=== Activity Guard - Complete Security, Activity Log & WooCommerce Analytics Tracker ===
Contributors: wpazleen, sambyte
Tags: activity log, security, woocommerce, user tracking, audit log
Requires at least: 5.9
Tested up to: 6.9
Requires PHP: 5.6
Stable Tag: 3.11.2
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

Activity log, firewall, WooCommerce analytics, and Slack/Telegram alerts - all in one free WordPress security plugin.

== Description ==

**Activity Guard** is the only free WordPress plugin that combines a complete **activity log**, built-in **security firewall with scanner**, deep **WooCommerce analytics**, and **multi-channel real-time alerts** (Slack, Telegram, Email) in a single dashboard - so you can monitor, protect, and recover from threats without juggling multiple plugins.

Most activity log plugins only log events. Most security plugins only block threats. Activity Guard does both - and adds WooCommerce abandoned-cart analytics and a plugin vulnerability scanner that no dedicated activity log competitor includes for free.

Whether you run a WooCommerce store, a multi-author blog, or a client agency, Activity Guard gives you the full picture: **who did what, when, from where - and what to do about it.**

[youtube https://youtu.be/KXT0QcnFLOg]

**[Activity Guard Website](https://wpazleen.com/notifier-to-slack/)** | **[Documentation](https://wpazleen.com/docs/)** | **[Pro Support](https://wpazleen.com/support/)**

Join us:
* [Facebook Community](https://www.facebook.com/wpazleens)
* [YouTube Tutorials](https://www.youtube.com/channel/UCqR5SPvn6N2ZBq7AyYKfEnA)
* [X / Twitter](https://x.com/wpazleen)


=== Why Activity Guard Is Different ===

Other activity log plugins make you buy a premium plan to get Slack alerts, security features, or WooCommerce tracking. Activity Guard ships all of that - including **Telegram notifications**, **IP firewall with emergency shutdown**, **plugin vulnerability scanning**, and **WooCommerce incomplete-order tracker with analytics**.

Activity Guard combines all four of these capabilities at once:

* Full WordPress activity log with visual charts
* Advanced security firewall with IP blocking and emergency session shutdown
* WooCommerce analytics including abandoned cart recovery tracking
* Real-time multi-channel alerts via Slack, Telegram, and Email

=== Complete WordPress Activity Log ===

Activity Guard logs every meaningful change on your site with IP address, username, timestamp, and change detail - so you always know **who changed what, when, and from where**.

* User logins, logouts, and failed login attempts
* User registration, role changes, and profile edits
* Page, post, custom post type - create, edit, delete, status changes
* Plugin and theme activations, deactivations, updates, and deletions
* WordPress core settings and configuration changes
* Menu, widget, and sidebar modifications
* Email delivery tracking (email log)
* Form submission tracking (Contact Form 7, SimpleForm, and more)
* Admin settings changes and debug log events
* Cron job scheduling and background process tracking
* Script modification and file change detection
* Visitor traffic monitoring with disable toggle

Visual charts and graphs provide at-a-glance summaries of your audit log - no need to scroll through raw log tables to understand site trends.

=== Advanced WordPress Security & Firewall ===

Activity Guard is a proactive security plugin, not just a passive logger. It actively blocks threats and alerts you before damage occurs.

* IP blocking: manual, CIDR range, and conditional rule-based
* Emergency shutdown: instantly force-logout all active sessions
* Cloudflare Turnstile login protection against bots and brute force
* Login rate limiting to stop credential-stuffing attacks
* Bot detection and automatic IP blocking
* Restrict or fully disable XML-RPC access
* Core file integrity scanner - detect unauthorized file changes
* File integrity monitoring across plugins and themes
* Block TOR network access
* Block vulnerability scanner user agents
* HTTP security headers (custom, logged, and enforced)
* WordPress version hiding from public exposure
* 404 error tracking and suspicious HTTP request alerts
* Admin dashboard visitor tracking
* Cron job failure and site downtime monitoring

**Emergency Shutdown** is a feature unique to Activity Guard: with one click, you can force-logout every logged-in session on your site - ideal when you detect a breach in progress.

=== Plugin Vulnerability Scanner ===

Activity Guard scans every installed plugin and theme for known security vulnerabilities before they become a problem - no separate security scanner needed.

* Detect plugins with known CVEs against multiple vulnerability databases
* Flag outdated plugins not compatible with your WordPress version
* Identify abandoned plugins (not updated in over a year)
* Warn about plugins with low install counts or poor ratings
* Cross-reference NVD (National Vulnerability Database), WPVulnerability.net, and the WPAzleen private API

No other free activity log plugin includes a built-in multi-database vulnerability scanner.

