gabrielrosca

Login Security with Telegram Alerts is your comprehensive solution for fortifying WordPress login security and staying informed about critical site activities. It actively combats brute-force attacks, enhances user authentication with multi-factor options, and provides real-time alerts directly to your Telegram. Scalable for any site size, from personal blogs to large enterprises, it ensures your WordPress site remains secure and you’re always in the loop.
Key Features: 
Login Security with Telegram Alerts is packed with powerful features designed to give you peace of mind and full control over your site’s access.
Brute-Force Protection: Automatically blocks suspicious IP addresses after a configurable number of failed login attempts, effectively preventing dictionary attacks and credential stuffing.
Real-time Telegram Notifications: Receive instant alerts for failed login attempts and successful logins, delivered directly to your chosen Telegram channel, group, or private chat. This provides immediate awareness of critical site events, enabling prompt action.
Comprehensive Activity Logging: Maintains detailed records of both failed and successful login events, capturing critical information such as IP addresses, usernames, login times, and user agents. This log is invaluable for auditing and identifying suspicious patterns.
IP Management: Block or unblock IP addresses directly from the Activity Log with one-click actions. Administrators can manually manage IP blacklists and whitelists from the plugin’s settings page. 
WordPress Core Files Integrity Check: Verify that WordPress core files haven’t been tampered with by comparing them against official checksums from WordPress.org.
File Permissions Management: Automatically check and fix file permissions to match WordPress security standards, ensuring your installation follows best practices. 
Custom Admin URL: Hide your wp-admin login URL by creating a custom access point, adding an extra layer of security by obscurity.
Geolocation Integration: Includes location data in Telegram notifications, adding crucial context to security alerts and aiding in the investigation of suspicious activities. 
User-Friendly Admin Interface: An intuitive, tabbed settings page contributes to a clean and easy-to-use experience. 
Why Choose Login Security with Telegram Alerts?
Comprehensive Security: Provides advanced features that actively defend your site against common and persistent threats. 
Instant Awareness: Critical updates are delivered directly to Telegram, facilitating immediate action and providing peace of mind to site administrators. 
User-Friendly: Engineered for quick setup, often achievable in minutes, with an intuitive interface that makes configuration accessible to users of all technical levels. 
Performance Optimized: Built with efficiency in mind, ensuring that robust security measures do not compromise site speed. 
Dedicated Support: A passionate team is committed to providing prompt and helpful support, aiming to ensure users maximize the plugin’s potential. 
Compatibility & Requirements:
WordPress Version: 5.0 or higher (Tested up to 6.9) 
PHP Version: 7.2 or higher (PHP 7.4+ recommended for optimal performance and security) 
Performance Considerations: 
Login Security with Telegram Alerts is designed with performance in mind:
Efficient API Calls: When interacting with external services like Telegram’s API, the plugin uses WordPress’s built-in HTTP API for reliable and performant requests, minimizing impact on page load times. 
Optimized Database Interactions: Designed to minimize database queries and employs best practices for data storage and retrieval, ensuring your site’s database remains lean and responsive. 
Lightweight Codebase: Development emphasizes avoiding bloated scripts and unnecessary assets, ensuring the plugin adds minimal overhead to site resources. 
Security Best Practices: 
Beyond merely claiming to be “secure,” Login Security with Telegram Alerts implements rigorous security measures:
Nonces: All critical actions and forms within the plugin utilize WordPress Nonces to protect against Cross-Site Request Forgery (CSRF) attacks. 
Input Sanitization: All user input is rigorously sanitized before processing or storage to prevent malicious code injection, such as Cross-Site Scripting (XSS) attacks. 
Output Escaping: Data displayed on both the frontend and backend is properly escaped to prevent XSS vulnerabilities. 
Capability Checks: Access to plugin functionalities is strictly controlled by checking user capabilities using current_user_can(), preventing unauthorized users from performing actions they are not permitted to. 
Regular Audits: The plugin’s codebase undergoes regular scanning and updates to address emerging security vulnerabilities. 
Internationalization (i18n): 
Login Security with Telegram Alerts is fully internationalized, allowing for seamless translation into any language. All strings are meticulously wrapped in gettext functions, and a dedicated text domain (login-security-with-telegram-alerts) ensures compatibility with WordPress’s robust translation system.
<h3>Third-Party Services</h3>
This plugin may connect to external services to provide certain features:
Telegram API (api.telegram.org) 
– Used for: Sending security notifications to your configured Telegram bot 
– Triggered when: You enable Telegram notifications and configure a bot token and chat ID 
– Privacy Policy: https://telegram.org/privacy 
– Terms: https://telegram.org/tos
IP Geolocation (ip-api.com) 
– Used for: Looking up geographical location of login attempts 
– Triggered when: Geolocation is enabled in settings (optional feature) 
– Privacy Policy: https://ip-api.com/docs/legal 
– Data sent: IP addresses only
All external service connections are optional and only occur when explicitly enabled by the administrator. No data is sent without your configuration and consent.

