Seth Broder

OnyxFlo Watchdog quietly monitors your WooCommerce orders in the background and takes snapshots at key points in the order lifecycle (checkout, thank you page, and status changes). It then compares those snapshots to detect suspicious changes or data inconsistencies.
OnyxFlo Watchdog uses a lightweight custom database table (<code>{prefix}onyxflo_watchdog_snapshots</code>) to store order snapshots. Uninstalling the plugin does not automatically delete existing snapshot data, so you can retain a historical audit log if needed.
Examples of what OnyxFlo Watchdog can help catch:
<ul>
<li>Orders where the cart or subtotal has changed between checkout and payment.</li>
<li>Orders that have been modified after payment but before fulfillment.</li>
<li>Data mismatches caused by buggy plugins, imports, or external integrations.</li>
</ul>
When a potential issue is found:
<ul>
<li>The order is changed to a custom status: Watchdog Flagged.</li>
<li>A clear warning notice appears on the order screen in wp-admin.</li>
<li>(Optional) An email alert can be sent to a configured address.</li>
<li>A snapshot history is stored so you can see what changed and when.</li>
</ul>
This plugin is aimed at stores that care about data integrity and want an extra layer of safety before orders are shipped or refunded.
<h3>Key Features</h3>
<ul>
<li>
Order snapshots 
Automatically logs snapshots of WooCommerce orders at:
<ul>
<li>Checkout (classic and block checkout)</li>
<li>Thank you page</li>
<li>Order status changes</li>
</ul>
</li>
<li>
Mismatch detection 
Compares snapshots to detect:
<ul>
<li>Cart changes (items added/removed/quantities changed)</li>
<li>Subtotal changes over a tolerance threshold</li>
<li>(Extensible for more rules later)</li>
</ul>
</li>
<li>
Custom order status: “Watchdog Flagged” 
Suspicious orders are moved into a dedicated status:
<ul>
<li>Highlighted in the admin order list</li>
<li>Clearly labeled so your team knows to review before fulfilling</li>
</ul>
</li>
<li>
Snapshot viewer 
View the snapshot history for a given order directly in wp-admin to see what changed over time.
</li>
<li>
Logging 
Optional file logging for debugging and audit trails, stored inside the WordPress uploads directory (<code>/wp-content/uploads/onyxflo-watchdog/</code>).
</li>
<li>
Lightweight and focused 
No bloat, no marketing overlays, no tracking. Just tools to help you protect your orders.
</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WooCommerce (latest major version recommended)</li>
<li>WordPress 5.8+</li>
<li>PHP 7.4+ (PHP 8.x supported)</li>
</ul>

OnyxFlo Watchdog for WooCommerce

Monitors WooCommerce orders for changes or mismatches and automatically flags suspicious orders to help ensure accuracy and prevent errors.

Mirco Babini

Alfio Piccione

Andrea Capone

Babini Mazzari

NIS2 provides activity logging, file integrity monitoring, access protection and vulnerability scanning to help sites comply with the EU NIS2 directive.
<h3>NIS2 Compliance: The 1st WordPress NIS2 Plugin</h3>
NIS2 is the second iteration of the EU’s Network and Information Security (NIS) directive, a primary cybersecurity law that expands the scope of the original NIS directive to cover more sectors and entities, such as energy, transport, banking, healthcare, and digital infrastructure.
The directive mandates stricter security requirements, includes supply chain security, and assigns personal accountability to management for non-compliance.
<h3>Quick and easy setup</h3>
Choose which modules you want to enable, configure their settings and start monitoring your site in minutes.
Available modules are: 
– Activity Logger: logs important events such as user logins, content changes, plugin/theme installations and more. 
– File Integrity Monitoring: monitors core WordPress files, themes and plugins for unauthorized changes. 
– Access Protection: protects login and admin pages with Google reCAPTCHA v2 and limits access 
– Vulnerability Scanner: scans installed plugins and themes for known vulnerabilities using the WPScan database. 
– Compliance Checklist: provides a checklist of security best practices to help you improve your site’s security posture
<h3>Third party services</h3>
This plugin relies on the following third-party/external services:
Google reCAPTCHA v2 
Used to protect the WordPress login forms against automated abuse and spam. 
– Data sent: when a user interacts with the login form, the plugin loads the reCAPTCHA JavaScript API and sends the user’s IP address and form interaction data to Google’s reCAPTCHA service in order to validate the request. 
– Service provider: Google LLC 
– Terms of Service: https://www.google.com/intl/en/policies/terms/ 
– Privacy Policy: https://policies.google.com/privacy
IP-API.com 
Used to perform basic geolocation based on the visitor’s IP address (e.g., country, city, ISP). 
– Data sent: the visitor’s public IP address is queried against the ip-api.com service. No additional personal or sensitive data is transmitted. 
– Service provider: IP-API.com 
– Terms of Service: https://ip-api.com/docs/legal 
– Privacy Policy: https://ip-api.com/docs/legal
<h3>F.A.Q.</h3>
Does the plugin conflict with security plugins? 
No. NIS2 detects other popular security plugins and integrates with them when possible.

NIS2 Compliance

A comprehensive security compliance plugin implementing logging, monitoring and vulnerability management features.

OnyxFlo Watchdog for WooCommerce vs NIS2 Compliance