=== WooCommerce Activity Log & Analytics ===

Activity Guard tracks every event in your WooCommerce store - and goes further with analytics designed specifically for store owners.

* Log all order status changes, payments, refunds, and cancellations
* Stock level changes and low-stock events
* Coupon creation, editing, and usage notifications
* Product edits, pricing changes, and metadata updates
* Billing and shipping address modifications
* Customer registration and account changes
* Shipping status updates in real time
* **Incomplete Orders / Abandoned Cart Analytics**: track checkout drop-offs, recovery potential, recovery rate, and customer cart interactions to understand where revenue is being lost

WooCommerce incomplete-order analytics (abandoned cart tracking with recovery rate metrics) is included free - no other activity log plugin in the WordPress.org directory provides this at no cost.

=== Multi-Channel Real-Time Alert System ===

Receive instant alerts the moment a critical event occurs - across four notification channels:

* **Slack**: send alerts to any Slack channel or tag specific users and groups using Slack user/group @mentions
* **Telegram**: receive real-time security and activity alerts in your Telegram chat
* **Email**: configurable email alerts for any event type
* **Admin Dashboard**: in-dashboard notification panel

Notification types include:
* Core file change alerts
* Plugin and theme update alerts (with updater username)
* WooCommerce order, payment, and coupon alerts
* Incomplete order follow-up reminders (recover lost sales)
* Product edit, stock change, and shipping update alerts
* Login, registration, and role change alerts
* Page, post, and taxonomy create/update/delete alerts
* Form submission and admin settings change alerts
* Daily review digests and weekly plugin download summaries

You can schedule notifications for specific times and configure exactly which events trigger alerts - giving you full control without alert fatigue.

=== Admin & Developer Tools ===

* Maintenance mode toggle directly from the dashboard
* Menu and widget change tracking
* Plugin and theme activation/deactivation logs
* Script modification detection
* HTTP security header change logging
* Debug log and fatal error detection
* Email log: full delivery history for all outgoing WordPress emails
* Form integration alerts for Contact Form 7 and SimpleForm

=== Perfect For ===

* **WooCommerce Store Owners**: Track every order, coupon, product change, and shipping event - and recover revenue with abandoned-cart analytics
* **Site Administrators**: Know exactly who changed what, instantly log off suspicious users, and keep a clean audit trail
* **WordPress Agencies & Developers**: Monitor plugin/theme updates, configuration changes, fatal errors, and debug logs across client sites
* **Security-Focused Admins**: Proactively block IPs, scan for vulnerabilities, monitor file integrity, and trigger emergency shutdowns
* **Multi-Author Sites & Teams**: Hold contributors accountable with a complete user activity log and role-change tracking


== Final Thoughts ==

**Activity Guard** is the **Best WordPress plugin to track all changes**, acting as your all-in-one **activity log**, **notifier**, **user log**, **email log**, and **security plugin** designed to keep your WordPress site safe, efficient, and well-monitored.

With real-time alerts, detailed logs, and robust features, you’ll never miss a thing from **How to monitor user activity on a WordPress site** to site vulnerabilities.

Try **Activity Guard** today and bring total visibility and **WordPress Security** to your WordPress site.

**Don’t just take our word for it – try Activity Guard yourself and experience the difference!**


Secure your WordPress site and stay informed with **Activity Guard** – your all-in-one solution for **Real-time user monitoring WP** and **WordPress activity log plugin**.


## Documentation & Support
- [Website](https://wpazleen.com/notifier-to-slack/)
- [Documentation](https://wpazleen.com/docs/)
- [Tutorials](https://www.youtube.com/@WPAzleen/playlists)
- [Setup Video](https://youtu.be/jOyU2jxTmfY?si=xoaxFLgFhszXmuFx)

== External services ==

## Slack Webhook Integration

**Activity Guard** allows you to send notifications of all active actions directly to your Slack workspace using Slack webhooks. This feature enables real-time monitoring of plugin activities.

### 🔧 Webhook Configuration

The plugin uses the Slack incoming webhook URL you provide to send notifications to your Slack channel.

To set up an incoming webhook for your Slack workspace:

1. Create a new app or use an existing one  
2. Activate [Incoming Webhooks](https://api.slack.com/messaging/webhooks) for your app  
3. Add a new webhook to your workspace  
4. Copy the webhook URL and paste it into the plugin settings  


## Cloudflare Turnstile

**Activity Guard** also uses [Cloudflare Turnstile](https://www.cloudflare.com/application-services/products/turnstile/) to enhance security and prevent spam. For more details, please refer to Cloudflare's [privacy policy](https://www.cloudflare.com/application-services/products/turnstile/).


