shadowscan

ShadowScan Security Link pairs your site to the ShadowScan portal and keeps it in sync with heartbeat status, Guard Layer signals, login abuse detection, and security commands.
ShadowScan does not install, activate, or configure third-party security tools. If another security plugin is present, the connector only records its presence as metadata.
<h3>External services</h3>
This plugin connects to external services to sync status, process security workflows, and support optional diagnostics.
<ul>
<li>Service: ShadowScan API (hosted at Supabase Edge Functions)</li>
<li>URL: https://foemwjtosslaiynduiyt.supabase.co/functions/v1/</li>
<li>Used for: site pairing, heartbeat sync, command polling, command-result upload, subscription/policy sync, and support contact submissions.</li>
<li>Data sent and when: site URL, WordPress version, PHP version, connector version, Guard Layer/control status, heartbeat timestamps, and command execution metadata whenever the connector syncs with ShadowScan; contact form fields only when an admin submits support contact.</li>
<li>Terms: https://shadowscan.com.au/terms</li>
<li>
Privacy: https://shadowscan.com.au/privacy
</li>
<li>
Service: Have I Been Pwned Passwords API
</li>
<li>URL: https://api.pwnedpasswords.com</li>
<li>Used for: optional breached-password checks in password policy enforcement.</li>
<li>Data sent and when: k-anonymity password hash prefix (first 5 SHA-1 characters, no raw passwords) only when a password is checked by the policy flow.</li>
<li>Terms: https://haveibeenpwned.com/TermsOfUse</li>
<li>
Privacy: https://haveibeenpwned.com/Privacy
</li>
<li>
Service: Sentry
</li>
<li>URL: https://sentry.io</li>
<li>Used for: optional error and fatal-event telemetry to assist troubleshooting.</li>
<li>Data sent and when: error event metadata (such as exception messages, stack traces, and runtime context) only after an admin explicitly enables Sentry telemetry in plugin settings and a Sentry DSN is configured; the optional MU diagnostics helper can send early-startup fatal errors only while both Sentry telemetry and remote diagnostics are enabled.</li>
<li>Terms: https://sentry.io/terms/</li>
<li>Privacy: https://sentry.io/privacy/</li>
</ul>
<h3>Third-Party Libraries</h3>
This plugin bundles: 
* pragmarx/google2fa (MIT License) 
* bacon/bacon-qr-code (BSD-2-Clause; Copyright (c) 2017-present, Ben Scholzen “DASPRiD”)
<h3>Hooks</h3>
shadowscan_log 
Fires when the plugin emits an internal log message. You can hook this in a must‑use plugin or theme if you want to capture logs.

ShadowScan Security Link

Connects your WordPress site to the ShadowScan portal for heartbeats, guard signals, and security commands.

inkamedia

InkaTrace for Activity & Audit Log is a practical and lightweight WordPress activity monitoring plugin built for administrators, site managers, developers, agencies, schools, organizations, and businesses that need clear visibility into what is happening inside a WordPress site.
Whether you need a simple activity log for daily monitoring or a more structured audit trail for security review, content oversight, and operational accountability, InkaTrace helps you monitor important user actions, login activity, and system-related changes from one centralized admin interface.
InkaTrace is designed to provide a focused audit workflow without unnecessary complexity. The free edition covers essential monitoring and investigation needs, while the Pro edition expands the workflow with deeper compliance, reporting, export, and retention capabilities.
Free Activity Log Features
<ul>
<li>
Activity Log Table 
Review WordPress activity in a centralized log table with filters, search, and saved presets for faster daily review.
</li>
<li>
Incident Notes 
Add internal notes and basic incident status directly inside log detail so your team can keep investigation context in one place.
</li>
<li>
Dashboard Activity Widget 
Monitor recent site activity directly from the WordPress dashboard.
</li>
<li>
Failed Login Monitoring 
Track failed login attempts with warning and security-focused severity labels for faster awareness of suspicious patterns.
</li>
<li>
Optional Auto-Purge Controls 
Set log retention preferences to help keep the activity database manageable over time.
</li>
<li>
Optional IP Geolocation Consent 
Enrich public IP information from the admin area only when explicit consent is enabled.
</li>
<li>
Simple Access Control 
Administrators always have access, with an optional editor-view setting for teams that need limited visibility.
</li>
<li>
Lightweight Admin Workflow 
Use a focused interface built for practical audit review without overloading the dashboard.
</li>
</ul>
Pro Edition Expands the Workflow With
<ul>
<li>Compliance reports for summary-based audit review.</li>
<li>Forensic timeline for deeper investigation by date, user, IP, and event flow.</li>
<li>Extended retention, archive, and restore workflow for long-term audit history.</li>
<li>More advanced export and investigation workflow for teams that need deeper review.</li>
</ul>
Why Choose InkaTrace?
<ul>
<li>Focused and practical for day-to-day WordPress monitoring.</li>
<li>Security-aware workflow for suspicious login and activity review.</li>
<li>Designed for real admin use with filtering, notes, and investigation support.</li>
<li>Flexible enough to start lightweight and grow into deeper audit workflow with Pro.</li>
</ul>
Perfect For
<ul>
<li>Site administrators who need visibility into user and system activity.</li>
<li>Agencies managing client WordPress sites.</li>
<li>Schools and organizations that need accountability logs.</li>
<li>Businesses that want a simple audit trail for WordPress operations.</li>
<li>Teams that need login monitoring and investigation notes without an overly complex system.</li>
</ul>
<h3>Privacy</h3>
This plugin stores activity log records locally in your WordPress database.
For security auditing purposes, log entries can include: 
* User account information related to the action. 
* IP addresses. 
* User agent / device strings. 
* Log content describing the recorded action.
<h3>External Services</h3>
This plugin can call external IP geolocation services when an administrator enables IP geolocation consent in Settings and then opens IP details in the Activity Log.
Services used: 
* <code>https://ipapi.co/</code> 
* <code>https://ipwho.is/</code>
Data sent: 
* The visitor IP address stored in the activity log.
Purpose: 
* To display geographic/network context for audit and security investigation.
These requests are optional, only triggered from the admin UI, and never run on front-end page loads.
This plugin also includes an optional support contact form in the admin settings page.
Data sent when an administrator uses the support form: 
* The message subject entered by the user. 
* The message body entered by the user. 
* The optional email address entered by the user. 
* The site URL. 
* The installed plugin version.
Recipient: 
* <code>pt.inkamediautama@gmail.com</code>
Purpose: 
* To receive support requests, bug reports, feature requests, and product feedback initiated by the site administrator.
This request is only sent when the administrator manually submits the support form.

InkaTrace for Activity & Audit Log

Audit and monitor key WordPress activities across users, content, login activity, and system events in one admin log.

ShadowScan Security Link vs InkaTrace for Activity & Audit Log