Title: AVAR Server Monitor Author: AVAR Published: June 4, 2026 Last modified: July 24, 2026 --- Search plugins ![](https://ps.w.org/avar-server-monitor/assets/banner-772x250.png?rev=3600543) ![](https://ps.w.org/avar-server-monitor/assets/icon-256x256.png?rev=3600567) # AVAR Server Monitor By [AVAR](https://profiles.wordpress.org/pluptak/) [Download](https://downloads.wordpress.org/plugin/avar-server-monitor.1.10.1.zip) * [Details](https://wordpress.org/plugins/avar-server-monitor/#description) * [Reviews](https://wordpress.org/plugins/avar-server-monitor/#reviews) * [Installation](https://wordpress.org/plugins/avar-server-monitor/#installation) * [Development](https://wordpress.org/plugins/avar-server-monitor/#developers) [Support](https://wordpress.org/support/plugin/avar-server-monitor/) ## Description AVAR Server Monitor is a privacy-first WordPress health dashboard, uptime monitor, server diagnostics and security insight toolkit built directly into wp-admin. It helps WordPress administrators understand whether their site is technically healthy, available, secure and running on a reliable server environment — without requiring an external SaaS account. Instead of showing scattered technical data across multiple places, AVAR Server Monitor brings the most important signals into one clear dashboard: uptime, SSL status, PHP and database health, server resources, WP-Cron, an alert center, security checks, activity log, 404 monitoring, diagnostic exports, database maintenance and more. #### Know what is wrong before visitors notice WordPress sites often break quietly. A cron task stops running. An SSL certificate gets close to expiration. The database grows. Debug errors are exposed. A plugin update changes something important. A server starts running out of memory. A backup directory may be exposed. A WooCommerce store accumulates technical clutter. AVAR Server Monitor helps you spot these problems early and decide what needs attention first. #### Site Health Score The main dashboard includes a 0–100 Site Health Score that summarizes the technical condition of your WordPress site. The score is based on weighted categories: * Core & Updates * Server Environment * Security Posture * Reliability & Monitoring * Performance & Storage The score is not just a decorative number. It includes top issues, recommendations, action links and severity caps for critical problems. For example, if a monitored domain is down, an SSL certificate has expired or a snapshot directory is publicly accessible, the score is capped so the site does not appear healthier than it really is. #### Monitoring and diagnostics in one place AVAR Server Monitor includes practical tools for everyday WordPress administration: * Alert Center that turns downtime, SSL expiry, Health Score drops, stalled cron, integrity failures, new PHP fatal errors and a filling disk into one incident timeline (with optional email and automatic diagnostic snapshots). * External heartbeat / dead-man’s switch that pings a URL you control so full outages are still detected. * PHP error monitoring with fatal/warning trends and instant alerts on new fatal errors. * Health Score history and per-domain response-time trends. * Storage growth monitoring: largest database tables, uploads size and a disk-full projection. * Uptime monitoring for one or more domains. * SSL certificate checks and expiration warnings. * WP-Cron monitor with overdue event detection. * Server resource overview with CPU, memory, disk and database information. * WordPress environment overview with versions, plugins, themes and updates. * Health Advisor for PHP, database, extensions, cache and connectivity checks. * Security audit for HTTPS, debug exposure, file editor status, readme.html, REST API, XML-RPC and login hardening. * Core file integrity scan against official WordPress.org checksums. * Activity Log for important plugin, theme, update, user and login events. * 404 monitor for frequently requested missing URLs. * Email alerts for downtime, version changes, resource thresholds and summaries. * Diagnostic snapshots for troubleshooting and support. * Safe Client Health Report for communicating technical status to clients or hosting support. * Database cleanup preview with risk labels, impact descriptions and confirmation flow. * Maintenance / coming-soon mode with a customizable page (background colour, gradient or image, logo and text colour), live preview, countdown and role-based bypass. #### Login security and access control AVAR Server Monitor includes a built-in login security layer, so you can harden wp-admin without adding a separate plugin: * Brute-force protection with escalating lockouts, an IP allowlist and blocklist( CIDR and wildcard