## Plugin Security Scanner

This component checks for known vulnerabilities in installed WordPress plugins by analyzing various public and private data sources. It runs a series of automated security checks and provides recommendations.

### Features

- Detects outdated plugins
- Flags abandoned plugins (not updated in over a year)
- Checks WordPress version compatibility
- Warns about low install counts
- Analyzes plugin ratings
- Checks against multiple vulnerability databases

### Data Sources

- **WordPress.org Plugin API**  
  Used to retrieve plugin metadata such as latest version, last updated date, rating, active installs, etc.  
  📄 [Privacy Policy](https://wordpress.org/about/privacy/)

- **WPAzleen API** (`/wp-json/wpx/v1/plugin-vulnerabilities`)  
  Custom API endpoint to fetch known vulnerabilities for specific plugins and versions.  
  📄 *No sensitive data is transmitted. Private API complies with plugin author's data policy.* [Privacy Policy](https://wpazleen.com/privacy-policy/)

- **WPVulnerability.net**  
  Public API used to retrieve CVE-based vulnerability data for WordPress plugins.  
  📄 [Privacy Policy](https://www.wpvulnerability.com/privacy/)

- **National Vulnerability Database (NVD)**  
  Checks against known CVEs using official NVD data.  
  📄 [Privacy Policy](https://www.nist.gov/oism/site-privacy)

Activity Guard does **not collect**, **store**, or **transmit** any sensitive or personal information to performed the scan. All scans and checks are performed locally using public plugin metadata and vulnerability sources.

## Freemius

**Activity Guard an renamed version of Notifier to Slack** utilizes the [Freemius](https://freemius.com/) SDK to collect limited telemetry data, only upon the user's explicit confirmation. This data helps us troubleshoot issues efficiently and improve our product for a better user experience.

### 🔐 Key Points:
1. **No Data Collected by Default**  
   The Freemius SDK does **not** collect any data by default. Data collection only begins when the user consents via the admin notice displayed in the plugin interface.

2. **User Confirmation Required**  
   Integration of the Freemius SDK **does not automatically enable data collection**. Data is only gathered after users confirm their consent.

3. **Purpose of Data Collection**  
   The collected data is used solely to enhance the user experience, resolve issues more effectively, and improve the plugin's functionality.

For more details about Freemius and its data practices, please visit their [FAQ page](https://freemius.com/privacy/).

Additionally, you can review WPAzleen's [privacy policy](https://wpazleen.com/privacy-policy/) for further information.


== Installation ==
You can install the plugin manually or via the WordPress admin panel.

1. Upload the Plugin:
- Upload the notifier-to-slack folder to the /wp-content/plugins/ directory.
- Alternatively, install the plugin through the WordPress plugins screen directly.

2. Activate the Plugin:
- Navigate to the 'Plugins' section in your WordPress admin panel.
- Click 'Add New' and search for "Activity Guard By WPAzleen".
- Click 'Install Now' and then activate the plugin.

3. Configure Settings:
- Navigate to Activity Guard in the WordPress dashboard.
- Configure your security settings from ⚙️ Configuration, active all notification preferences, and activity tracking options.

== Frequently Asked Questions ==

= How is Activity Guard different from other WordPress activity log plugins? =

Most activity log plugins (like WP Activity Log, Simple History, or Stream) focus only on logging - you pay extra for Slack notifications, security features, or WooCommerce tracking. Activity Guard combines all four in one free plugin: a complete activity log, an advanced security firewall, deep WooCommerce analytics with abandoned-cart tracking, and multi-channel alerts (Slack, Telegram, Email). No other free plugin on WordPress.org does all of this together.

= Is Activity Guard compatible with WooCommerce? =

Yes. Activity Guard tracks WooCommerce orders, payments, refunds, coupon usage, product edits, stock changes, shipping updates, and customer account changes. It also includes abandoned-cart and incomplete-order analytics to help you identify and recover lost revenue - a feature not available in any competing free plugin.

= Can I block suspicious users or IP addresses? =

Yes. Use the manual IP blocker, CIDR range blocker, or conditional rule-based blocker to restrict any visitor. You can also trigger an emergency shutdown to immediately force-logout all active user sessions if you detect a breach.

= How do I set up Slack notifications? =

Go to Activity Guard > Integrations in your dashboard, enter your Slack webhook URL, and choose which events to send. Step-by-step instructions and your webhook setup guide are available in the settings panel. You can also tag specific Slack users or groups in alerts.

