=== Activity Guard - Security Scanner, Activity Log with IP blocking === Contributors: wpazleen Tags: activity log, security, ip blocking, slack notifications, audit log Requires at least: 5.9 Tested up to: 7.1 Requires PHP: 7.2 Stable tag: 3.14.2 License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html Free WordPress activity log with IP blocking, vulnerability scanner, WooCommerce abandoned cart analytics, and real-time Slack and Telegram alerts. == Description == Activity Guard is a free WordPress plugin that covers four things most plugins charge separately for: a complete activity log, an IP-based security firewall, a plugin vulnerability scanner, and WooCommerce abandoned cart analytics. Alerts go out in real time to Slack, Telegram, or email, all from one dashboard. Most activity log plugins stop at logging. Most security plugins don't touch WooCommerce. Plugins like WP Activity Log, Simple History, and Stream do logging well — Activity Guard adds real-time Slack and Telegram alerts, an IP firewall with emergency shutdown, CVE vulnerability scanning, and WooCommerce abandoned cart recovery analytics, all at no cost. No paid tier required for any of it. No other free plugin on WordPress.org combines these four in one place: a complete audit log, an IP security firewall, a multi-database vulnerability scanner, and WooCommerce analytics with cart recovery tracking. [Activity Guard Website](https://wpazleen.com/notifier-to-slack/) | [Documentation](https://wpazleen.com/docs/) | [Pro Support](https://wpazleen.com/support/) == WordPress Activity Log == Activity Guard records every meaningful change on your site, including the IP address, username, timestamp, and the exact change made. The audit log covers: - User logins, logouts, and failed login attempts - User registrations, role changes, and profile edits - Pages, posts, and custom post types: create, edit, delete, status changes - Plugin and theme activations, deactivations, updates, and deletions - WordPress core settings and configuration changes - Menu, widget, and sidebar modifications - Email delivery tracking via a full email log - Form submissions from Contact Form 7, SimpleForm, and others - Admin settings changes and debug log events - Cron job scheduling and background process tracking - Script modification and file change detection - Visitor traffic monitoring with an on/off toggle Visual charts summarize your audit log at a glance. No need to scroll through raw log tables to understand what's happening on your site. == Security Firewall and IP Blocking == Activity Guard actively blocks threats rather than just recording them. - IP blocking by manual entry, CIDR range, or conditional rule - Emergency Shutdown: force-logout every active session on your site with one click - Cloudflare Turnstile login protection against bots and brute force attacks - Login rate limiting to stop credential-stuffing - Bot detection and automatic IP blocking - Restrict or fully disable XML-RPC access - Core file integrity scanner to detect unauthorized file changes - File integrity monitoring across plugins and themes - Block TOR network access - Block vulnerability scanner user agents - HTTP security headers: custom, logged, and enforced - WordPress version hiding - 404 error tracking and suspicious HTTP request alerts - Admin dashboard visitor tracking - Cron job failure and site downtime monitoring The Emergency Shutdown feature is specific to Activity Guard: one click and every logged-in session on your site ends immediately — useful when you detect a breach in progress and need everyone out now. == Plugin Vulnerability Scanner == Activity Guard scans every installed plugin and theme against multiple vulnerability databases before problems develop: - Detect plugins with known CVEs across NVD, WPVulnerability.net, and the WPAzleen private API - Flag outdated plugins not compatible with your WordPress version - Identify abandoned plugins not updated in over a year - Warn about plugins with low install counts or poor ratings No other free activity log plugin on WordPress.org includes a built-in multi-database vulnerability scanner. == WooCommerce Activity Log and Analytics == Activity Guard logs every WooCommerce event and adds analytics built specifically for store owners. Order tracking covers status changes, payments, refunds, and cancellations. You also get stock level changes and low-stock events, coupon creation and usage, product pricing edits, billing and shipping address updates, customer registration changes, and real-time shipping status updates. The abandoned cart and incomplete-order analytics go further than basic logging. The dashboard shows checkout drop-off rates, recovery potential, recovery rate, and how customers interact with their carts before leaving. This tells you where