
<li>📈 Weekly plugin download summaries  </li>
<li>📝 Page, post, taxonomy updates and deletions (Helps Track who changed a page or post)  </li>
<li>📬 Track logins, registrations, user role changes (Comprehensive login log)  </li>
<li>🛠 Admin settings updates and form submission alerts </li>
</ul>
<h3>👨‍💻 Admin & Developer Tools  </h3>
<ul>
<li>🔒 Maintenance mode toggle  </li>
<li>🧭 Menu and widget activity tracking  </li>
<li>📑 Plugin/theme activation and deactivation logs  </li>
<li>🧰 Script modification detection  </li>
<li>🧾 Log all HTTP security header changes  </li>
<li>📉 Debug logs and fatal error detection  </li>
<li>📤 Email delivery tracking through detailed email log  </li>
<li>👀 Form integration alerts (Contact Form 7, Simple Form, more)  </li>
</ul>
<h3>📈 Why Choose Activity Guard Over Other Activity Log Plugins?  </h3>
Activity Guard is your comprehensive solution for Real-time user monitoring WP. With robust Security features, WooCommerce integrations, and Real-time alerts for critical changes, it offers unparalleled functionality compared to other plugins. 
<ul>
<li>✅ Rich, intuitive Activity Log with advanced filtering  </li>
<li>📊 Visual charts and graphs for clear audit log summaries (Easily Generate activity log reports for WordPress)  </li>
<li>⚡ Real-time Slack and email notifier alerts  </li>
<li>🛠 Smart automation and developer-friendly tools  </li>
<li>🔐 Military-grade security features with minimal bloat  </li>
<li>🛍 Tailored support for WooCommerce events (A must-have WooCommerce activity log)  </li>
<li>📧 Built-in email log and User Tracking  </li>
<li>🧘 Clean, modern interface anyone can use</li>
</ul>
<h3>Final Thoughts</h3>
Activity Guard is the Best WordPress plugin to track all changes, acting as your all-in-one activity log, notifier, user log, email log, and security plugin designed to keep your WordPress site safe, efficient, and well-monitored.
With real-time alerts, detailed logs, and robust features, you’ll never miss a thing from How to monitor user activity on a WordPress site to site vulnerabilities.
Try Activity Guard today and bring total visibility and WordPress Security to your WordPress site.
Don’t just take our word for it – try Activity Guard yourself and experience the difference!
Secure your WordPress site and stay informed with Activity Guard – your all-in-one solution for Real-time user monitoring WP and WordPress activity log plugin.
<h3>Documentation & Support</h3>
<ul>
<li><a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Website</a></li>
<li><a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://www.youtube.com/@WPAzleen/playlists" rel="nofollow ugc">Tutorials</a></li>
<li><a href="https://youtu.be/jOyU2jxTmfY?si=xoaxFLgFhszXmuFx" rel="nofollow ugc">Setup Video</a></li>
</ul>
<h3>External services</h3>
<h3>Slack Webhook Integration</h3>
Activity Guard allows you to send notifications of all active actions directly to your Slack workspace using Slack webhooks. This feature enables real-time monitoring of plugin activities.
<h3>🔧 Webhook Configuration</h3>
The plugin uses the Slack incoming webhook URL you provide to send notifications to your Slack channel.
To set up an incoming webhook for your Slack workspace:
<ol>
<li>Create a new app or use an existing one </li>
<li>Activate <a href="https://api.slack.com/messaging/webhooks" rel="nofollow ugc">Incoming Webhooks</a> for your app </li>
<li>Add a new webhook to your workspace </li>
<li>Copy the webhook URL and paste it into the plugin settings</li>
</ol>
<h3>Cloudflare Turnstile</h3>
Activity Guard also uses <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> to enhance security and prevent spam. For more details, please refer to Cloudflare’s <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">privacy policy</a>.
<h3>Plugin Security Scanner</h3>
This component checks for known vulnerabilities in installed WordPress plugins by analyzing various public and private data sources. It runs a series of automated security checks and provides recommendations.
<h3>Features</h3>
<ul>
<li>Detects outdated plugins</li>
<li>Flags abandoned plugins (not updated in over a year)</li>
<li>Checks WordPress version compatibility</li>
<li>Warns about low install counts</li>
<li>Analyzes plugin ratings</li>
<li>Checks against multiple vulnerability databases</li>
</ul>
<h3>Data Sources</h3>
<ul>
<li>
WordPress.org Plugin API 
Used to retrieve plugin metadata such as latest version, last updated date, rating, active installs, etc. 
📄 <a href="https://wordpress.org/about/privacy/" rel="ugc">Privacy Policy</a>
</li>
<li>
WPAzleen API (<code>/wp-json/wpx/v1/plugin-vulnerabilities</code>) 
Custom API endpoint to fetch known vulnerabilities for specific plugins and versions. 
📄 No sensitive data is transmitted. Private API complies with plugin author’s data policy. <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
WPVulnerability.net 
Public API used to retrieve CVE-based vulnerability data for WordPress plugins. 
📄 <a href="https://www.wpvulnerability.com/privacy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
National Vulnerability Database (NVD) 
Checks against known CVEs using official NVD data. 
📄 <a href="https://www.nist.gov/oism/site-privacy" rel="nofollow ugc">Privacy Policy</a>
</li>
</ul>
Activity Guard does not collect, store, or transmit any sensitive or personal information to performed the scan. All scans and checks are performed locally using public plugin metadata and vulnerability sources.
<h3>Freemius</h3>
Activity Guard an renamed version of Notifier to Slack utilizes the <a href="https://freemius.com/" rel="nofollow ugc">Freemius</a> SDK to collect limited telemetry data, only upon the user’s explicit confirmation. This data helps us troubleshoot issues efficiently and improve our product for a better user experience.
<h3>🔐 Key Points:</h3>
<ol>
<li>
No Data Collected by Default 
The Freemius SDK does not collect any data by default. Data collection only begins when the user consents via the admin notice displayed in the plugin interface.
</li>
<li>
User Confirmation Required 
Integration of the Freemius SDK does not automatically enable data collection. Data is only gathered after users confirm their consent.
</li>
<li>
Purpose of Data Collection 
The collected data is used solely to enhance the user experience, resolve issues more effectively, and improve the plugin’s functionality.
</li>
</ol>
For more details about Freemius and its data practices, please visit their <a href="https://freemius.com/privacy/" rel="nofollow ugc">FAQ page</a>.
Additionally, you can review WPAzleen’s <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">privacy policy</a> for further information.

Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard


Excellent plugin and easy to setup thanks for the video.


Original idea and super useful plugin!

Track user, support forum & system activity log, monitor WooCommerce analytics with complete WordPress Security with activity guard.

HameSlack vs Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard