Ohm·Tang

OhmTang CFT is a comprehensive WordPress security plugin that seamlessly integrates Cloudflare Turnstile’s advanced CAPTCHA protection into your website. Say goodbye to traditional annoying CAPTCHAs and embrace a frictionless, privacy-focused security solution that effectively blocks bots while providing a smooth user experience. Completely free Cloudflare Turnstile integration for WordPress and WooCommerce – no premium features, no hidden costs, just powerful spam protection.
📢 DISCLAIMER: Trademarks and brands are the property of their respective owners.
<h4>🎛️ Granular Form Control</h4>
Individual Form Toggle and Each verification form supports custom error messages, allowing you to personalize the display when users fail the Turnstile challenge.- Complete Flexibility
Take full control over your security implementation with our granular form management system:
<ul>
<li>Per-Form Enable/Disable – Every supported form can be individually activated or deactivated</li>
<li>WordPress Core Forms:
<ul>
<li>✅ Login Form – Toggle on/off</li>
<li>✅ Registration Form – Toggle on/off </li>
<li>✅ Lost Password Form – Toggle on/off</li>
<li>✅ Comment Form – Toggle on/off ( on/off login or no login user)</li>
</ul>
</li>
<li>WooCommerce Forms:
<ul>
<li>✅ Login Form – Toggle on/off</li>
<li>✅ Registration Form – Toggle on/off</li>
<li>✅ Lost Password Form – Toggle on/off</li>
<li>✅ Checkout Form (Support Full site editting Block Checkout page and Traditional Checkout page) – Toggle on/off ( on/off login or no login user)</li>
</ul>
</li>
</ul>
<h4>🎯 Smart Conditional Protection</h4>
Intelligent Verification Based on User Status
Advanced conditional protection for better user experience:
<ul>
<li>
Checkout Page Smart Settings:
<ul>
<li>🔄 Option to skip verification for logged-in users – Provide seamless checkout experience for returning customers</li>
<li>🔒 Always protect guest checkouts – Secure anonymous transactions</li>
<li>⚡ Reduce friction for trusted customers while maintaining security</li>
</ul>
</li>
<li>
Comment Form Intelligent Protection:
<ul>
<li>🔄 Toggle verification for logged-in users – Choose whether authenticated users need CAPTCHA</li>
<li>🛡️ Always protect guest comments – Prevent spam from anonymous visitors</li>
<li>📝 Respect trusted commenters – Regular commentators can enjoy streamlined experience</li>
</ul>
</li>
<li>
Flexible User-Based Rules:
<ul>
<li>🎪 Customize protection based on user roles and status</li>
<li>🔐 Balance security and usability intelligently</li>
<li>📊 Reduce unnecessary verification for trusted users</li>
</ul>
</li>
</ul>
<h4>🛡️ Complete WordPress Core Protection</h4>
Protect every aspect of your WordPress site with comprehensive form security:
<ul>
<li>Login Security – Prevent brute force attacks on wp-login.php and admin areas (toggleable)</li>
<li>User Registration – Stop spam registrations and fake account creation (toggleable)</li>
<li>Comment Moderation – Eliminate spam comments automatically with smart user detection</li>
<li>Password Recovery – Secure lost password forms against abuse (toggleable)</li>
<li>Contact Forms – Compatible with popular contact form plugins</li>
<li>Your favorite Contact Forms – If you need to integrate your preferred form, contact me: ohmtang@outlook.com</li>
</ul>
<h4>🛒 Advanced WooCommerce Integration</h4>
Secure your online store and protect your revenue with dedicated WooCommerce protection:
<ul>
<li>Checkout Security – Prevent fraudulent orders and fake transactions with smart user detection</li>
<li>Customer Registration – Ensure genuine customer accounts (toggleable)</li>
<li>Guest Checkout – Protect checkout process for all users with conditional logic</li>
<li>Login Forms – Secure customer login and authentication (toggleable)</li>
<li>Review Systems – Block fake product reviews and ratings</li>
</ul>
<h4>⚙️ Advanced Features & Customization</h4>
<ul>
<li>Smart Theme Options – Light, dark, and auto themes that adapt to your site design</li>
<li>Flexible Styles – Normal, Flexible and Compact 3 styles where Turnstile appears on each form</li>
<li>Granular Control – Enable/disable protection for individual forms with one click</li>
<li>Conditional Logic – Smart rules based on user login status</li>
<li>Performance Optimized – Minimal impact on page load times</li>
<li>Mobile Responsive – Perfectly adapted for all devices</li>
<li>Accessibility Ready – Designed with accessibility in mind</li>
</ul>
<h4>🔧 Developer Friendly</h4>
<ul>
<li>Extensive hooks and filters for customization</li>
<li>Clean, well-documented codebase</li>
<li>WordPress coding standards compliant</li>
<li>Easy integration with custom themes and plugins</li>
<li>Comprehensive error logging and debugging</li>
</ul>
<h4>🌍 Multi-language Ready</h4>
<ul>
<li>Full translation support with .pot file</li>
</ul>
<h4>Why Cloudflare Turnstile?</h4>
<ul>
<li>User-Friendly – No annoying puzzles, image recognition, or text challenges</li>
<li>Privacy-First – GDPR compliant and privacy-respecting</li>
<li>Free Forever – Cloudflare’s free tier provides robust protection</li>
<li>Advanced Detection – Machine learning and behavioral analysis</li>
<li>Fast Implementation – Simple setup with Site Key and Secret Key</li>
</ul>
Experience the perfect balance of security and usability! With individual form controls and smart conditional protection, you can secure your site without frustrating your legitimate users.