revenue is being lost, not just that it was lost. WooCommerce abandoned cart analytics with recovery rate tracking is included free. No competing free activity log plugin on WordPress.org provides this. == Slack and Telegram Notifications == Activity Guard sends alerts the moment a critical event occurs, across four channels: - Slack: route alerts to any channel, tag specific users or groups with @mentions - Telegram: real-time activity and security alerts direct to your Telegram chat - Email: configurable per event type - Admin dashboard: in-panel notification view Events that trigger alerts include core file changes, plugin and theme updates (with the username that triggered the update), WooCommerce orders, payments, coupon usage, incomplete order follow-ups, product edits, stock changes, login and registration events, page and post changes, form submissions, and admin settings changes. A daily digest and weekly plugin download summary are also available. You can schedule notifications for specific times and control exactly which events send alerts. == Admin and Developer Tools == - Maintenance mode toggle from the dashboard - Menu and widget change tracking - Plugin and theme activation and deactivation logs - Script modification detection - HTTP security header change logging - Debug log and fatal error detection - Email log: full delivery history for all outgoing WordPress emails - Contact Form 7 and SimpleForm integration alerts == Who Uses Activity Guard == WooCommerce store owners use it to track every order, coupon, product change, and shipping event, and to recover revenue with abandoned cart analytics. Site administrators use it to know exactly who changed what, instantly log out suspicious users, and maintain a clean audit trail. Agencies and developers use it to monitor plugin updates, configuration changes, fatal errors, and debug logs across client sites. Security-focused admins use it to block IPs, scan for CVEs, monitor file integrity, and trigger emergency shutdowns. Multi-author sites use it to hold contributors accountable with full user activity logging and role-change tracking. Join us: [Facebook](https://www.facebook.com/wpazleens) | [YouTube](https://www.youtube.com/channel/UCqR5SPvn6N2ZBq7AyYKfEnA) | [X / Twitter](https://x.com/wpazleen) ### Complete Feature Breakdown #### 1. User Activity Log & Audit Trail * **Authentication Tracking:** Records successful logins, logouts, failed login attempts (with user agent, IP address, and timestamp), password resets, and account password changes. * **User & Role Escalation Logging:** Tracks new user registrations, profile updates, account deletions, and critical role changes (e.g., subscriber elevated to administrator). * **Content & Publishing History:** Tracks posts, pages, and custom post types (CPTs) across creation, draft saves, updates, trash, untrash, and permanent deletion. * **Visual Content Diff Viewer:** See exactly what text, code, or metadata changed between revisions with clean visual diff comparisons. * **Plugin & Theme Lifecycle:** Logs installations, activations, deactivations, updates (including the exact username who initiated the update), and deletions. * **Theme File & Template Monitoring:** Tracks modifications made to theme files, template assignments, and stylesheet updates. * **Menu & Widget Monitoring:** Records creation, restructuring, and deletion of navigation menus and sidebar widgets. * **Site Settings & Options Audit:** Logs modifications to core WordPress settings (`wp_options`), permalinks, reading settings, and site health notices. * **Outgoing Email Delivery Log:** Audits every email dispatched by `wp_mail()`, capturing recipients, subjects, timestamps, and delivery statuses. * **Form Submission Tracking:** Tracks submissions and captures leads from Contact Form 7 (CF7) and SimpleForm / FormFlow. * **Categorized Tag Pills & Severity Badging:** Quickly scan events labeled by Category (*Security*, *Users*, *Content*, *System*) and Severity (*Critical*, *Warning*, *Info*, *Secure*). * **Search, Filter & Bulk Management:** Filter logs by role, user, severity, event type, or date range (today, yesterday, this week, this month, or all-time). Delete individual or bulk entries in one click. * **Export Audit Logs:** Export your audit logs to CSV or JSON format for compliance audits, security reporting, or client delivery. * **Custom Retention Schedule:** Choose how long to retain logs (1, 7, 14, 30, 60, 90, 180, or 365 days) with automated database pruning to keep your database lean. #### 2. Security Suite & IP Blocking Firewall * **Active User Session Manager:** Monitor every logged-in user in real time, view IP addresses and browsers, and terminate active sessions instantly. * **User Lockout Mechanism:** Lock out compromised accounts for 10 minutes, 1 hour, 24 