Frank Corso

SiteAlert

SiteAlert checks your WordPress installation to ensure that it is healthy, up to date, and secure. Use the SiteAlert page to quickly see the results of the checks using the simple color-coded sections.
Once installed, there will be a new SiteAlert page added to the Tools menu and heart icon to your admin bar if the results of these checks need attention.
Over 10,000 active installations and 280+ five star reviews!
<a href="https://sitealert.io/pricing" rel="nofollow ugc">Get instant alerts, premium performance monitoring, and more with our premium plan!</a>
<h4>Currently Checks</h4>
WordPress Version 
This plugin checks to make sure that your site is using the latest version of WordPress.
MySQL or MariaDB Version 
This plugin checks to make sure that your server is using a recent version of the database software.
PHP Version 
This plugin checks to ensure that your server is running a version of PHP that is still receiving security updates.
Plugin Updates 
This plugin checks to make sure all your plugins are up to date.
Inactive Plugins 
This will check to ensure that you do not have any inactive plugins.
Admin Username 
This check ensures that you do not have a user with the username of “admin” on your site.
Plugins No Longer Being Supported 
This plugin checks to see if you have any plugins installed that are no longer supported by the developer.
Theme Updates 
This plugin checks to make sure all of your themes are up to date.
SSL 
Checks to see if you have SSL on your site.
File Editor 
Checks if your site has disabled the file editor.
Spam Comments 
Checks to make sure you don’t have too many spam comments.
<h4>Need more?</h4>
Check out our affordable <a href="https://sitealert.io" rel="nofollow ugc">premium plan</a> that includes:
Email Notifications 
Receive summaries for all your sites including any warnings, broken links, and more!
Uptime Monitoring 
Get notified immediately via SMS or Email if your site goes down.
Page Speed Monitoring 
Keep track of how fast your site is loading.
Email Deliverability Monitoring 
SiteAlert will alert you if emails from your site are no longer being delivered.
Broken Link Monitoring 
Discover any broken links on your site before your visitors do.
Broken Images Monitoring 
Get notified if you have any broken images on your site.
Blacklist Monitoring 
SiteAlert will monitor dozens of lists and alert you if your site is blacklisted.
Moz Domain Authority Monitoring 
Monitor changes in your site’s Moz Domain Authority.
Alexa Rank Monitoring 
Monitor changes in your site’s Alexa Rank.
Accessibility Monitoring (Beta) 
SiteAlert will scan your site an alert you of potential accessibility concerns.
<a href="https://sitealert.io" rel="nofollow ugc">Learn more about our premium plan!</a>
<h4>Make Suggestions Or Contribute</h4>
SiteAlert <a href="https://github.com/SiteAlert/sitealert-wordpress-plugin" rel="nofollow ugc">is on GitHub</a>!
Optional REST API 
If you are a developer, this plugin integrates with the REST API. The endpoints can be enabled from the settings tab of the “SiteAlert” page in the tools menu.

SiteAlert (Formerly WP Health)

Peace of mind that your site is secure and running smoothly. Performance monitoring, security checks, and instant alerts if your site goes down.