OhmTang CFT

Integrate Cloudflare Turnstile CAPTCHA for WordPress & WooCommerce forms with custom error messages, each form controlled individually

wpazleen

Sabbir Sam

wpxpertise

Function Deck

Activity Guard is a powerful all-in-one WordPress Activity Log, WooCommerce Events, and Security Plugin designed to track every activity happening on your WordPress website.
It monitors user behavior, admin changes, WooCommerce events and analytics, forum activities, and system-level changes in real time. Whenever a critical change occurs, it instantly sends notifications via the Admin Dashboard, Slack, Telegram, and Email.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/KXT0QcnFLOg?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
🚀 <a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Activity Guard</a> | 📖 <a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a> | 💬 <a href="https://wpazleen.com/support/" rel="nofollow ugc">Pro Support</a>
Let’s grow, connect, and build together! 🚀
<ul>
<li>
🤝 Join our community on Facebook: <a href="https://www.facebook.com/wpazleens" rel="nofollow ugc">Facebook</a>
</li>
<li>
🎥 Subscribe to our YouTube channel: <a href="https://www.youtube.com/channel/UCqR5SPvn6N2ZBq7AyYKfEnA" rel="nofollow ugc">YouTube</a>
</li>
<li>
🐦 Follow us on X (Twitter): <a href="https://x.com/wpazleen" rel="nofollow ugc">X / Twitter</a>
</li>
</ul>
This top-rated Activity Log and Security Plugin helps you track user activity in WordPress efficiently. From user login and logout, role changes, plugin activation or deactivation, to tracking and blocking suspicious IP addresses- everything can be managed easily through Activity Guard. As a result, your user log and email log always remain clean, organized, and accessible.
The plugin’s detailed logging system clearly records where the change originated from (IP or source address), who made the change (user or admin), and when it occurred. This makes it a powerful Activity Log plugin with built-in IP address tracking.
It is one of the best WordPress plugins for tracking all changes and plays a vital role in keeping your website secure. Whether you are a site owner, developer, WooCommerce store manager, or an agency, Activity Guard helps you detect threats early, monitor changes accurately, and take immediate action.
Trusted by administrators and security professionals, Activity Guard offers real-time user monitoring, a comprehensive audit log, and advanced WordPress security features. With the built-in User Session Management, you can instantly log off any suspicious user, ensuring maximum protection for your website.
<h3>🔝 All Features at a Glance  </h3>
<ul>
<li>
🔐 Website Security & Advanced Protection 
Proactively protect your site against unauthorized access, attacks, and suspicious behavior with layered security controls.
</li>
<li>
📊 Complete Activity Log System 
Log every meaningful event across WordPress core, users, content, plugins, themes, and WooCommerce all in one place.
</li>
<li>
🧩 User Tracking & System Logs 
Monitor user sessions, role changes, login history, system actions, cron jobs, and background processes.
</li>
<li>
🛎️ Multi-Channel Notifier System 
Receive real-time alerts via Slack, Telegram, Email, and Admin Notifications for critical events and security incidents.
</li>
<li>
🛒 WooCommerce Monitoring & Analytics 
Includes a full WooCommerce activity log, sales analytics, customer insights, and order behavior tracking.