hours, or permanently until manual review. * **Two-Factor Authentication (2FA TOTP):** Secure login credentials with TOTP 2FA compatible with Google Authenticator, Authy, Microsoft Authenticator, and 1Password. Generates downloadable emergency backup codes. * **Email-Based Login OTP (One-Time Password):** Send a temporary verification code to the user's email address upon login. Includes customizable email templates and expiry windows. * **Country & Geo-IP Blocking:** Restrict or whitelist access based on visitor country. Scope blocking to login/admin pages only or the entire front-end, with automatic bypass for search engine bots. * **Custom Alert Rules Engine:** Build custom alert rules based on events (e.g., administrator login), time windows (e.g., after-hours between 8 PM and 7 AM), frequency thresholds, and custom Slack mentions (`@channel`, `@here`). * **Intelligent IP Blocker:** Block malicious visitors by specific IP, CIDR subnet (e.g., `192.168.1.0/24`), or automated behavioral triggers. * **Brute Force Protection & Rate Limiting:** Automatically block IPs after repeated failed login attempts or excessive requests per minute (>200 req/min). * **404 Error Probing Defense:** Detect and ban bot scrapers scanning for vulnerable URLs and non-existent scripts. * **Suspicious Request Inspection:** Detect SQL injection, malicious query strings, and exploit payloads in incoming HTTP requests. * **Cloudflare Turnstile Bot Defense:** Seamlessly integrate Cloudflare Turnstile on WordPress Login, Registration, Lost Password, Comment forms, and WooCommerce checkout. * **Rename Login URL:** Obfuscate `/wp-login.php` with a custom login slug (e.g., `/secure-portal`) and redirect unauthorized visitors to a 404 page or custom URL. * **Prevent User Enumeration:** Block author scan queries (such as `/?author=1`) that reveal administrative usernames. * **Obfuscate Login Errors:** Replace descriptive login errors with generic notices so attackers cannot deduce valid usernames. * **Force Strong Passwords:** Require all users (or specific roles) to configure high-entropy passwords. * **TOR & Bad Bot Shield:** Block exit nodes from the TOR network and ban automated vulnerability scanner user agents. * **HTTP Security Headers Layer:** Automatically enforce headers including `X-Content-Type-Options`, `X-Frame-Options`, `X-XSS-Protection`, and `Referrer-Policy`. * **Conceal WordPress Version:** Remove the WordPress version number from HTTP headers, generator meta tags, and script query strings. * **Disable File Editing:** Lock down the built-in WordPress theme and plugin code editors (`DISALLOW_FILE_EDIT`). * **XML-RPC Protection:** Disable or restrict the XML-RPC interface to stop pingback amplification and brute force attacks. * **Domain Reputation & Blocklist Monitor:** Periodically scan your site's domain against major security blocklists to protect email deliverability and SEO rankings. * **Emergency Shutdown (Kill Switch):** With one click, instantly terminate all active sessions site-wide, locking down admin access exclusively to designated Super Admins. #### 3. Deep Vulnerability Scanner & Core Integrity Checker * **Multi-Source Vulnerability Intelligence:** Cross-checks installed plugins and themes against the National Vulnerability Database (NVD / NIST CVEs), WPVulnerability.net, and the WPAzleen private threat feed. * **Abandoned & Outdated Plugin Audit:** Identifies plugins that haven't been updated in over a year, plugins incompatible with your WordPress version, or plugins with low ratings and install counts. * **WordPress Core File Integrity Verification:** Validates every core file against official WordPress.org release checksums. Flags modified, added, or missing files. * **File Integrity Line Diff Viewer:** View side-by-side differences within modified core, theme, or plugin files to spot injected malware or unauthorized edits. * **WordPress Hardening Audit:** Inspects file permissions (`wp-config.php`, `.htaccess`, `/wp-content/`), database prefix safety, security salts, and PHP error reporting. * **Exclusions Manager:** Exclude specific directories, file patterns, or PHP functions from scan routines. * **Automated Scan Notifications:** Send automated Slack alerts whenever vulnerabilities or checksum mismatches are discovered. #### 4. WooCommerce Activity Log & Abandoned Cart Analytics * **Real-Time E-Commerce Event Alerts:** Get notified the second an order is placed, marked paid, cancelled, or refunded. * **Inventory & Stock Monitoring:** Receive immediate warnings when products hit low-stock thresholds or run completely out of stock. * **Coupon & Discount Tracking:** Monitor coupon creation, modification, and customer redemptions in real time. * **Product Catalog Changes:** Track price modifications, title adjustments, inventory updates, and new