support) and manual block/unblock of active lockouts. * A persistent, paginated login attempt log with per-IP statistics: failed attempts, incidents, lockouts and successful sign-ins, plus top attacking IPs and most- targeted usernames. * A login CAPTCHA on the login, registration and lost-password forms — a privacy- first self-hosted math question with honeypot by default, or optional Cloudflare Turnstile, Google reCAPTCHA v2 or hCaptcha with your own keys. * An optional custom login URL that serves the login page from a secret slug and returns 404 for the default wp-login.php. These features run locally and require no external account; CAPTCHA providers are contacted only if you explicitly choose one. #### Part of the AVAR Tools family AVAR Server Monitor works perfectly on its own with its own top-level menu. When another AVAR Tools plugin (such as AVAR Media Optimizer) is also active, they automatically share a single “AVAR Tools” admin menu with a common dashboard, so related tools live together instead of scattering across wp-admin. All existing page URLs stay the same either way. #### Privacy-first approach AVAR Server Monitor is not an external monitoring SaaS platform. Most features run locally inside your WordPress installation. The plugin does not require an AVAR cloud account and does not send local health reports, diagnostic snapshots or server data to AVAR servers. Some features may connect to public external services only when needed, such as the WordPress.org API for checksums and version information, or geolocation providers for server location lookup. #### Built for safety Because monitoring and diagnostics can touch sensitive areas, AVAR Server Monitor includes a dedicated Advanced Tools safety model. Higher-risk tools are locked by default and require explicit activation. Advanced Tools include features such as: * Diagnostic snapshots. * Full phpinfo(). * wp-config.php debug switches. * Cron run/unschedule actions. * Database cleanup. * Table optimization. * Force HTTPS. * HSTS. * Selected exports and filesystem operations. Sensitive actions use capability checks, nonces, confirmations, safety warnings and safer defaults where appropriate. #### Safer HTTPS and HSTS handling Force HTTPS and HSTS are not simple checkboxes. They are enabled through protected safety flows with pre-flight checks, host validation and typed confirmation for HSTS includeSubDomains. This reduces the risk of locking yourself out of the site or accidentally applying strict HSTS rules to subdomains that are not ready for HTTPS. #### Database cleanup with preview Database cleanup can be useful, but it should never feel like a blind “delete everything” button. AVAR Server Monitor analyzes cleanup candidates first and shows what can be removed, the risk level and the likely impact. Riskier actions require typed confirmation. Revision cleanup supports retention rules. WooCommerce content in Trash is detected and order-like records are excluded unless explicitly selected. The plugin uses WordPress APIs where appropriate, such as when deleting posts and comments, so other plugins and WordPress hooks can respond correctly. #### Diagnostic snapshots Diagnostic snapshots are designed for troubleshooting, support and quick technical review. They use private storage by default when possible, long random archive names, self- healing protection files, public-access checks and safer file exclusions. Snapshots are a diagnostic aid, not a replacement for a full disaster recovery backup strategy. For complete recovery protection, use hosting-level backups or a dedicated backup plugin. #### Who is AVAR Server Monitor for? AVAR Server Monitor is useful for: * WordPress administrators who want a clear technical overview. * Freelancers maintaining client websites. * Small agencies managing business sites. * WooCommerce store owners who want to catch technical risks early. * Website owners who want monitoring without an external SaaS account. * Developers who need quick diagnostics inside wp-admin. * Support teams that need safe technical reports from clients. #### What makes it different? Many tools focus on only one area: uptime, backups, security, debugging, logs or server information. AVAR Server Monitor focuses on the practical day-to-day question most WordPress administrators have: “Is this site technically healthy, and what should I check first?” It combines health scoring, monitoring, security checks, cron visibility, diagnostics, reports and safer maintenance tools into one privacy-first WordPress dashboard. #### Typical use cases Use AVAR Server Monitor to: * Check whether your site is currently healthy. * Monitor uptime and SSL status. * See if WP-Cron is running correctly. * Review PHP, database