Login Security with Telegram Alerts

Login Security with Telegram Alerts protects WordPress logins, stops brute force, logs activity, and sends real-time Telegram alerts.

wpazleen

Sabbir Sam

wpxpertise

Function Deck

Activity Guard is a powerful all-in-one WordPress Activity Log, WooCommerce Events, and Security Plugin designed to track every activity happening on your WordPress website.
It monitors user behavior, admin changes, WooCommerce events and analytics, forum activities, and system-level changes in real time. Whenever a critical change occurs, it instantly sends notifications via the Admin Dashboard, Slack, Telegram, and Email.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/KXT0QcnFLOg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
🚀 <a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Activity Guard</a> | 📖 <a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a> | 💬 <a href="https://wpazleen.com/support/" rel="nofollow ugc">Pro Support</a>
Let’s grow, connect, and build together! 🚀
<ul>
<li>
🤝 Join our community on Facebook: <a href="https://www.facebook.com/wpazleens" rel="nofollow ugc">Facebook</a>
</li>
<li>
🎥 Subscribe to our YouTube channel: <a href="https://www.youtube.com/channel/UCqR5SPvn6N2ZBq7AyYKfEnA" rel="nofollow ugc">YouTube</a>
</li>
<li>
🐦 Follow us on X (Twitter): <a href="https://x.com/wpazleen" rel="nofollow ugc">X / Twitter</a>
</li>
</ul>
This top-rated Activity Log and Security Plugin helps you track user activity in WordPress efficiently. From user login and logout, role changes, plugin activation or deactivation, to tracking and blocking suspicious IP addresses- everything can be managed easily through Activity Guard. As a result, your user log and email log always remain clean, organized, and accessible.
The plugin’s detailed logging system clearly records where the change originated from (IP or source address), who made the change (user or admin), and when it occurred. This makes it a powerful Activity Log plugin with built-in IP address tracking.
It is one of the best WordPress plugins for tracking all changes and plays a vital role in keeping your website secure. Whether you are a site owner, developer, WooCommerce store manager, or an agency, Activity Guard helps you detect threats early, monitor changes accurately, and take immediate action.
Trusted by administrators and security professionals, Activity Guard offers real-time user monitoring, a comprehensive audit log, and advanced WordPress security features. With the built-in User Session Management, you can instantly log off any suspicious user, ensuring maximum protection for your website.
<h3>🔝 All Features at a Glance  </h3>
<ul>
<li>
🔐 Website Security & Advanced Protection 
Proactively protect your site against unauthorized access, attacks, and suspicious behavior with layered security controls.
</li>
<li>
📊 Complete Activity Log System 
Log every meaningful event across WordPress core, users, content, plugins, themes, and WooCommerce all in one place.
</li>
<li>
🧩 User Tracking & System Logs 
Monitor user sessions, role changes, login history, system actions, cron jobs, and background processes.
</li>
<li>
🛎️ Multi-Channel Notifier System 
Receive real-time alerts via Slack, Telegram, Email, and Admin Notifications for critical events and security incidents.
</li>
<li>
🛒 WooCommerce Monitoring & Analytics 
Includes a full WooCommerce activity log, sales analytics, customer insights, and order behavior tracking.
</li>
<li>
🔍 Plugin Vulnerability Scanner 
Detect vulnerable, outdated, abandoned, or risky plugins before they become a threat.
</li>
<li>
📈 WordPress Forum Monitoring 
Track forum activities, topic changes, replies, moderation actions, and user interactions.
</li>
<li>
🧱 Firewall with Emergency Shutdown 
Instantly block malicious traffic and force-logout active sessions during emergencies.
</li>
<li>
⏱ Cron Job & Downtime Monitoring 
Monitor scheduled tasks, detect failures, and get alerts when your site goes down.
</li>
</ul>
<h3>🛍️ Perfect for</h3>
<ul>
<li>
Enhancing Website Security 
Instantly detect suspicious activity on WordPress, block threats, and remotely trigger emergency shutdowns.
</li>
<li>
Admin & Team Management 
Learn how to monitor user activity on a WordPress site with detailed audit logs, role tracking, and accountability.
</li>
<li>
Developers & Agencies 
Track plugin/theme updates, configuration changes, fatal errors, and debug logs across multiple client sites.
</li>
<li>
Real-Time Activity Logging 