product publications. * **Customer Data Changes:** Track customer profile updates, billing address changes, and shipping address modifications. * **Abandoned Cart Tracker & Analytics:** Log incomplete checkouts, track items left in carts, and monitor cart drop-offs before checkout completion. * **Recovery Rate & Potential Revenue:** Visual dashboard displaying recoverable revenue, checkout conversion drop-off rates, and cart recovery analytics. * **Visual Sales Analytics:** Interactive Recharts dashboard displaying gross sales, net revenue, average order value (AOV), total order count, and top-selling products. #### 5. Real-Time Slack Notifications & Integrations * **Slack Incoming Webhooks:** Route notifications to your Slack workspace with support for dedicated channels, custom webhook URLs, and user/group `@mentions`. * **Slack Attachment Cards:** Notifications feature color-coded severity bars, event titles, user avatars, IP addresses, timestamps, and direct administrative links. * **Telegram Bot Integration:** Deliver instant alerts to individual chats or team channels using your Telegram Bot Token and Chat ID. * **Granular Event Subscriptions:** Selectively choose which events send alerts to Slack, Telegram, or Email. * **Custom Message Templates:** Customize notification copy using dynamic placeholders like `{username}`, `{ip_address}`, `{site_url}`, `{plugin_name}`, and `{event_type}`. * **Admin Floating Toast Stream:** Experience real-time live activity toasts right inside the WordPress admin bar and dashboard, complete with sound alerts and adjustable intervals. * **Admin Bar Security Badge:** Keep a constant eye on site security status with a badge counter in the top WordPress admin toolbar. * **Dashboard Security Widget:** View overall security score, recent activity feeds, and blocked threats directly on your main WordPress dashboard. #### 6. Admin, Developer & Maintenance Tools * **Maintenance Mode with Lead Capture:** Put your site under maintenance with stylish templates while capturing prospective visitor leads with a built-in contact form. * **PHP Debug Log Viewer:** View `wp-content/debug.log` entries directly inside the admin panel with real-time fatal error notifications. * **WP-Cron Job Monitor:** Detect scheduled background processes, recurring task creation, and cron failures. * **Site Downtime & Uptime Monitor:** Monitor website responsiveness and receive alerts on HTTP error codes and downtime events. * **Access Control & Permissions:** Restrict Activity Guard configuration to specific Super Administrators or allowed roles. * **Read-Only Log Viewers:** Grant specific roles (e.g., Editors or Junior Admins) read-only access to audit logs without exposing configuration settings. * **Stealth Mode (Hide Plugin):** Hide Activity Guard from the WordPress plugins list to prevent tampering by unauthorized users. == Competitor Analysis == Search the WordPress plugin directory for an activity log plugin and a handful of names come up again and again, so it is worth being clear about where Activity Guard actually fits among them. WP Activity Log is the biggest name in the category, with the broadest event coverage of any activity log plugin and support for tracking third-party plugins like ACF, Gravity Forms, and LearnDash. It is a genuine alternative to Activity Guard for pure logging depth, but Slack and SMS alerts sit behind WP Activity Log Premium, and there is no IP firewall, no vulnerability scanner, and no WooCommerce analytics at any tier. Activity Guard includes Slack and Telegram alerts, an IP firewall, vulnerability scanning, and WooCommerce abandoned cart analytics in the free version, with a narrower focus on the WordPress admin rather than enterprise SIEM exports. Activity Log Pro is the closest match on structure. Its free tier also adds real security-adjacent value beyond plain logging, with Login Flood Guard and severity-tagged events, so anyone comparing the two is comparing like for like on ambition. Where Activity Guard pulls ahead is in what ships free versus what is gated: Activity Log Pro's Slack and webhook routing live behind its Premium "Log Channels" feature, while Activity Guard's Slack and Telegram alerts, IP blocking, vulnerability scanning, and WooCommerce cart recovery analytics are all included at no cost. Beyond those two, most of the other names that show up nearby are lighter tools solving a narrower slice of the same problem, or a different problem entirely. Activity Log – Monitor & Record User Changes (Aryo) is a lightweight, beginner-friendly logger with email-only notifications and no Slack, Telegram, IP firewall, or vulnerability scanning. Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity is built for agencies managing many client sites and does send Slack alerts, but it works by connecting each site to Logtivity's hosted service with an API key rather than running standalone, and it has no IP firewall, no vulnerability scanner, and no WooCommerce analytics. Security Plugin, Firewall & Malware Scanner with Auto Removal is a genuinely strong free WAF and malware scanner, but it is not an activity log at all: it does not track content edits, role changes, or WooCommerce events, and its alerts are email-only through the CleanTalk cloud account it requires. Error Log Viewer by BestWebSoft has nothing to do with user activity either, it is a PHP and WordPress error log reader with email notifications, useful for debugging but unrelated to security monitoring or audit trails. So of the plugins that show up in a "wordpress activity log" or "wp activity log alternative" search, only WP Activity Log, Activity Log Pro, Aryo Activity Log, and Logtivity are actually built for the same job as Activity Guard: tracking what changed on a WordPress site and who changed it. Among those four, Activity Guard's combination of free Slack and Telegram alerts, an IP firewall with emergency shutdown, a CVE vulnerability scanner, and WooCommerce abandoned cart analytics, all in the free version with no external account required, is what sets it apart. == External Services == Activity Guard connects to specific third-party services to deliver real-time notifications, bot protection, and vulnerability intelligence: = Slack Incoming Webhooks = * **Service:** Slack by Salesforce ([slack.com](https://slack.com/)) * **Purpose:** Sends real-time event notifications to channels and users in your configured Slack workspace. * **Data Transmitted:** Event summary text, username, user IP address, timestamp, and site URL. * **When It Operates:** Only when a Slack Webhook URL is entered and enabled in your settings. * **Privacy Policy:** [Slack Privacy Policy](https://slack.com/trust/privacy/privacy-policy) = Telegram Bot API = * **Service:** Telegram ([telegram.org](https://telegram.org/)) * **Purpose:** Delivers real-time activity and security alerts to your Telegram chat or channel. * **Data Transmitted:** Notification message containing event title, user identifier, IP address, and site link. * **When It Operates:** Only when Telegram Bot Token and Chat ID are configured. * **Privacy Policy:** [Telegram Privacy Policy](https://telegram.org/privacy) = Cloudflare Turnstile = * **Service:** Cloudflare Turnstile ([cloudflare.com](https://www.cloudflare.com/application-services/products/turnstile/)) * **Purpose:** Protects login, registration, password reset, and comment forms against bot brute force attacks without intrusive captchas. * **Data Transmitted:** Visitor browser verification telemetry evaluated directly by Cloudflare. * **When It Operates:** Only when Cloudflare Turnstile keys are configured and enabled. * **Privacy Policy:** [Cloudflare Privacy Policy](https://www.cloudflare.com/privacypolicy/) = Vulnerability Scanner Intelligence Feeds = * **WordPress.org Plugin API:** Retrieves plugin release dates, version numbers, install counts, and author ratings. [WordPress.org Privacy Policy](https://wordpress.org/about/privacy/) * **WPVulnerability.net API:** Fetches publicly documented CVE records for installed WordPress plugins, themes, and core components. [WPVulnerability Privacy Policy](https://www.wpvulnerability.com/privacy/) * **National Vulnerability Database (NVD / NIST):** Cross-references standardized CVE records maintained by the U.S. National Institute of Standards and Technology. [NIST Privacy Policy](https://www.nist.gov/oism/site-privacy) * **WPAzleen Vulnerability API:** Queries threat intelligence endpoint for newly identified vulnerabilities. No personal visitor data is sent. [WPAzleen Privacy Policy](https://wpazleen.com/privacy-policy/) = Freemius SDK (Optional Telemetry) = * **Service:** Freemius ([freemius.com](https://freemius.com/)) * **Purpose:** Provides optional diagnostic tracking and update notifications. * **Data Transmitted:** Site URL, WordPress version, and PHP version. * **When It Operates:** **Opt-in only.** No data is sent unless you explicitly click "Allow" on the admin opt-in notice. * **Privacy Policy:** [Freemius Privacy Policy](https://freemius.com/privacy/) == Installation == 1. Log into your WordPress admin dashboard and navigate to **Plugins > Add New**. 2. Search for `Activity Guard` or `notifier-to-slack`. 3. Click **Install Now**, then click **Activate**. 4. The automated **Setup Wizard** will launch immediately to guide you through initial Slack webhook configuration and security presets. 