</li>
<li>
🔍 Plugin Vulnerability Scanner 
Detect vulnerable, outdated, abandoned, or risky plugins before they become a threat.
</li>
<li>
📈 WordPress Forum Monitoring 
Track forum activities, topic changes, replies, moderation actions, and user interactions.
</li>
<li>
🧱 Firewall with Emergency Shutdown 
Instantly block malicious traffic and force-logout active sessions during emergencies.
</li>
<li>
⏱ Cron Job & Downtime Monitoring 
Monitor scheduled tasks, detect failures, and get alerts when your site goes down.
</li>
</ul>
<h3>🛍️ Perfect for</h3>
<ul>
<li>
Enhancing Website Security 
Instantly detect suspicious activity on WordPress, block threats, and remotely trigger emergency shutdowns.
</li>
<li>
Admin & Team Management 
Learn how to monitor user activity on a WordPress site with detailed audit logs, role tracking, and accountability.
</li>
<li>
Developers & Agencies 
Track plugin/theme updates, configuration changes, fatal errors, and debug logs across multiple client sites.
</li>
<li>
Real-Time Activity Logging 
Track who changed a WordPress page or post, including edits, deletions, status changes, and metadata updates.
</li>
<li>
WooCommerce Store Owners 
Receive alerts for orders, payments, refunds, coupons, stock changes, shipping updates, and customer actions.
</li>
<li>
WooCommerce Incomplete Orders Analytics 
Analyze abandoned carts, checkout drop-offs, recovery potential, recovery rate, and customer cart interactions.
</li>
</ul>
<h3>🛡️ Advanced Security Features</h3>
<ul>
<li>IP Blocking (Manual, CIDR, Conditional Rules) </li>
<li>Emergency shutdown for active user sessions </li>
<li>Cloudflare Turnstile login protection </li>
<li>Custom HTTP security headers & WordPress version hiding </li>
<li>Core file integrity scanner </li>
<li>Bot detection and automatic blocking </li>
<li>Disable or restrict XML-RPC </li>
<li>File Integrity Monitoring (core, plugins, themes) </li>
<li>404 error tracking </li>
<li>Block vulnerability scanners </li>
<li>Block TOR network access </li>
<li>Admin dashboard visitor tracking </li>
<li>Login rate limiting (login log protection) </li>
<li>Suspicious HTTP request alerts </li>
<li>Cron job and downtime monitoring</li>
</ul>
<h3>🧱 Plugin Security Scanner</h3>
<ul>
<li>Automatically scan plugins, themes, and core files for known vulnerabilities </li>
<li>Detect outdated or insecure plugins </li>
<li>Flag abandoned or poorly rated plugins </li>
<li>Confirm compatibility with current WordPress version </li>
<li>Cross-check issues against multiple vulnerability databases</li>
</ul>
<h3>🔔 Updates and Notifier System  </h3>
<ul>
<li>🚨 Real-time alerts for Core File Changes via Slack, Telegram, and Email </li>
<li>📦 Plugin and theme update alerts with updater name  </li>
<li>🛍 WooCommerce sales and coupon usage notifications  </li>
<li>🕒 Incomplete order follow-ups to recover lost sales  </li>
<li>✏️ Product edits, stock changes, and shipping updates  </li>
<li>📪 Billing and shipping address modifications  </li>
<li>🌟 Daily review and 🆘 support notifications  </li>
<li>📈 Weekly plugin download summaries  </li>
<li>📝 Page, post, taxonomy updates and deletions (Helps Track who changed a page or post)  </li>
<li>📬 Track logins, registrations, user role changes (Comprehensive login log)  </li>
<li>🛠 Admin settings updates and form submission alerts </li>
</ul>
<h3>👨‍💻 Admin & Developer Tools  </h3>
<ul>