lukmeyer

LukStack Uptime Monitor is a lightweight yet powerful website monitoring solution built for agencies, freelancers, and web professionals who manage multiple websites.
Track uptime, response times, and SSL certificate expiration for all your client sites from a single WordPress dashboard. When something goes wrong, you will know immediately through email notifications or webhook integrations with Slack, Discord, and other services.
<h4>Reliable Monitoring Out of the Box</h4>
Unlike plugins that rely on WordPress Cron (which only runs when someone visits your site), LukStack Uptime Monitor includes a built-in remote cron server operated by the plugin author and hosted on AWS in the EU (Frankfurt) region. Your site is automatically registered on plugin activation and the server triggers your monitoring checks every minute — reliably, even on low-traffic sites. Aggregate environment data (WordPress/PHP versions, locale, site count) is transmitted to keep the service compatible; no admin emails, user accounts, or visitor data are sent. See the Privacy section for the full field list. No third-party cron services like cron-job.org or UptimeRobot required.
<h4>Free Plan Features</h4>
<ul>
<li>Uptime Monitoring – Automatic checks every 15 minutes</li>
<li>Monitor up to 2 websites</li>
<li>Webhook Support – Native integration with Slack, Discord, Microsoft Teams, and generic webhooks</li>
<li>Manual Checks – Test any site instantly with one click</li>
<li>Dashboard Widget – Quick status overview right on your WordPress dashboard</li>
</ul>
<h4>Pro Plan Features</h4>
<ul>
<li>Everything in Free</li>
<li>Monitor up to 100 websites</li>
<li>5 minute check interval for faster downtime detection</li>
<li>SSL Certificate Monitoring – Get warned before certificates expire</li>
<li>Website Performance Tracking – Monitor response times with millisecond precision</li>
</ul>
<h4>Who Is This For?</h4>
<ul>
<li>Web Agencies managing client websites</li>
<li>Freelancers maintaining multiple projects</li>
<li>Site Owners who want peace of mind</li>
<li>DevOps Teams needing a simple monitoring solution</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Add a website URL to monitor</li>
<li>LukStack Uptime Monitor checks the site automatically</li>
<li>If the site goes down or returns an error, you get notified</li>
<li>When the site recovers, you get a recovery notification</li>
</ol>
<h4>Webhook Integrations</h4>
LukStack Uptime Monitor automatically formats notifications for popular services:
<ul>
<li>Slack – Rich message attachments with color-coded severity</li>
<li>Discord – Embedded messages with status information</li>
<li>Microsoft Teams – Via generic webhook connector</li>
<li>Zapier / Make – JSON payload for custom automations</li>
</ul>
<h4>Privacy</h4>
LukStack Uptime Monitor stores the URLs you choose to monitor and their status data. No personal information (admin emails, user accounts, site content) is collected by the plugin itself.
The plugin does transmit data to the following external services:
<ul>
<li>LukStack Cron Server (operated by the plugin author, hosted on AWS EU Frankfurt) — receives your site URL, a locally generated shared secret, and aggregate environment data (WordPress/PHP versions, locale, site count, multisite flag, Freemius opt-in status) on plugin activation and on each authenticated trigger response, then triggers monitoring checks on your site every minute. Your Freemius user ID is included only if you have actively opted in via the Freemius dialog. See the External services section below for the full field list.</li>
<li>Freemius (license management and opt-in usage tracking) — anonymized data only when you explicitly opt in. See https://freemius.com/privacy/</li>
<li>Webhook URLs (Slack, Discord, etc.) — only when you configure them and only when a monitored site changes status.</li>
</ul>
All external transmissions are described in detail in the External services section below.
<h3>External services</h3>
This plugin connects to external services as part of its core monitoring functionality. Below is a description of each service, what data is sent, and when.
<h4>Monitored Websites</h4>
LukStack Uptime Monitor sends HTTP requests to the website URLs you add for monitoring. This is the core functionality of the plugin and is required to check uptime and response times. An SSL connection on port 443 is also made to check the SSL certificate expiration date for HTTPS sites (Pro). These requests are sent automatically by the built-in cron server (see below) and when you manually click “Check now”. The data sent is a standard HTTP GET request with a custom user agent header. No personal data is transmitted.
<h4>LukStack Cron Server</h4>
This plugin connects to the LukStack cron server to ensure reliable monitoring checks even when your WordPress site has no visitors. Because no dedicated privacy policy URL is published for this service, the full data-handling details are documented below.
Service operator
Operated by Luk Meyer (plugin author). Contact: via the WordPress.org support forum for this plugin (https://wordpress.org/support/plugin/lukstack-uptime-monitor/).
Hosting and location
Hosted on Amazon Web Services (AWS), region eu-central-1 (Frankfurt, Germany). Data does not leave the EU. The service uses AWS Lambda, AWS DynamoDB, and AWS EventBridge Scheduler. AWS acts as a data processor under a standard data processing agreement.
Server endpoint: https://gt5zheubf8.execute-api.eu-central-1.amazonaws.com
What data is transmitted FROM your site TO the cron server
On plugin activation and when an admin visits the WordPress admin (throttled with exponential backoff):
<ul>
<li>Your site URL (value of WordPress home_url())</li>
<li>A 48-character shared secret, randomly generated on your site, stored in your own wp_options table. This secret is used only to authenticate incoming trigger requests. It is not a WordPress password or account credential.</li>
<li>The plugin version (e.g. “2.4.0”)</li>
<li>Aggregate environment fields used to understand which WordPress/PHP combinations are in use: WordPress version, PHP version, site locale (e.g. “en_US”), multisite flag, and the number of websites you have added to monitoring.</li>
<li>A coarse Freemius opt-in status label: one of “paying”, “trial”, “pending”, “registered”, “anonymous”, or “unknown”. This lets the operator distinguish anonymous from opted-in installs in aggregate metrics.</li>
