Description
Sitemap Guardian is a free all-in-one security toolkit for WordPress. It helps administrators monitor site security, strengthen common settings, review activity, and identify files or stored content that need attention.
Key features include:
- Local request and login protection.
- Configurable hardening and security headers.
- File-integrity, database health, and database-content scans.
- Security activity logging, alerts, and update awareness.
- Protected database backup and scheduled local file scans.
- WordPress core, plugin, and theme update inventory.
All features are free. Sitemap Guardian does not collect product telemetry.
Privacy
Sitemap Guardian stores its security settings, scan results, and audit information in the site’s own WordPress database. Audit events can include a validated IP address and user agent where available; records follow the configured retention period. The plugin sends no product telemetry.
External services
WordPress core checksum verification contacts the official WordPress.org checksum service when a file scan is finalized. The dashboard can request the official WordPress.org security-news RSS feed, which is cached locally. Administrator-login emails can include an Opentracker IP lookup link; no request is made to Opentracker unless an email recipient opens that link.
Installation
- Install and activate Sitemap Guardian.
- Open Sitemap Guardian from the WordPress admin menu.
- Review the settings for your environment.
- Run an initial file scan to establish a local baseline.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Sitemap Guardian” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Sitemap Guardian” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.18
- Adds an administrator-only System Information panel with safe website, server, database, and permission diagnostics.
1.0.17
- Adds an optional, safe first-time setup wizard for new installations.
1.0.16
- Adds daily or weekly scheduled local file scans with clear enable/disable controls.
- Adds protected database backup, database health, and database content scans.
- Adds detailed WordPress core, plugin, and theme update inventory.
- Refines Smart 404 protection to a one-minute, per-IP threshold with a default of 50 requests.
1.0.4
- Adds the WordPress.org release panel and fixes Smart 404 throttling to use only a validated individual visitor IP.
1.0.0
- First WordPress.org-ready stable release.