Track who changed a WordPress page or post, including edits, deletions, status changes, and metadata updates.
</li>
<li>
WooCommerce Store Owners 
Receive alerts for orders, payments, refunds, coupons, stock changes, shipping updates, and customer actions.
</li>
<li>
WooCommerce Incomplete Orders Analytics 
Analyze abandoned carts, checkout drop-offs, recovery potential, recovery rate, and customer cart interactions.
</li>
</ul>
<h3>🛡️ Advanced Security Features</h3>
<ul>
<li>IP Blocking (Manual, CIDR, Conditional Rules) </li>
<li>Emergency shutdown for active user sessions </li>
<li>Cloudflare Turnstile login protection </li>
<li>Custom HTTP security headers & WordPress version hiding </li>
<li>Core file integrity scanner </li>
<li>Bot detection and automatic blocking </li>
<li>Disable or restrict XML-RPC </li>
<li>File Integrity Monitoring (core, plugins, themes) </li>
<li>404 error tracking </li>
<li>Block vulnerability scanners </li>
<li>Block TOR network access </li>
<li>Admin dashboard visitor tracking </li>
<li>Login rate limiting (login log protection) </li>
<li>Suspicious HTTP request alerts </li>
<li>Cron job and downtime monitoring</li>
</ul>
<h3>🧱 Plugin Security Scanner</h3>
<ul>
<li>Automatically scan plugins, themes, and core files for known vulnerabilities </li>
<li>Detect outdated or insecure plugins </li>
<li>Flag abandoned or poorly rated plugins </li>
<li>Confirm compatibility with current WordPress version </li>
<li>Cross-check issues against multiple vulnerability databases</li>
</ul>
<h3>🔔 Updates and Notifier System  </h3>
<ul>
<li>🚨 Real-time alerts for Core File Changes via Slack, Telegram, and Email </li>
<li>📦 Plugin and theme update alerts with updater name  </li>
<li>🛍 WooCommerce sales and coupon usage notifications  </li>
<li>🕒 Incomplete order follow-ups to recover lost sales  </li>
<li>✏️ Product edits, stock changes, and shipping updates  </li>
<li>📪 Billing and shipping address modifications  </li>
<li>🌟 Daily review and 🆘 support notifications  </li>
<li>📈 Weekly plugin download summaries  </li>
<li>📝 Page, post, taxonomy updates and deletions (Helps Track who changed a page or post)  </li>
<li>📬 Track logins, registrations, user role changes (Comprehensive login log)  </li>
<li>🛠 Admin settings updates and form submission alerts </li>
</ul>
<h3>👨‍💻 Admin & Developer Tools  </h3>
<ul>
<li>🔒 Maintenance mode toggle  </li>
<li>🧭 Menu and widget activity tracking  </li>
<li>📑 Plugin/theme activation and deactivation logs  </li>
<li>🧰 Script modification detection  </li>
<li>🧾 Log all HTTP security header changes  </li>
<li>📉 Debug logs and fatal error detection  </li>
<li>📤 Email delivery tracking through detailed email log  </li>
<li>👀 Form integration alerts (Contact Form 7, Simple Form, more)  </li>
</ul>
<h3>📈 Why Choose Activity Guard Over Other Activity Log Plugins?  </h3>
Activity Guard is your comprehensive solution for Real-time user monitoring WP. With robust Security features, WooCommerce integrations, and Real-time alerts for critical changes, it offers unparalleled functionality compared to other plugins. 
<ul>
<li>✅ Rich, intuitive Activity Log with advanced filtering  </li>
<li>📊 Visual charts and graphs for clear audit log summaries (Easily Generate activity log reports for WordPress)  </li>
<li>⚡ Real-time Slack and email notifier alerts  </li>
<li>🛠 Smart automation and developer-friendly tools  </li>
<li>🔐 Military-grade security features with minimal bloat  </li>
<li>🛍 Tailored support for WooCommerce events (A must-have WooCommerce activity log)  </li>
<li>📧 Built-in email log and User Tracking  </li>
<li>🧘 Clean, modern interface anyone can use</li>
</ul>
<h3>Final Thoughts</h3>
Activity Guard is the Best WordPress plugin to track all changes, acting as your all-in-one activity log, notifier, user log, email log, and security plugin designed to keep your WordPress site safe, efficient, and well-monitored.
With real-time alerts, detailed logs, and robust features, you’ll never miss a thing from How to monitor user activity on a WordPress site to site vulnerabilities.
Try Activity Guard today and bring total visibility and WordPress Security to your WordPress site.
Don’t just take our word for it – try Activity Guard yourself and experience the difference!
Secure your WordPress site and stay informed with Activity Guard – your all-in-one solution for Real-time user monitoring WP and WordPress activity log plugin.
<h3>Documentation & Support</h3>
<ul>
<li><a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Website</a></li>