<li>Your Freemius user ID (numeric) — only if you have actively opted in via the Freemius dialog. Anonymous installs never transmit this field.</li>
<li>The same payload is included in the response of each authenticated trigger request, so the operator sees up-to-date environment data over time.</li>
</ul>
No admin email, no user account email, no site content, no visitor data, and no credentials are transmitted. Sites running on <code>localhost</code>, <code>127.0.0.1</code>, or reserved TLDs (<code>.local</code>, <code>.test</code>, <code>.localhost</code>, <code>.example</code>, <code>.invalid</code>) are excluded from registration entirely.
What data is transmitted FROM the cron server TO your site
Every minute, the cron server sends an HTTP POST request to the REST endpoint /wp-json/lukstack/v1/trigger on your site, authenticated via the X-LukStack-Secret header. The request body is empty. The sole purpose of this request is to trigger the plugin’s internal monitoring logic.
What data is stored on the cron server
<ul>
<li>Site URL</li>
<li>Shared secret (needed to authenticate triggers — transmitted over HTTPS only)</li>
<li>A SHA-256 hash of the site URL used as record key</li>
<li>Plan type (Free or Pro) — used to gate trigger frequency server-side</li>
<li>Plugin version, WordPress version, PHP version, site locale (e.g. “en_US”), multisite flag, and the number of monitored sites — used to understand environment compatibility and prioritize fixes</li>
<li>Freemius opt-in status label (“paying”, “trial”, “pending”, “registered”, “anonymous”, “unknown”) — used to distinguish opted-in installs from anonymous in aggregate metrics</li>
<li>Your Freemius user ID — only if you have actively opted in via the Freemius dialog</li>
<li>Timestamps: registration time, last successful trigger, last failed trigger, consecutive failure counter</li>
<li>Last error message if any</li>
</ul>
No logs of monitored sites, no uptime data, no visitor data, no admin emails, no user account emails, no site content.
Data retention
Data is kept only as long as the plugin is installed on your site. When the plugin is uninstalled, the plugin best-effort calls a <code>/v1/deregister</code> endpoint on the cron server with your site URL and secret, after which the record is removed. If the deregister call fails (e.g. network error or transient backend issue), the site is additionally marked inactive on the cron server after approximately 100 consecutive failed trigger attempts (about 100 minutes) and no further requests are sent. Inactive records may be purged periodically.
Your rights and how to exercise them
You can at any time:
<ul>
<li>Disable the remote cron by deactivating the plugin — triggers stop, but the record remains on the server until auto-expiry. To remove the record immediately, fully uninstall the plugin: the plugin sends a deregister call on uninstall.</li>
<li>Request deletion of your site’s record by posting in the plugin’s WordPress.org support forum with your site URL (or a hash of it). Records are typically deleted within 7 days of a confirmed request.</li>
<li>Rotate the shared secret by re-registering (the settings page exposes a “Force re-register now” button when WP_DEBUG is enabled in your wp-config.php).</li>
</ul>
Security
<ul>
<li>All transmissions are over HTTPS (TLS).</li>
<li>Incoming triggers to your site are validated using hash_equals() (constant-time comparison) to prevent timing attacks.</li>
<li>The shared secret is stored with autoload disabled and is not exposed in the admin UI unless WP_DEBUG is enabled.</li>
</ul>
Legal basis (GDPR)
The processing described above is necessary for the performance of the service you enabled by installing this plugin (Art. 6 (1) (b) GDPR). The data processed consists of technical identifiers (URL, secret, timestamps), aggregate environment metadata (versions, locale, site count, multisite flag, opt-in status), and — only when you opt in via Freemius — your Freemius user ID. No special categories of personal data (Art. 9 GDPR) are involved.
<h4>Freemius</h4>
This plugin uses Freemius SDK for license management, usage tracking (opt-in only), and the upgrade flow. When a user opts in, anonymized data such as the site URL, WordPress version, PHP version, and plugin version may be sent to Freemius servers. Users can opt out at any time.
This service is provided by Freemius, Inc. 
Terms of Service: https://freemius.com/terms/ 
Privacy Policy: https://freemius.com/privacy/
<h4>Slack (optional)</h4>
If you configure a Slack webhook URL in the plugin settings, LukStack Uptime Monitor sends POST requests to the Slack Incoming Webhooks API when a monitored site changes status (goes down, recovers, or has SSL issues). The data sent includes the website URL, its status, response time, and a timestamp. No personal data is transmitted.
This service is provided by Slack Technologies, LLC / Salesforce, Inc. 
Terms of Service: https://slack.com/terms-of-service 
Privacy Policy: https://slack.com/privacy-policy
<h4>Discord (optional)</h4>
If you configure a Discord webhook URL in the plugin settings, LukStack Uptime Monitor sends POST requests to the Discord Webhooks API when a monitored site changes status. The data sent includes the website URL, its status, response time, and a timestamp. No personal data is transmitted.
This service is provided by Discord, Inc. 
Terms of Service: https://discord.com/terms 
Privacy Policy: https://discord.com/privacy
<h4>Generic Webhooks (optional)</h4>
You may configure any third-party webhook URL (e.g. Microsoft Teams, Zapier, Make, or a custom endpoint). When a monitored site changes status, a POST request with a JSON payload is sent to that URL. The data sent includes the website URL, its status, response time, and a timestamp. No personal data is transmitted. Please refer to the terms of service and privacy policy of the respective service you configure.
<h3>Additional Information</h3>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8 or higher</li>
<li>PHP 7.4 or higher</li>
<li>PHP extensions: curl, openssl, json</li>
</ul>
<h4>Support</h4>
For support questions, please use the WordPress.org support forum for this plugin.
<h4>Credits</h4>
Developed by Luk Meyer.

LukStack Uptime Monitor

Monitor multiple websites for uptime, performance, and SSL certificate expiration. Built-in remote cron for reliable checks — no third-party services  …

SiteAlert (Formerly WP Health) vs LukStack Uptime Monitor