shadowscan

<p>ShadowScan Security Link pairs your site to the ShadowScan portal and keeps it in sync with heartbeat status, Guard Layer signals, login abuse detection, and security commands.</p>
<p>ShadowScan does not install, activate, or configure third-party security tools. If another security plugin is present, the connector only records its presence as metadata.</p>
<h3>External services</h3>
<p>This plugin connects to external services to sync status, process security workflows, and support optional diagnostics.</p>
<ul>
<li>Service: ShadowScan API (hosted at Supabase Edge Functions)</li>
<li>URL: https://foemwjtosslaiynduiyt.supabase.co/functions/v1/</li>
<li>Used for: site pairing, heartbeat sync, command polling, command-result upload, subscription/policy sync, and support contact submissions.</li>
<li>Data sent and when: site URL, WordPress version, PHP version, connector version, Guard Layer/control status, heartbeat timestamps, and command execution metadata whenever the connector syncs with ShadowScan; contact form fields only when an admin submits support contact.</li>
<li>Terms: https://shadowscan.com.au/terms</li>
<li>
<p>Privacy: https://shadowscan.com.au/privacy</p>
</li>
<li>
<p>Service: Have I Been Pwned Passwords API</p>
</li>
<li>URL: https://api.pwnedpasswords.com</li>
<li>Used for: optional breached-password checks in password policy enforcement.</li>
<li>Data sent and when: k-anonymity password hash prefix (first 5 SHA-1 characters, no raw passwords) only when a password is checked by the policy flow.</li>
<li>Terms: https://haveibeenpwned.com/TermsOfUse</li>
<li>
<p>Privacy: https://haveibeenpwned.com/Privacy</p>
</li>
<li>
<p>Service: Sentry</p>
</li>
<li>URL: https://sentry.io</li>
<li>Used for: optional error and fatal-event telemetry to assist troubleshooting.</li>
<li>Data sent and when: error event metadata (such as exception messages, stack traces, and runtime context) only after an admin explicitly enables Sentry telemetry in plugin settings and a Sentry DSN is configured; the optional MU diagnostics helper can send early-startup fatal errors only while both Sentry telemetry and remote diagnostics are enabled.</li>
<li>Terms: https://sentry.io/terms/</li>
<li>Privacy: https://sentry.io/privacy/</li>
</ul>
<h3>Third-Party Libraries</h3>
<p>This plugin bundles:<br />
* pragmarx/google2fa (MIT License)<br />
* bacon/bacon-qr-code (BSD-2-Clause; Copyright (c) 2017-present, Ben Scholzen “DASPRiD”)</p>
<h3>Hooks</h3>
<p>shadowscan_log<br />
Fires when the plugin emits an internal log message. You can hook this in a must‑use plugin or theme if you want to capture logs.</p>


ShadowScan Security Link

Connects your WordPress site to the ShadowScan portal for heartbeats, guard signals, and security commands.

Ártica PFMS

<p>Pandora FMS WP is a <strong>monitoring plugin for WordPress</strong>. 100% free and OpenSource. It collect basic information from your WordPress and allow Pandora FMS to retrieve it remotely using a REST API. Some examples are new posts, comments or user logins in last hour. It also monitor if new plugins or themes has been isntalled, if a new user has been created of if a bruteforce login attempt has been made recently. You can expand easily by defining custom SQL queries to monitor other plugins or create your own SQL to collect information and sent it to Pandora FMS.</p>
<p>This plugin has been developed by <a href="https://pandorafms.com" title="Pandora FMS team" rel="nofollow ugc">Pandora FMS team</a>. Sourcecode is available at <a href="https://github.com/articaST/pandorafms-wp/" title="https://github.com/articaST/pandorafms-wp/" rel="nofollow ugc">https://github.com/articaST/pandorafms-wp/</a></p>
<p>Sections:</p>
<ul>
<li>
<p><strong>Dashboard:</strong> here, you can view a summary of the items monitored: plugins updated, version of WP and if they need an update, total users, new posts in last 24hr, new replies in 24hr and other checks.</p>
</li>
<li>
<p><strong>Audit records:</strong> You can view a table with user access data: users, IP, if the login has been correct or incorrect and how many times, and the date of the last access. Also can see if new plugins or themes have been installed and the date on which these events occurred.</p>
</li>
<li>
<p><strong>General Setup:</strong> Set general options:</p>
<ul>
<li>API Settings
<ul>
<li>List of IPs with access to the API.</li>
<li>Set the time to show new data in the API.</li>
</ul>
</li>
<li>Delete Logs Time
<ul>
<li>Clean fields of filesystem table with status deleted for data older than X days</li>
<li>Remove the status ¨new¨ on fields of filesystem table for data older than X days</li>
</ul>
</li>
<li>Custom SQL queries</li>
</ul>
</li>
</ul>
<h3>Prerequisites</h3>
<ul>
<li>
<p>PandoraFMS-WP requires (optionally) a plugin for REST API, called “JSON REST API”. Only needed if you want to integrate the monitoring/status information of the WP site into a central management console with Pandora FMS. This is an optional feature, you can manage all information from WordPress itself.</p>
</li>
<li>
<p>If your WordPress version is lower than 4.7, you must have the <a href="https://es.wordpress.org/plugins/rest-api/" title="WP REST API (v2)" rel="nofollow ugc">WP REST API (v2)</a> plugin installed to use the API. (This plugin requires version 4.6 or higher).</p>
</li>
</ul>
<h3>Limitations</h3>
<ul>
<li>WP Multisite not supported on this version. </li>
<li>To use the WordPress API REST, you need version 4.6 or higher.</li>
</ul>


Pandora FMS WP – Monitoring WordPress from Pandora FMS

Do as expected. Useful for monitoring low level wordpress.

It works

Plugin for monitoring Wordpress with Pandora FMS. Collect data from your wordpress and make it accessible from outside using the REST API.

ShadowScan Security Link vs Pandora FMS WP – Monitoring WordPress from Pandora FMS