liaison

A lightweight and easy-to-use plugin to secure and monitor your WordPress website.
Have you ever wondered when your website changed — and who did it? 
Liaison Site Prober makes it easy to track your WordPress site’s change history and user activities.
With Liaison Site Prober, you can easily monitor:
<ul>
<li>Who logged in, logged out, or attempted (and failed) to log in. </li>
<li>When a post was published or updated — and by whom. </li>
<li>When a plugin or theme was activated, deactivated, or modified. </li>
</ul>
Export to CSV — Quickly export your website’s activity log for auditing or backup purposes.
The plugin tracks:
<ul>
<li>Posts – Created, updated, deleted </li>
<li>Categories – Created, updated, deleted </li>
<li>Taxonomies – Created, updated, deleted </li>
<li>Comments – Created, approved, unapproved, trashed, untrashed, spammed, unspammed, deleted </li>
<li>Users – Login, logout, failed login, profile updated, registered, deleted </li>
<li>Plugins – Installed, updated, activated, deactivated, modified </li>
<li>Themes – Installed, updated, deleted, activated, modified (via Editor or Customizer)</li>
</ul>
<h3>Data Storage Isolation</h3>
To keep your WordPress database clean and easy to back up, 
all log data is stored in a dedicated custom table, fully isolated from your site’s core content.

Liaison Site Prober

Liaison Site Prober helps you log and track key changes and user actions on your WordPress website — giving you better visibility and security.

Digitizer

SiteAgent is the bridge between your WordPress sites and the <a href="https://my-aura.app" rel="nofollow ugc">Aura infrastructure dashboard</a> — a unified control center for teams managing multiple WordPress sites alongside servers, CDN, and DNS.
Install this plugin on any WordPress site to unlock remote management capabilities directly from Aura — no SSH, no wp-admin juggling, no manual logins.
<h4>What You Can Do</h4>
<ul>
<li>Monitor site health — See WordPress version, PHP version, installed plugins & themes, database info, and disk usage in real time.</li>
<li>Update plugins, themes & core remotely — Push updates to any connected site from the Aura dashboard, no wp-admin login.</li>
<li>Safe batch updates with auto-rollback — Run chunked updates with health checks; if an update breaks the site, the plugin restores the previous version automatically.</li>
<li>Per-plugin rollback — Every update is zip-snapshotted first; restore any plugin to its last good state on demand.</li>
<li>Bulk translation & database upgrades — Update all language packs and run WordPress database migrations remotely.</li>
<li>One-click connect (magic link) — Connect a site to Aura straight from wp-admin — no manual token copy/paste.</li>
<li>AI-agent ready (MCP tools) — Exposes machine-readable tools (site context, safe plugin update, asset cleanup, vulnerability checks) for AI-driven management.</li>
<li>Zero frontend impact — The plugin only registers REST API endpoints. No scripts, no styles, no database queries on visitor-facing page loads.</li>
</ul>
<h4>How It Works</h4>
After activation, click Connect to Aura on the Settings → SiteAgent page for a one-click magic-link connection, or copy the Site Token shown once and paste it into your Aura dashboard manually. From that point, Aura communicates with your site over a signed, authenticated REST API to pull health data and push updates.
<h4>Security</h4>
Defence-in-depth protects every request:
<ol>
<li>WordPress Application Password — Standard WordPress auth with capability checks (<code>manage_options</code> / <code>update_*</code>). Only authorized administrators can trigger actions.</li>
<li>Hashed Site Token — A per-site token sent via the <code>X-Aura-Token</code> header. Only a SHA-256 hash is stored (never the raw token), compared timing-safely. Tokens from older versions migrate to a hash automatically.</li>
<li>Brute-force throttling — Repeated bad-token attempts from an IP are blocked.</li>
<li>Signed magic-link connect — The onboarding callback is HMAC-signed with a one-time secret and timestamp, so the token exchange can’t be hijacked or replayed.</li>
<li>IP / Domain allowlist (optional) — Restrict API access to your Aura instance, with Cloudflare and reverse-proxy header support.</li>
</ol>
You can rotate the token anytime from Settings → SiteAgent → Regenerate Token.
<h4>REST API Endpoints</h4>
Core endpoints under <code>/wp-json/aura/v1/</code>:
<ul>
<li><code>GET /status</code> — Full site health report</li>
<li><code>GET /updates</code> — Check available updates (core, plugins, themes, translations)</li>
<li><code>POST /update/core</code> / <code>/update/plugin</code> / <code>/update/theme</code> / <code>/update/translations</code> — Apply updates</li>
<li><code>POST /update/database</code> — Run WordPress database upgrades</li>
<li><code>POST /connect</code> — Magic-link token exchange (public, HMAC-signed, 10-minute expiry)</li>
</ul>
Version 2 endpoints under <code>/wp-json/aura/v2/</code>:
<ul>
<li><code>GET /health</code> — HTTP, PHP fatal, white-screen and DB connectivity checks</li>
<li><code>POST /update/batch</code> — Chunked batch updates with auto-rollback on health failure</li>
<li><code>POST /rollback/{plugin}</code> — Restore a plugin from its most recent backup</li>
</ul>
MCP tools under <code>/wp-json/aura/mcp/</code>:
<ul>
<li><code>POST /tools/list</code> / <code>POST /tools/execute</code> — Enumerate and run AI-agent tools</li>
<li><code>GET /context</code> — Full site context for AI decision-making</li>
</ul>
<h4>About Aura</h4>
Aura is a full-stack operations dashboard by <a href="https://digitizer.studio" rel="nofollow ugc">Digitizer</a> that brings servers, applications, DNS zones, and CDN pull zones from Cloudways, Hostinger VPS, Cloudflare, and Bunny.net into a single unified interface.
SiteAgent extends that reach into every WordPress installation — so you can manage your entire infrastructure, including WordPress sites, from one place.
<h4>Free to Use</h4>
The plugin is completely free and open source (GPLv2+). You need a free or paid Aura account to connect your sites. <a href="https://my-aura.app" rel="nofollow ugc">Sign up at my-aura.app</a>.
<h4>Links</h4>
<ul>
<li><a href="https://my-aura.app" rel="nofollow ugc">Aura Dashboard</a></li>
<li><a href="https://my-aura.app/siteagent" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://github.com/Digitizers/SiteAgent" rel="nofollow ugc">GitHub Repository</a></li>
<li><a href="https://digitizer.studio" rel="nofollow ugc">Digitizer</a></li>
</ul>

SiteAgent for Aura

Connect your WordPress site to the Aura dashboard for remote monitoring, plugin & theme updates, and maintenance — all from one place.

Liaison Site Prober vs SiteAgent for Aura