Silo

Silo Scope is a site health monitoring solution for WordPress that gives you a complete overview of your site’s health in one place.
Get a comprehensive health report covering security, performance, server configuration, SEO, and plugins without leaving your WordPress dashboard.
<h3>Key Features</h3>
Comprehensive Site Reports
<ul>
<li>Security: Core/plugin/theme updates, HTTPS status, directory indexing, XML-RPC exposure, admin user check, file permissions, HTTP security headers (CSP, HSTS, X-Frame-Options, etc.), user enumeration detection</li>
<li>Server & Environment: PHP version and limits, database engine/version, disk space, OPcache status, object cache detection, image toolkit capabilities, PHP error log activity, cron health, timezone alignment</li>
<li>Performance: Cache detection, compression (gzip/Brotli), autoloaded options size, transient bloat, post revisions, database size</li>
<li>SEO: Search engine visibility, robots.txt, sitemap detection, meta tags, canonical URLs, permalink structure</li>
<li>Configuration: Debug flags, cron status, active theme, backup plugin detection, maintenance mode</li>
<li>Plugins: Total/active/inactive counts, must-use plugins, abandoned plugin detection, update availability, duplicate cache plugin warnings</li>
</ul>
Context-Aware Help
<ul>
<li>Click any metric for a detailed modal explaining:
<ul>
<li>What the metric means</li>
<li>Why it matters</li>
<li>How to fix it</li>
<li>Recommended plugins (optional)</li>
</ul>
</li>
</ul>
Recommendations System
<ul>
<li>Smart plugin suggestions based on detected issues</li>
<li>Non-intrusive inline recommendations in help modals</li>
</ul>
View Modes
<ul>
<li>Switch between different dashboard views for your workflow</li>
<li>Go-live checklist for pre-launch review</li>
</ul>
Connection Code Generation
<ul>
<li>Generate secure Connection Codes for remote monitoring</li>
<li>Enables integration with external monitoring tools</li>
</ul>
<h3>Security Model</h3>
Silo Scope takes security seriously:
<ul>
<li>API Token Authentication: Remote sites require a valid token (compared via <code>hash_equals</code>)</li>
<li>Domain Allowlist: Only configured domains can request reports</li>
<li>SSRF Prevention: Blocks loopback, private, and reserved IP ranges</li>
<li>No Tracking: No visitor analytics, pixels, or front-end scripts</li>
</ul>
<h3>Data & Privacy</h3>
<ul>
<li>All checks run inside your WordPress installation</li>
<li>HTTP checks are loopback requests to your own site</li>
<li>Report data stored in WordPress options/transients</li>
<li>Remote monitoring requires explicit opt-in via Connection Code</li>
</ul>
<h3>External Services</h3>
This plugin includes an optional feature to fetch policy baseline updates from an external server. This feature is disabled by default and must be explicitly enabled in Plugin Settings.
Remote Policy Baseline (Optional)
When enabled, the plugin fetches health check threshold recommendations from: 
– Service URL: https://baseline.scopefleet.com/policy.v1.json 
– Data sent: No personal or site data is sent. The request is a simple GET request to retrieve a JSON file. 
– When: Only when the “Remote Policy Baseline” option is enabled in Plugin Settings. The data is cached locally for 24 hours. 
– Purpose: Provides updated threshold recommendations for site health metrics (e.g., recommended PHP version, memory limits). 
– Service provider: SILO (silomade.com) 
– Terms of Service: https://silomade.com/terms 
– Privacy Policy: https://silomade.com/privacy
If this feature is not enabled, the plugin uses locally bundled policy defaults and makes no external requests.

Silo Scope

Comprehensive site health monitoring for WordPress. Get a complete health report covering security, performance, server configuration, SEO, and plugin …

Jon Otaegi

This simple plugin creates a <code>/health</code> endpoint to let you monitor the status of your WordPress website. The endpoint tests the status of your database connection and returns a <code>200 OK</code> HTTP status code while your page is healthy. You can read more on HTTP status codes at the <a href="https://en.wikipedia.org/wiki/List_of_HTTP_status_codes" rel="nofollow ugc">Wikipedia article</a>.
External tools such as website monitoring services can access the exposed endpoint at regular intervals. This can help you verify that your WordPress website is performing correctly.
You can find more information about the <a href="https://docs.microsoft.com/en-us/azure/architecture/patterns/health-endpoint-monitoring" rel="nofollow ugc">Health Endpoint Monitoring Pattern</a> at the <a href="https://docs.microsoft.com/en-us/azure/architecture/patterns/" rel="nofollow ugc">Microsoft Azure Documentation</a> website.
<h4>Development</h4>
This plugin is being developed on <a href="https://github.com/jonotaegi/wordpress-health-endpoint" rel="nofollow ugc">GitHub</a>. If you want to collaborate, feel free to submit pull requests or report bugs on the issue tracker.

Health Endpoint


Security utilities complain the plugin is abandoned.


Update the version number!

Creates a /health endpoint that returns a 200 OK HTTP status code while WordPress is performing correctly.

Silo Scope vs Health Endpoint