<li>🔒 Maintenance mode toggle  </li>
<li>🧭 Menu and widget activity tracking  </li>
<li>📑 Plugin/theme activation and deactivation logs  </li>
<li>🧰 Script modification detection  </li>
<li>🧾 Log all HTTP security header changes  </li>
<li>📉 Debug logs and fatal error detection  </li>
<li>📤 Email delivery tracking through detailed email log  </li>
<li>👀 Form integration alerts (Contact Form 7, Simple Form, more)  </li>
</ul>
<h3>📈 Why Choose Activity Guard Over Other Activity Log Plugins?  </h3>
Activity Guard is your comprehensive solution for Real-time user monitoring WP. With robust Security features, WooCommerce integrations, and Real-time alerts for critical changes, it offers unparalleled functionality compared to other plugins. 
<ul>
<li>✅ Rich, intuitive Activity Log with advanced filtering  </li>
<li>📊 Visual charts and graphs for clear audit log summaries (Easily Generate activity log reports for WordPress)  </li>
<li>⚡ Real-time Slack and email notifier alerts  </li>
<li>🛠 Smart automation and developer-friendly tools  </li>
<li>🔐 Military-grade security features with minimal bloat  </li>
<li>🛍 Tailored support for WooCommerce events (A must-have WooCommerce activity log)  </li>
<li>📧 Built-in email log and User Tracking  </li>
<li>🧘 Clean, modern interface anyone can use</li>
</ul>
<h3>Final Thoughts</h3>
Activity Guard is the Best WordPress plugin to track all changes, acting as your all-in-one activity log, notifier, user log, email log, and security plugin designed to keep your WordPress site safe, efficient, and well-monitored.
With real-time alerts, detailed logs, and robust features, you’ll never miss a thing from How to monitor user activity on a WordPress site to site vulnerabilities.
Try Activity Guard today and bring total visibility and WordPress Security to your WordPress site.
Don’t just take our word for it – try Activity Guard yourself and experience the difference!
Secure your WordPress site and stay informed with Activity Guard – your all-in-one solution for Real-time user monitoring WP and WordPress activity log plugin.
<h3>Documentation & Support</h3>
<ul>
<li><a href="https://wpazleen.com/notifier-to-slack/" rel="nofollow ugc">Website</a></li>
<li><a href="https://wpazleen.com/docs/" rel="nofollow ugc">Documentation</a></li>
<li><a href="https://www.youtube.com/@WPAzleen/playlists" rel="nofollow ugc">Tutorials</a></li>
<li><a href="https://youtu.be/jOyU2jxTmfY?si=xoaxFLgFhszXmuFx" rel="nofollow ugc">Setup Video</a></li>
</ul>
<h3>External services</h3>
<h3>Slack Webhook Integration</h3>
Activity Guard allows you to send notifications of all active actions directly to your Slack workspace using Slack webhooks. This feature enables real-time monitoring of plugin activities.
<h3>🔧 Webhook Configuration</h3>
The plugin uses the Slack incoming webhook URL you provide to send notifications to your Slack channel.
To set up an incoming webhook for your Slack workspace:
<ol>
<li>Create a new app or use an existing one </li>
<li>Activate <a href="https://api.slack.com/messaging/webhooks" rel="nofollow ugc">Incoming Webhooks</a> for your app </li>
<li>Add a new webhook to your workspace </li>
<li>Copy the webhook URL and paste it into the plugin settings</li>
</ol>
<h3>Cloudflare Turnstile</h3>
Activity Guard also uses <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">Cloudflare Turnstile</a> to enhance security and prevent spam. For more details, please refer to Cloudflare’s <a href="https://www.cloudflare.com/application-services/products/turnstile/" rel="nofollow ugc">privacy policy</a>.
