vincentbean

Vigilant Healthchecks provides a REST healthcheck endpoint at <code>/wp-json/vigilant/v1/health</code> with an admin interface to conrol which checks are executed. 
This plugin is designed to integrate with <a href="https://govigilant.io" rel="nofollow ugc">Vigilant</a>, an all-in-one web monitoring tool which can be self-hosted.
<h4>Key Features</h4>
<ul>
<li>Protected REST endpoint with configurable token.</li>
<li>Built-in checks for database connectivity, core versions, plugin updates, cron freshness, Redis, and WordPress Site Health issues.</li>
<li>Metrics catalogue for memory, disk, CPU load, and database size with sensible caching defaults.</li>
<li>Extensible registry and hooks (<code>vigilant_healthchecks_prepare</code>, <code>vigilant_healthchecks_cron_threshold</code>, <code>vigilant_healthchecks_database_size_cache_ttl</code>) so you can add custom checks and metrics.</li>
<li>Scheduler heartbeat (<code>vigilant_healthchecks_cron_monitor</code>) that validates WP-Cron is actually running and reports stale schedules.</li>
</ul>
<h4>How It Works</h4>
<ol>
<li>Configure the bearer token under Settings → Vigilant Healthchecks; every REST request must include <code>Authorization: Bearer <token></code>.</li>
<li>Toggle the checks and metrics you want to expose; disabled items are never instantiated so they have zero runtime impact.</li>
<li>Call the endpoint yourself or configure your website in Vigilant.</li>
</ol>

Vigilant Healthchecks

A WordPress plugin that provides healthchecks to your WordPress site that integrate seamlessly with Vigilant (https://govigilant.io).

npc01

NPC Maintenance Inspector performs 9-point health diagnostics on your WordPress site directly from the admin dashboard:
<ol>
<li>WordPress core updates — Detect missing core updates.</li>
<li>Plugin updates — List plugins with available updates.</li>
<li>Site Health issues — Extract critical issues from WP standard Site Health API.</li>
<li>PHP version — Warn on end-of-life PHP versions.</li>
<li>Error log analysis — Summarize debug.log entries and save a one-click backup to uploads/ for safe review.</li>
<li>File integrity — Detect suspicious code patterns in core files (eval / base64_decode / etc.) by comparing checksums against the WordPress.org Checksum API.</li>
<li>Suspicious files — Find unexpected PHP files in wp-content/uploads/, with built-in whitelist for known legitimate plugin files (Ajax Load More templates, WP STAGING index.php, AIOS firewall rules, etc.).</li>
<li>SSL certificate — Check days until expiration (warn under 30 days, critical at 0).</li>
<li>File permissions — Check critical files like wp-config.php, .htaccess, wp-content/.</li>
</ol>
Operational features:
<ul>
<li>History — Keep the last 10 diagnoses as a custom post type.</li>
<li>Scheduled auto-check — Run daily, weekly, or monthly via WP Cron.</li>
<li>Email notifications — Send alerts only on critical issues.</li>
<li>One-click debug.log clear — Truncate the log while preserving file permissions.</li>
<li>Optional AI report — Generate maintenance suggestions via Anthropic Claude API. Disabled by default; opt-in via a wp-config.php constant.</li>
</ul>
The plugin is locked to the user who activated it and to the original site URL, so it stays inert after backup restores to a different domain.
<h3>External services</h3>
This plugin can optionally connect to the Anthropic Claude API (<code>https://api.anthropic.com/v1/messages</code>) to generate AI-powered maintenance reports. This is the only external service the plugin ever contacts.
When is data sent?
<ul>
<li>When you manually click the “Generate AI Report” button in the admin.</li>
<li>When an automatic scheduled diagnosis detects a critical issue and notifications are enabled. In that case the AI report is generated once per critical run and attached to the notification email.</li>
</ul>
What data is sent?
<ul>
<li>The diagnosis result text only:
<ul>
<li>Site URL, site name, WordPress version, theme name</li>
<li>Counts of plugin updates / Site Health issues / error-log entries</li>
<li>PHP version, memory limit, max upload size</li>
<li>SSL expiration date and days remaining</li>
<li>File-permission status of critical files</li>
<li>Suspicious code patterns detected (function names like <code>eval</code>, <code>base64_decode</code>)</li>
</ul>
</li>
<li>No login data, no post content, no personal data of site visitors.</li>
</ul>
Is the data sent unconditionally?
No. The AI feature is completely disabled unless you define <code>NPCMI_API_KEY</code> in <code>wp-config.php</code>. Without that constant, no external connection to Anthropic is ever made.
Anthropic’s terms and privacy policy:
<ul>
<li>Consumer Terms of Service: https://www.anthropic.com/legal/consumer-terms</li>
<li>Privacy Policy: https://www.anthropic.com/legal/privacy</li>
<li>Commercial Terms of Service (if you use a paid API plan): https://www.anthropic.com/legal/commercial-terms</li>
</ul>
By enabling the AI report feature (i.e. by defining <code>NPCMI_API_KEY</code>), you agree to Anthropic’s applicable terms.

NPC Maintenance Inspector

WordPress maintenance health-check tool with 9-point diagnostics, history tracking, and optional AI-powered reports.

Vigilant Healthchecks vs NPC Maintenance Inspector