lumturioteam

Lumturio offers users and agencies powerful and reliable tools to monitor CMS security. 
As such, our platform empowers you to quickly and efficiently monitor all your 
clients’ websites, allowing you to proactively update them and keep them safe.
This plugin offers a way to collect data from WordPress websites 
to check on modules and versions used, instead of having every site 
check for updates separately.
This allows administrators to build their own monitoring interface to 
check on multiple installations at once.

Lumturio WP Monitor

Lumturio offers users and agencies powerful and reliable tools to monitor CMS security.

Digitizer

SiteAgent is the bridge between your WordPress sites and the <a href="https://my-aura.app" rel="nofollow ugc">Aura infrastructure dashboard</a> — a unified control center for teams managing multiple WordPress sites alongside servers, CDN, and DNS.
Install this plugin on any WordPress site to unlock remote management capabilities directly from Aura — no SSH, no wp-admin juggling, no manual logins.
<h4>What You Can Do</h4>
<ul>
<li>Monitor site health — See WordPress version, PHP version, installed plugins & themes, database info, and disk usage in real time.</li>
<li>Update plugins, themes & core remotely — Push updates to any connected site from the Aura dashboard, no wp-admin login.</li>
<li>Safe batch updates with auto-rollback — Run chunked updates with health checks; if an update breaks the site, the plugin restores the previous version automatically.</li>
<li>Per-plugin rollback — Every update is zip-snapshotted first; restore any plugin to its last good state on demand.</li>
<li>Bulk translation & database upgrades — Update all language packs and run WordPress database migrations remotely.</li>
<li>One-click connect (magic link) — Connect a site to Aura straight from wp-admin — no manual token copy/paste.</li>
<li>AI-agent ready (MCP tools) — Exposes machine-readable tools (site context, safe plugin update, asset cleanup, vulnerability checks) for AI-driven management.</li>
<li>Zero frontend impact — The plugin only registers REST API endpoints. No scripts, no styles, no database queries on visitor-facing page loads.</li>
</ul>
<h4>How It Works</h4>
After activation, click Connect to Aura on the Settings → SiteAgent page for a one-click magic-link connection, or copy the Site Token shown once and paste it into your Aura dashboard manually. From that point, Aura communicates with your site over a signed, authenticated REST API to pull health data and push updates.
<h4>Security</h4>
Defence-in-depth protects every request:
<ol>
<li>WordPress Application Password — Standard WordPress auth with capability checks (<code>manage_options</code> / <code>update_*</code>). Only authorized administrators can trigger actions.</li>
<li>Hashed Site Token — A per-site token sent via the <code>X-Aura-Token</code> header. Only a SHA-256 hash is stored (never the raw token), compared timing-safely. Tokens from older versions migrate to a hash automatically.</li>
<li>Brute-force throttling — Repeated bad-token attempts from an IP are blocked.</li>
<li>Signed magic-link connect — The onboarding callback is HMAC-signed with a one-time secret and timestamp, so the token exchange can’t be hijacked or replayed.</li>
<li>IP / Domain allowlist (optional) — Restrict API access to your Aura instance, with Cloudflare and reverse-proxy header support.</li>
</ol>
You can rotate the token anytime from Settings → SiteAgent → Regenerate Token.
<h4>REST API Endpoints</h4>
Core endpoints under <code>/wp-json/aura/v1/</code>:
<ul>
<li><code>GET /status</code> — Full site health report</li>
<li><code>GET /updates</code> — Check available updates (core, plugins, themes, translations)</li>
<li><code>POST /update/core</code> / <code>/update/plugin</code> / <code>/update/theme</code> / <code>/update/translations</code> — Apply updates</li>
<li><code>POST /update/database</code> — Run WordPress database upgrades</li>
<li><code>POST /connect</code> — Magic-link token exchange (public, HMAC-signed, 10-minute expiry)</li>
</ul>
Version 2 endpoints under <code>/wp-json/aura/v2/</code>:
<ul>
<li><code>GET /health</code> — HTTP, PHP fatal, white-screen and DB connectivity checks</li>
<li><code>POST /update/batch</code> — Chunked batch updates with auto-rollback on health failure</li>
<li><code>POST /rollback/{plugin}</code> — Restore a plugin from its most recent backup</li>
</ul>
MCP tools under <code>/wp-json/aura/mcp/</code>:
<ul>
<li><code>POST /tools/list</code> / <code>POST /tools/execute</code> — Enumerate and run AI-agent tools</li>
<li><code>GET /context</code> — Full site context for AI decision-making</li>
</ul>
<h4>About Aura</h4>
Aura is a full-stack operations dashboard by <a href="https://digitizer.studio" rel="nofollow ugc">Digitizer</a> that brings servers, applications, DNS zones, and CDN pull zones from Cloudways, Hostinger VPS, Cloudflare, and Bunny.net into a single unified interface.
SiteAgent extends that reach into every WordPress installation — so you can manage your entire infrastructure, including WordPress sites, from one place.
<h4>Free to Use</h4>
The plugin is completely free and open source (GPLv2+). You need a free or paid Aura account to connect your sites. <a href="https://my-aura.app" rel="nofollow ugc">Sign up at my-aura.app</a>.
<h4>Links</h4>
<ul>
<li><a href="https://my-aura.app" rel="nofollow ugc">Aura Dashboard</a></li>
<li><a href="https://my-aura.app/siteagent" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://github.com/Digitizers/SiteAgent" rel="nofollow ugc">GitHub Repository</a></li>
<li><a href="https://digitizer.studio" rel="nofollow ugc">Digitizer</a></li>
</ul>

SiteAgent for Aura

Connect your WordPress site to the Aura dashboard for remote monitoring, plugin & theme updates, and maintenance — all from one place.

Lumturio WP Monitor vs SiteAgent for Aura