shadowscan

<p>ShadowScan Security Link pairs your site to the ShadowScan portal and keeps it in sync with heartbeat status, Guard Layer signals, login abuse detection, and security commands.</p>
<p>ShadowScan does not install, activate, or configure third-party security tools. If another security plugin is present, the connector only records its presence as metadata.</p>
<h3>External services</h3>
<p>This plugin connects to external services to sync status, process security workflows, and support optional diagnostics.</p>
<ul>
<li>Service: ShadowScan API (hosted at Supabase Edge Functions)</li>
<li>URL: https://foemwjtosslaiynduiyt.supabase.co/functions/v1/</li>
<li>Used for: site pairing, heartbeat sync, command polling, command-result upload, subscription/policy sync, and support contact submissions.</li>
<li>Data sent and when: site URL, WordPress version, PHP version, connector version, Guard Layer/control status, heartbeat timestamps, and command execution metadata whenever the connector syncs with ShadowScan; contact form fields only when an admin submits support contact.</li>
<li>Terms: https://shadowscan.com.au/terms</li>
<li>
<p>Privacy: https://shadowscan.com.au/privacy</p>
</li>
<li>
<p>Service: Have I Been Pwned Passwords API</p>
</li>
<li>URL: https://api.pwnedpasswords.com</li>
<li>Used for: optional breached-password checks in password policy enforcement.</li>
<li>Data sent and when: k-anonymity password hash prefix (first 5 SHA-1 characters, no raw passwords) only when a password is checked by the policy flow.</li>
<li>Terms: https://haveibeenpwned.com/TermsOfUse</li>
<li>
<p>Privacy: https://haveibeenpwned.com/Privacy</p>
</li>
<li>
<p>Service: Sentry</p>
</li>
<li>URL: https://sentry.io</li>
<li>Used for: optional error and fatal-event telemetry to assist troubleshooting.</li>
<li>Data sent and when: error event metadata (such as exception messages, stack traces, and runtime context) only after an admin explicitly enables Sentry telemetry in plugin settings and a Sentry DSN is configured; the optional MU diagnostics helper can send early-startup fatal errors only while both Sentry telemetry and remote diagnostics are enabled.</li>
<li>Terms: https://sentry.io/terms/</li>
<li>Privacy: https://sentry.io/privacy/</li>
</ul>
<h3>Third-Party Libraries</h3>
<p>This plugin bundles:<br />
* pragmarx/google2fa (MIT License)<br />
* bacon/bacon-qr-code (BSD-2-Clause; Copyright (c) 2017-present, Ben Scholzen “DASPRiD”)</p>
<h3>Hooks</h3>
<p>shadowscan_log<br />
Fires when the plugin emits an internal log message. You can hook this in a must‑use plugin or theme if you want to capture logs.</p>


ShadowScan Security Link

Connects your WordPress site to the ShadowScan portal for heartbeats, guard signals, and security commands.

alexkrauchn

<p>WPMissionControl delivers full-stack <strong>observability</strong>, <strong>security</strong>, and <strong>health monitoring</strong> for WordPress — without slowing your site down.</p>
<p>The plugin runs as a lightweight client that connects your site to our cloud observability platform. You get uptime checks, SSL monitoring, integrity scanning, visual regressions, and deep error insights — all processed off-site to keep your WordPress fast.</p>
<p>A free WPMissionControl account is required to view your monitoring dashboard.</p>
<h3>What WPMissionControl Monitors</h3>
<h3><strong>Uptime & Performance</strong></h3>
<p>Instant alerts when your site goes down or becomes slow.</p>
<h3><strong>SSL & Domain Expiration</strong></h3>
<p>Never miss an expiring certificate or renewal deadline.</p>
<h3><strong>Integrity & Security</strong></h3>
<p>Core, theme, and plugin checksum validation to detect tampering or suspicious changes.</p>
<h3><strong>AI Malware Scanning</strong></h3>
<p>AI-driven detection catches unknown or evolving threats traditional scanners miss.</p>
<h3><strong>Visual Regression Monitoring</strong></h3>
<p>Automatic screenshot comparisons to spot layout shifts or broken UI components.</p>
<h3><strong>Activity Log & Error Tracking (v1.2+)</strong></h3>
<p>Monitor and analyze:<br />
– Updates (core, plugins, themes)<br />
– User logins & role changes<br />
– Content changes<br />
– Cron failures<br />
– Database, REST API & AJAX errors<br />
– Fatal errors and config anomalies</p>
<h3><strong>Real-Time Alerts</strong></h3>
<p>Email, Slack, and SMS notifications (plan-dependent).</p>
<h3><strong>Public Status Page</strong></h3>
<p>Share an independent, always-up-to-date health overview of your site.</p>
<h3><strong>Secure Website Badge</strong></h3>
<p>Show visitors your site is monitored and safe.</p>
<p>All monitoring runs on our servers — the plugin remains extremely lightweight.</p>
<h3>Disclaimer</h3>
<p>This plugins sends information about your website, including it’s core version, health points, and checksums of the core, installed themes and plugins files, and activity log to <a href="wpmissioncontrol.com" rel="nofollow ugc">wpmissioncontrol.com</a>. This information is only sent with the proper API key set, used to assess overall health of your website and is not shared with any thrid party. Consider reading our <a href="https://wpmissioncontrol.com/privacy-policy" rel="nofollow ugc">Privacy Policy</a> and <a href="https://wpmissioncontrol.com/terms-of-service" rel="nofollow ugc">Terms of Service</a>.</p>


WPMissionControl

Monitor uptime, SSL, domain, integrity, malware, visual changes, activity, and errors. Lightweight client. Requires a WPMissionControl account.

ShadowScan Security Link vs WPMissionControl