shadowscan

<p>ShadowScan Security Link pairs your site to the ShadowScan portal and keeps it in sync with heartbeat status, Guard Layer signals, login abuse detection, and security commands.</p>
<p>ShadowScan does not install, activate, or configure third-party security tools. If another security plugin is present, the connector only records its presence as metadata.</p>
<h3>External services</h3>
<p>This plugin connects to external services to sync status, process security workflows, and support optional diagnostics.</p>
<ul>
<li>Service: ShadowScan API (hosted at Supabase Edge Functions)</li>
<li>URL: https://foemwjtosslaiynduiyt.supabase.co/functions/v1/</li>
<li>Used for: site pairing, heartbeat sync, command polling, command-result upload, subscription/policy sync, and support contact submissions.</li>
<li>Data sent and when: site URL, WordPress version, PHP version, connector version, Guard Layer/control status, heartbeat timestamps, and command execution metadata whenever the connector syncs with ShadowScan; contact form fields only when an admin submits support contact.</li>
<li>Terms: https://shadowscan.com.au/terms</li>
<li>
<p>Privacy: https://shadowscan.com.au/privacy</p>
</li>
<li>
<p>Service: Have I Been Pwned Passwords API</p>
</li>
<li>URL: https://api.pwnedpasswords.com</li>
<li>Used for: optional breached-password checks in password policy enforcement.</li>
<li>Data sent and when: k-anonymity password hash prefix (first 5 SHA-1 characters, no raw passwords) only when a password is checked by the policy flow.</li>
<li>Terms: https://haveibeenpwned.com/TermsOfUse</li>
<li>
<p>Privacy: https://haveibeenpwned.com/Privacy</p>
</li>
<li>
<p>Service: Sentry</p>
</li>
<li>URL: https://sentry.io</li>
<li>Used for: optional error and fatal-event telemetry to assist troubleshooting.</li>
<li>Data sent and when: error event metadata (such as exception messages, stack traces, and runtime context) only after an admin explicitly enables Sentry telemetry in plugin settings and a Sentry DSN is configured; the optional MU diagnostics helper can send early-startup fatal errors only while both Sentry telemetry and remote diagnostics are enabled.</li>
<li>Terms: https://sentry.io/terms/</li>
<li>Privacy: https://sentry.io/privacy/</li>
</ul>
<h3>Third-Party Libraries</h3>
<p>This plugin bundles:<br />
* pragmarx/google2fa (MIT License)<br />
* bacon/bacon-qr-code (BSD-2-Clause; Copyright (c) 2017-present, Ben Scholzen “DASPRiD”)</p>
<h3>Hooks</h3>
<p>shadowscan_log<br />
Fires when the plugin emits an internal log message. You can hook this in a must‑use plugin or theme if you want to capture logs.</p>


ShadowScan Security Link

Connects your WordPress site to the ShadowScan portal for heartbeats, guard signals, and security commands.

wpgear

<p>Now, “Hack-Info” – it is a standalone independent complete tool.<br />
Previously, it was like Add-On for “iThemes Security”. But time has shown that it is bad to be dependent on others.. Especially when their DB structure changes.</p>
<p>“Hack-Info” make improve the perception of information about events, which is important to quickly and in detail see and understand. Without the need for unnecessary clicks and conversions. “Hack-Info” notifies the site administrator by providing a detailed list of IP addresses, requests – attempts to scan resources and search for passwords with names.</p>
<h4>Features</h4>
<ul>
<li>An additional level of security for your site.</li>
<li>Simply, Briefly and in Detail.</li>
<li>Even without going to the site admin area, you will be informed about the activity of the current day.</li>
<li>Any person can be a recipient of notifications. Not necessarily the Administrator.</li>
<li>Adjustable interval for the formation of the Digest.</li>
<li>The e-mail report received contains full and detailed information about the nature of attempts to hack your site:
<ul>
<li>In cases of Brite Force, user names are displayed.<br />
So, one glance is enough for you to understand what you’re dealing with: a routine search or a targeted attack on an already compromised name.</li>
<li>In cases of URL scanning, requests are displayed.</li>
</ul>
</li>
<li>Timely analysis of such requests allows you to draw conclusions about which Plugins, Themes or Scripts are vulnerable, and in time to abandon their use in their projects.</li>
<li>The information digest is compact and minimalistic, but at the same time it easily and visually gives a complete information picture. You do not have to go to your site to get more details. Therefore, even being outside the usual workspace, on a slow Internet, but having the ability to read mail – you will be fully informed, and therefore, if necessary, you can make the necessary and fast decisions. And this approach is many times more effective than messages like: “To see the list of blocked IP addresses and to know the parameters of requests – click on the button …” And then, still it will be necessary to login …</li>
</ul>


Hack-Info

Ext Security. Monitoring about evil hacking attempts. Our reports - Simply, Briefly and in Detail.

ShadowScan Security Link vs Hack-Info