= Does Activity Guard slow down my website? =

No. Activity Guard is built for minimal performance impact. Frontend and backend scripts load independently and are optimized to avoid adding overhead to page load times.

= Is there a Telegram integration? =

Yes. Go to Activity Guard > Integrations, enter your Telegram bot token and chat ID, and you will start receiving real-time security and activity alerts in your Telegram chat. This was added in version 3.10.4.

= Does Activity Guard work on multisite WordPress? =

Activity Guard is compatible with standard WordPress installations. For multisite-specific network-wide logging across all subsites from a single dashboard, refer to our documentation.

= What is the Plugin Vulnerability Scanner? =

Activity Guard's built-in scanner checks every installed plugin and theme against multiple vulnerability databases - including NVD, WPVulnerability.net, and the WPAzleen API - to detect known CVEs, outdated versions, abandoned plugins, and compatibility issues. No separate security scanner is needed.

= Do I need coding skills to use Activity Guard? =

No. The interface is designed for site owners and administrators of all technical levels. Setup takes a few minutes.

= Where can I get support? =

Free support is available at [wordpress.org/support/plugin/notifier-to-slack](https://wordpress.org/support/plugin/notifier-to-slack/). Priority direct support is available at [wpazleen.com/support](https://wpazleen.com/support/).

= Is there a Pro version? =

Visit [wpazleen.com](https://wpazleen.com/notifier-to-slack/) for information on premium features and support options.

== Screenshots ==

1. Security Dashboard - real-time overview of all security events, blocked IPs, and threat activity on your WordPress site.
2. Activity Log - complete audit trail showing user actions, IP addresses, timestamps, and change details with advanced filtering.
3. Author/User Activity Page - per-user activity history showing every action taken by a specific WordPress user or admin.
4. Integration Settings - configure Slack webhook, Telegram bot, and email notification channels for real-time alerts.
5. Advanced Security Settings - IP blocking rules, emergency shutdown, Cloudflare Turnstile, XML-RPC controls, and file integrity settings.
6. WooCommerce Settings Panel - configure order tracking, abandoned cart analytics, coupon alerts, and WooCommerce notification preferences.
7. Slack Webhook Setup - step-by-step Slack integration configuration with user/group tag support.
8. Slack Notification Example - real-time Slack alert showing event type, user, IP address, and change details.
9. Plugin Vulnerability Scanner - automated scan results showing vulnerable, outdated, and abandoned plugins with severity ratings.

== Changelog ==

### Version 3.11.2 – 01 May 2026
- ⚙️ **Improvement** : Performance optimizations and maintenance updates

### Version 3.11.1 – 13 Mar 2026

### Version 3.11.0 – 07 Dec 2025
- 🔥 **New** : Single or Bulk Activity log trash in once Click.
- 🐞 **Bug Fixes** : Resolved frontend activity tracking ajax error.
- 🐞 **Bug Fixes** : Maintenance form submission error.
- 🐞 **Bug Fixes** : Resolved analytics toggle not removed widget from dashboard.

### Version 3.10.6 – 17 Dec 2025
- 🔥 **New** : SDK updated
- 🛠️ **Improvement** : Today Sign out UX improved
- 🛠️ **Improvement** : Emergency Shutdown panel enhanced

### Version 3.10.5 – 12 Nov 2025
-🐞 **Bug Fixes** : Resolved multiple issues affecting the Visitor Traffic table for smoother data display and improved stability.


### Version 3.10.4 – 09 Nov 2025

- 💬 **Telegram Integration** : Stay instantly informed with real-time Telegram alerts! You can now connect your Telegram account to receive immediate activity notifications and security updates directly in your chat.  

- 👀 **Enhanced Visitor Traffic Overview (with Disabled Feature Toggle)** : The visitor tracking system has been upgraded for better visibility and flexibility. You can now easily monitor detailed visitor logs and disable the tracking feature anytime without impacting site performance.  

- ⚙️ **Optimized Backend Script Loading & Performance** : Backend processes have been refined to reduce load time and enhance overall system efficiency, providing a smoother and faster admin experience.  

- 🌐 **Optimized Frontend Script Loading** : Frontend scripts are now lighter and better organized boosting page loading speed and improving the browsing experience for visitors.  

For a detailed list of updates, refer to our [Changelog](https://headwayapp.co/notifier-to-slack-changelog/).

For older changelog entries, please see the [additional changelog.txt file](https://plugins.svn.wordpress.org/notifier-to-slack/trunk/changelog.txt) delivered with the plugin.