5. Alternatively, navigate to **Activity Guard > Configuration** at any time to customize event subscriptions, security firewalls, scanners, and WooCommerce analytics. == Frequently Asked Questions == = What does Activity Guard do? = Activity Guard is a free WordPress plugin that combines four tools in one: a complete activity log, an IP security firewall, a plugin vulnerability scanner, and WooCommerce analytics with abandoned cart tracking. It also sends real-time alerts to Slack, Telegram, and email. No other free plugin on WordPress.org covers all four. = How is Activity Guard different from WP Activity Log, Simple History, or Stream? = WP Activity Log, Simple History, and Stream are solid logging tools. Activity Guard adds what they don't include for free: real-time Slack and Telegram alerts, an IP firewall with emergency session shutdown, CVE vulnerability scanning, and WooCommerce abandoned cart analytics. You get all of this without a paid upgrade. = How is Activity Guard different from WP Activity Log, Simple History, or Stream? = WP Activity Log, Simple History, and Stream are solid logging tools. Activity Guard adds what they don't include for free: real-time Slack and Telegram alerts, an IP firewall with emergency session shutdown, CVE vulnerability scanning, and WooCommerce abandoned cart analytics. You get all of this without a paid upgrade. = Is Activity Guard a good free alternative to Activity Log Pro? = Yes, if you want Slack alerts without upgrading. Activity Log Pro's free version adds useful security-adjacent extras like Login Flood Guard, but Slack and webhook routing require its Premium "Log Channels" feature. Activity Guard includes Slack, Telegram, an IP firewall, vulnerability scanning, and WooCommerce analytics all in the free version. = How does Activity Guard compare to Aryo's Activity Log plugin? = Aryo's Activity Log is a lightweight, beginner-friendly logger with email-only notifications and basic WooCommerce tracking. Activity Guard covers the same core logging plus real-time Slack and Telegram alerts, an IP firewall, a CVE vulnerability scanner, and WooCommerce abandoned cart analytics with recovery tracking. = Is Activity Guard similar to Logtivity? = Both send activity alerts to Slack, but Logtivity works by connecting each site to its hosted service with an API key, which suits agencies centralizing logs across many client sites. Activity Guard runs standalone with no external account required, and adds an IP firewall, vulnerability scanner, and WooCommerce analytics that Logtivity does not include. = Can I use Activity Guard alongside a malware scanner like Security by CleanTalk? = Yes. Security Plugin, Firewall & Malware Scanner (Security by CleanTalk) is a malware scanner and web application firewall, not an activity log: it does not track content edits, role changes, or WooCommerce events. It runs fine alongside Activity Guard, which handles the activity logging, Slack and Telegram alerts, and WooCommerce analytics side of things. = Does Activity Guard replace a plugin like Error Log Viewer? = Not directly. Error Log Viewer by BestWebSoft reads PHP and WordPress error logs for debugging, which is a different job from user activity tracking. Activity Guard's Debug log and fatal error detection covers basic error visibility, but a dedicated error log viewer is still useful for deep PHP debugging. = What is the best free WordPress activity log plugin with Slack alerts? = Activity Guard is one of the few WordPress activity log plugins with native Slack and Telegram alerts built into the free version. Most alternatives, including WP Activity Log and Activity Log Pro, put Slack notifications behind a premium upgrade. = Is Activity Guard free? = Yes. The activity log, IP firewall, Slack and Telegram notifications, plugin vulnerability scanner, and WooCommerce analytics are all free. A Pro version is available at wpazleen.com for premium features and direct support. = Does Activity Guard send Slack notifications for free? = Yes. Slack webhook integration is fully included in the free version. Go to Activity Guard > Integrations, enter your Slack webhook URL, and choose which events to alert on. You can also @mention specific Slack users or groups in alert messages. = Is there a Telegram integration? = Yes. Go to Activity Guard > Integrations, enter your Telegram bot token and chat ID, and you will receive real-time alerts in your Telegram chat. Both Slack and Telegram are free with no paid tier required. = How does the plugin vulnerability scanner work? = Activity Guard scans every installed plugin and theme against three databases: the National Vulnerability Database (NVD), WPVulnerability.net, and the WPAzleen private API. It flags plugins with known CVEs, outdated versions, plugins abandoned for over a year, low install counts, and poor ratings. Scans run locally and no personal data leaves your site. = Does Activity Guard include WooCommerce abandoned cart tracking? = Yes. Activity Guard tracks incomplete WooCommerce checkouts and shows analytics