WordPress Security Audit Log and Threat Score

A score you can trust because you can see exactly what built it.

Monitoring, Scoring, and Audit: One View, Correlated, Not Guessed

A dozen separate detectors flagging things independently isn’t the same as understanding what’s actually happening on your site. This correlates every signal into one score per IP, keeps a record of every security change that can’t be quietly edited after the fact, and puts a single, honest number on how protected you actually are right now.

Key Features

Composite Threat Scoring

Correlates every detection method into one score per IP, so five weak signals together can justify a block even when none of them alone would. Optional and off by default.

Site-Wide Anomaly Alerting

Compares this hour's total failed-login rate against a rolling 7-day baseline, catching a slow, distributed attack that per-IP lockout is structurally blind to.

Tamper-Evident Audit Log

Every security-relevant change is cryptographically chained to the entry before it. Editing or deleting an entry afterwards breaks the chain in a way that's detectable, not just hoped for.

Local Security Health Score

One number, plain-English findings underneath it, nothing sent anywhere. A real answer to "how protected am I right now," not a guess.

Dashboard Widget

Blocked count, Health Score, and 2FA coverage, visible on the main dashboard the moment you log in, no digging through settings to check.

Webhook Alerts & Email Digest

Send alerts straight to a Slack or Discord webhook, plus an optional weekly summary email through your site's own mail system. Both off by default.

One score, correlated from everything else this catches

Get free access Get free access Get free access

Monitoring, Scoring & Audit

Every claim checked against a real site