<li><a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://www.youtube.com/@WPAzleen/playlists" rel="nofollow ugc">Tutorials</a></li>
<li><a href="https://youtu.be/jOyU2jxTmfY?si=xoaxFLgFhszXmuFx" rel="nofollow ugc">Setup Video</a></li>
</ul>
<h3>External services</h3>
<h3>Slack Webhook Integration</h3>
Activity Guard allows you to send notifications of all active actions directly to your Slack workspace using Slack webhooks. This feature enables real-time monitoring of plugin activities.
<h3>🔧 Webhook Configuration</h3>
The plugin uses the Slack incoming webhook URL you provide to send notifications to your Slack channel.
To set up an incoming webhook for your Slack workspace:
<ol>
<li>Create a new app or use an existing one </li>
<li>Activate <a href="https://api.slack.com/messaging/webhooks" rel="nofollow ugc">Incoming Webhooks</a> for your app </li>
<li>Add a new webhook to your workspace </li>
<li>Copy the webhook URL and paste it into the plugin settings</li>
</ol>
<h3>Cloudflare Turnstile</h3>
Activity Guard also uses <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> to enhance security and prevent spam. For more details, please refer to Cloudflare’s <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">privacy policy</a>.
<h3>Plugin Security Scanner</h3>
This component checks for known vulnerabilities in installed WordPress plugins by analyzing various public and private data sources. It runs a series of automated security checks and provides recommendations.
<h3>Features</h3>
<ul>
<li>Detects outdated plugins</li>
<li>Flags abandoned plugins (not updated in over a year)</li>
<li>Checks WordPress version compatibility</li>
<li>Warns about low install counts</li>
<li>Analyzes plugin ratings</li>
<li>Checks against multiple vulnerability databases</li>
</ul>
<h3>Data Sources</h3>
<ul>
<li>
WordPress.org Plugin API 
Used to retrieve plugin metadata such as latest version, last updated date, rating, active installs, etc. 
📄 <a href="https://wordpress.org/about/privacy/" rel="ugc">Privacy Policy</a>
</li>
<li>
WPAzleen API (<code>/wp-json/wpx/v1/plugin-vulnerabilities</code>) 
Custom API endpoint to fetch known vulnerabilities for specific plugins and versions. 
📄 No sensitive data is transmitted. Private API complies with plugin author’s data policy. <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
WPVulnerability.net 
Public API used to retrieve CVE-based vulnerability data for WordPress plugins. 
📄 <a href="https://www.wpvulnerability.com/privacy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
National Vulnerability Database (NVD) 
Checks against known CVEs using official NVD data. 
📄 <a href="https://www.nist.gov/oism/site-privacy" rel="nofollow ugc">Privacy Policy</a>
</li>
</ul>
Activity Guard does not collect, store, or transmit any sensitive or personal information to performed the scan. All scans and checks are performed locally using public plugin metadata and vulnerability sources.
<h3>Freemius</h3>
Activity Guard an renamed version of Notifier to Slack utilizes the <a href="https://freemius.com/" rel="nofollow ugc">Freemius</a> SDK to collect limited telemetry data, only upon the user’s explicit confirmation. This data helps us troubleshoot issues efficiently and improve our product for a better user experience.
<h3>🔐 Key Points:</h3>
<ol>
<li>
No Data Collected by Default 
The Freemius SDK does not collect any data by default. Data collection only begins when the user consents via the admin notice displayed in the plugin interface.
</li>
<li>
User Confirmation Required 
Integration of the Freemius SDK does not automatically enable data collection. Data is only gathered after users confirm their consent.
</li>
<li>
Purpose of Data Collection 
The collected data is used solely to enhance the user experience, resolve issues more effectively, and improve the plugin’s functionality.
</li>
</ol>
For more details about Freemius and its data practices, please visit their <a href="https://freemius.com/privacy/" rel="nofollow ugc">FAQ page</a>.
Additionally, you can review WPAzleen’s <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">privacy policy</a> for further information.

Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard


Excellent plugin and easy to setup thanks for the video.


Original idea and super useful plugin!

Track user, support forum & system activity log, monitor WooCommerce analytics with complete WordPress Security with activity guard.

Login Security with Telegram Alerts vs Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard