shadowscan

ShadowScan Security Link pairs your site to the ShadowScan portal and keeps it in sync with heartbeat status, Guard Layer signals, login abuse detection, and security commands.
ShadowScan does not install, activate, or configure third-party security tools. If another security plugin is present, the connector only records its presence as metadata.
<h3>External services</h3>
This plugin connects to external services to sync status, process security workflows, and support optional diagnostics.
<ul>
<li>Service: ShadowScan API (hosted at Supabase Edge Functions)</li>
<li>URL: https://foemwjtosslaiynduiyt.supabase.co/functions/v1/</li>
<li>Used for: site pairing, heartbeat sync, command polling, command-result upload, subscription/policy sync, and support contact submissions.</li>
<li>Data sent and when: site URL, WordPress version, PHP version, connector version, Guard Layer/control status, heartbeat timestamps, and command execution metadata whenever the connector syncs with ShadowScan; contact form fields only when an admin submits support contact.</li>
<li>Terms: https://shadowscan.com.au/terms</li>
<li>
Privacy: https://shadowscan.com.au/privacy
</li>
<li>
Service: Have I Been Pwned Passwords API
</li>
<li>URL: https://api.pwnedpasswords.com</li>
<li>Used for: optional breached-password checks in password policy enforcement.</li>
<li>Data sent and when: k-anonymity password hash prefix (first 5 SHA-1 characters, no raw passwords) only when a password is checked by the policy flow.</li>
<li>Terms: https://haveibeenpwned.com/TermsOfUse</li>
<li>
Privacy: https://haveibeenpwned.com/Privacy
</li>
<li>
Service: Sentry
</li>
<li>URL: https://sentry.io</li>
<li>Used for: optional error and fatal-event telemetry to assist troubleshooting.</li>
<li>Data sent and when: error event metadata (such as exception messages, stack traces, and runtime context) only after an admin explicitly enables Sentry telemetry in plugin settings and a Sentry DSN is configured; the optional MU diagnostics helper can send early-startup fatal errors only while both Sentry telemetry and remote diagnostics are enabled.</li>
<li>Terms: https://sentry.io/terms/</li>
<li>Privacy: https://sentry.io/privacy/</li>
</ul>
<h3>Third-Party Libraries</h3>
This plugin bundles: 
* pragmarx/google2fa (MIT License) 
* bacon/bacon-qr-code (BSD-2-Clause; Copyright (c) 2017-present, Ben Scholzen “DASPRiD”)
<h3>Hooks</h3>
shadowscan_log 
Fires when the plugin emits an internal log message. You can hook this in a must‑use plugin or theme if you want to capture logs.

ShadowScan Security Link

Connects your WordPress site to the ShadowScan portal for heartbeats, guard signals, and security commands.

Jack Fischer

There are numerous plugins for emailing or otherwise notifying administrators when users log into WordPress. However, this is not desirable for installations with hundreds or thousands of users. Admin Login Monitor provides more managable email alerts, just for administrator accounts.
Example alert email,
<pre><code>`
</code></pre>
Hello Alice,
The account ‘bob’ just logged into example.com
User Login ‘bob’ 
User Display Name ‘Bob’ 
User Email bob@example.com 
User ID ‘8’ 
User Registered 2019-08-25 19:33:18
Forwarded IP Address 96.224.58.71 (HTTP_X_FORWARDED_FOR) 
Connected IP Address 96.224.58.71 (possibly a CDN or proxy)
Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15
This notification is generated by the WordPress Admin Login Monitor plugin installed on example.com 
 `
For convenience investigating IP addresses, email notifications link to Ipinfo.io (https://ipinfo.io/). 
Ipinfo.io Terms of Service: https://ipinfo.io/terms-of-service 
Ipinfo.io Privacy Policy: https://ipinfo.io/privacy-policy

Admin Login Monitor

Email site administrators about all administrator logins.

ShadowScan Security Link vs Admin Login Monitor