Description
Ladon reports which plugins, themes and core version run on this site to your Ladon account at ladon.hackindex.io. Ladon matches them against the Wordfence vulnerability feed and alerts your team when a component you run has a known vulnerability. Premium plugins and themes that are not on wordpress.org are matched the same way.
The plugin only talks outward. It registers no public REST routes, and the Ladon server never reaches back to your site.
What is sent
- WordPress core version and PHP version
- The slug, version and active state of each installed plugin
- The slug, version and active state of each installed theme
- The site URL and name
Nothing is sent before you connect. On disconnect the site token is removed.
When it is sent
- When a plugin is activated, deactivated or updated
- When a theme is switched
- Once a day as a heartbeat
An unchanged inventory is skipped, so a quiet site sends almost nothing.
External service
This plugin connects your site to Ladon, a service operated by HackIndex at ladon.hackindex.io. It is required for the plugin to function: the plugin reports the inventory listed above and reads back this site’s status. The service matches the versions against a vulnerability feed and notifies your team. All processing happens on the Ladon side; the plugin only reports and reads.
Data is sent to https://ladon.hackindex.io/api/v1 only after an administrator connects the site, and only the data listed above. The site is never contacted from the Ladon side.
- Terms of service: ladon.hackindex.io/terms
- Privacy policy: account.hackindex.io/privacy
Screenshots
Installation
- Install and activate the plugin.
- Go to Settings Ladon in wp-admin.
- Click Connect to Ladon, sign in with your Ladon account, pick a team and confirm.
FAQ
-
Does Ladon scan my site?
-
No. The server never reaches your site. The plugin reports the installed versions and Ladon matches them against its vulnerability feed.
-
Is my data sent anywhere before I connect?
-
No. Nothing leaves the site until an administrator connects it to a Ladon team.
-
How do I stop it?
-
Disconnect under Settings Ladon, or deactivate the plugin. Disconnecting revokes the site token.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“HackIndex Ladon” is open source software. The following people have contributed to this plugin.
Contributors
Translate “HackIndex Ladon” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.0.1
- First release on WordPress.org.
- The plugin and author links point to their own pages.
1.0.0
- First release: connect flow, inventory reporting and daily heartbeat.