<h3>Plugin Security Scanner</h3>
This component checks for known vulnerabilities in installed WordPress plugins by analyzing various public and private data sources. It runs a series of automated security checks and provides recommendations.
<h3>Features</h3>
<ul>
<li>Detects outdated plugins</li>
<li>Flags abandoned plugins (not updated in over a year)</li>
<li>Checks WordPress version compatibility</li>
<li>Warns about low install counts</li>
<li>Analyzes plugin ratings</li>
<li>Checks against multiple vulnerability databases</li>
</ul>
<h3>Data Sources</h3>
<ul>
<li>
WordPress.org Plugin API 
Used to retrieve plugin metadata such as latest version, last updated date, rating, active installs, etc. 
📄 <a href="https://wordpress.org/about/privacy/" rel="ugc">Privacy Policy</a>
</li>
<li>
WPAzleen API (<code>/wp-json/wpx/v1/plugin-vulnerabilities</code>) 
Custom API endpoint to fetch known vulnerabilities for specific plugins and versions. 
📄 No sensitive data is transmitted. Private API complies with plugin author’s data policy. <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
WPVulnerability.net 
Public API used to retrieve CVE-based vulnerability data for WordPress plugins. 
📄 <a href="https://www.wpvulnerability.com/privacy/" rel="nofollow ugc">Privacy Policy</a>
</li>
<li>
National Vulnerability Database (NVD) 
Checks against known CVEs using official NVD data. 
📄 <a href="https://www.nist.gov/oism/site-privacy" rel="nofollow ugc">Privacy Policy</a>
</li>
</ul>
Activity Guard does not collect, store, or transmit any sensitive or personal information to performed the scan. All scans and checks are performed locally using public plugin metadata and vulnerability sources.
<h3>Freemius</h3>
Activity Guard an renamed version of Notifier to Slack utilizes the <a href="https://freemius.com/" rel="nofollow ugc">Freemius</a> SDK to collect limited telemetry data, only upon the user’s explicit confirmation. This data helps us troubleshoot issues efficiently and improve our product for a better user experience.
<h3>🔐 Key Points:</h3>
<ol>
<li>
No Data Collected by Default 
The Freemius SDK does not collect any data by default. Data collection only begins when the user consents via the admin notice displayed in the plugin interface.
</li>
<li>
User Confirmation Required 
Integration of the Freemius SDK does not automatically enable data collection. Data is only gathered after users confirm their consent.
</li>
<li>
Purpose of Data Collection 
The collected data is used solely to enhance the user experience, resolve issues more effectively, and improve the plugin’s functionality.
</li>
</ol>
For more details about Freemius and its data practices, please visit their <a href="https://freemius.com/privacy/" rel="nofollow ugc">FAQ page</a>.
Additionally, you can review WPAzleen’s <a href="https://wpazleen.com/privacy-policy/" rel="nofollow ugc">privacy policy</a> for further information.

Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard


Excellent plugin and easy to setup thanks for the video.


Original idea and super useful plugin!

Track user, support forum & system activity log, monitor WooCommerce analytics with complete WordPress Security with activity guard.

OhmTang CFT vs Complete Security, Activity Log & WooCommerce Analytics Tracker – Activity Guard