including checkout drop-off rates, recovery potential, and cart recovery rate. This is included free. No other free activity log plugin on WordPress.org provides abandoned cart analytics with recovery metrics. = Can I block suspicious IP addresses? = Yes. Activity Guard includes a manual IP blocker, a CIDR range blocker, and a conditional rule-based blocker. You can block individual IPs, entire ranges, or set rules based on behavior. You can also trigger Emergency Shutdown to immediately force-logout every active session on your site. = What is Emergency Shutdown? = Emergency Shutdown is a one-click feature that force-logs out every active user session on your WordPress site at once. It is useful when you detect a breach or suspicious session activity and need to immediately cut off all access. = How do I set up Slack notifications? = Go to Activity Guard > Integrations in your dashboard, enter your Slack webhook URL, and choose which events to send. Alerts include the event type, username, IP address, and change details. You can also tag specific Slack users or groups using @mentions. = Does Activity Guard slow down my site? = No. Frontend and backend scripts load independently and are built to avoid adding overhead to page load times. The activity log data is stored in a dedicated custom database table to minimize impact on your site's performance. = Does Activity Guard work on WordPress multisite? = Activity Guard is compatible with standard WordPress installations. For network-wide logging across multisite subsites from a single dashboard, see the documentation at wpazleen.com/docs/. = What events trigger notifications? = Alerts can be sent for core file changes, plugin and theme updates (including the username that made the change), WooCommerce orders, payments, coupon usage, incomplete order follow-ups, product edits, stock changes, login and registration events, page and post changes, form submissions, and admin settings changes. A daily digest and weekly plugin download summary are also available. = Is Activity Guard GDPR compliant? = Activity Guard does not collect personal data from visitors by default. The Freemius SDK is included for optional telemetry — no data is collected unless you explicitly opt in via the admin notice. The vulnerability scanner transmits no personal data. See the External Services section for a full list of third-party connections. = What data does Activity Guard send to external servers? = The plugin connects to Cloudflare (if Turnstile is enabled), Slack (if Slack alerts are configured), Telegram (if Telegram alerts are configured), WordPress.org Plugin API for plugin metadata, WPVulnerability.net and NVD for CVE data, and the WPAzleen API for vulnerability lookups and Pro modal settings. No personal visitor data is transmitted in any of these connections. See the External Services section for full details. = Does Activity Guard work with Contact Form 7? = Yes. Activity Guard logs form submissions from Contact Form 7 and SimpleForm, and can send notifications when a form is submitted. = Where can I get support? = Free support is available at wordpress.org/support/plugin/notifier-to-slack/. Priority direct support is at wpazleen.com/support/. = Is there a Pro version? = Yes. Visit wpazleen.com/notifier-to-slack/ for information on premium features and support options. = How do I report a bug or security issue? = For general bugs, use the WordPress.org support forum at wordpress.org/support/plugin/notifier-to-slack/. For security vulnerabilities, contact the team via wpazleen.com/support/. == Screenshots == 1. **Executive Security Dashboard:** Real-time overview of security health score, blocked threats, daily login activity, and system metrics. 2. **Comprehensive Activity Log:** Searchable and filterable audit trail featuring category pills, severity badges, and one-click IP blocking. 3. **Visual Content & Code Diff Viewer:** Side-by-side revision inspector highlighting additions and deletions in posts and PHP files. == Changelog == = 3.14.2 - 22 October 2026 = * 🛡️ **Improvement:** SDK updated and performance Improved = 3.14.1 - 08 October 2026 = * 🛠️ **Improvement:** Integrated Security Feature Checks into the Scanner. * 🐛 **Fix:** Resolved rare fatal error on specific PHP configurations. * ⚡ **Performance:** Optimized database query indexing for activity log retrieval. = 3.14.0 - 07 October 2026 = * 🌟 **New:** Login with OTP (Email-based One-Time Password) with customizable templates. * 🛡️ **Improvement:** Enhanced suspicious activity detection engine and threat classification. * 🚨 **Improvement:** Enhanced Emergency Shutdown remote activation and session revocation. For older entries, see the [changelog.txt file](https://plugins.svn.wordpress.org/notifier-to-slack/trunk/changelog.txt) in the plugin repository.