and server environment health. * Detect security configuration issues. * Track important plugin/theme/update activity. * Find repeated 404 requests. * Export a safe client or support report. * Review database cleanup candidates before deleting anything. * Create a diagnostic snapshot for troubleshooting. * Understand which issues deserve attention first. #### Important note AVAR Server Monitor provides monitoring, diagnostics and safety-focused maintenance tools. Some Advanced Tools can change configuration, delete data or access sensitive diagnostic information. Read warnings carefully, keep regular backups and test higher-risk actions on staging sites whenever possible. ### External services AVAR Server Monitor may connect to external services only for specific features: * WordPress.org API (api.wordpress.org) — used for WordPress core checksums, plugin/ theme information and version-related checks. * Geolocation providers (only when server location lookup is enabled, and only the provider you select) — ip-api.com (https://ip-api.com/, free lookup, no key) or MaxMind GeoLite (https://www.maxmind.com/, requires your own account and license key). The provider receives the server’s IP address. The default “Anonymous” provider is fully local and contacts no external service. * The monitored site URLs — used by the uptime monitor to check availability of configured domains. * Your external heartbeat endpoint (only if you enable the heartbeat) — the plugin periodically sends an HTTP request to the URL you configure (for example healthchecks. io, Cronitor or Uptime Kuma), so your external monitor can detect a full outage. No site data is included in the ping. * CAPTCHA providers (only if you choose one) — Cloudflare Turnstile, Google reCAPTCHA or hCaptcha receive the challenge token and visitor IP to verify a login/registration attempt. The default self-hosted math + honeypot CAPTCHA uses no external service. The plugin does not require an AVAR cloud account and does not send diagnostic snapshots or local health reports to AVAR servers. ## Screenshots [⌊Overview dashboard with the Site Health Score, top issues, environment cards and key server/resource status.⌉⌊Overview dashboard with the Site Health Score, top issues, environment cards and key server/resource status.⌉[ Overview dashboard with the Site Health Score, top issues, environment cards and key server/resource status. [⌊System Resources with live CPU load, memory usage, database size, disk usage, history graphs and storage growth.⌉⌊System Resources with live CPU load, memory usage, database size, disk usage, history graphs and storage growth.⌉[ System Resources with live CPU load, memory usage, database size, disk usage, history graphs and storage growth. [⌊Alert Center: one place for downtime, SSL expiry, Health Score drops, stalled cron, integrity, PHP fatals and disk alerts, plus the external heartbeat.⌉⌊Alert Center: one place for downtime, SSL expiry, Health Score drops, stalled cron, integrity, PHP fatals and disk alerts, plus the external heartbeat.⌉[ Alert Center: one place for downtime, SSL expiry, Health Score drops, stalled cron, integrity, PHP fatals and disk alerts, plus the external heartbeat. [⌊Security screen with the HTTPS/HSTS safety flow, login/API hardening, SSL certificate status, configuration audit and core file integrity.⌉⌊Security screen with the HTTPS/ HSTS safety flow, login/API hardening, SSL certificate status, configuration audit and core file integrity.⌉[ Security screen with the HTTPS/HSTS safety flow, login/API hardening, SSL certificate status, configuration audit and core file integrity. [⌊Login Security with brute-force protection, per-IP attempt statistics, active lockouts, allow/block lists, custom login URL and CAPTCHA.⌉⌊Login Security with brute-force protection, per-IP attempt statistics, active lockouts, allow/block lists, custom login URL and CAPTCHA.⌉[ Login Security with brute-force protection, per-IP attempt statistics, active lockouts, allow/block lists, custom login URL and CAPTCHA. ## Installation 1. Upload the plugin folder to `/wp-content/plugins/avar-server-monitor/`, or install the plugin through the WordPress admin area. 2. Activate the plugin from the Plugins screen. 3. Open AVAR Server Monitor from the left admin menu. 4. Review the Overview dashboard and Site Health Score. 5. Enable uptime monitoring, email alerts or Advanced Tools as needed. 6. Read the warnings carefully before using sensitive tools. ## FAQ ### Do I need an external account or SaaS service? No. The plugin is designed to work directly inside WordPress. Most features run locally inside wp-admin. ### Does the plugin send data to an AVAR server? No. The plugin does not require an AVAR SaaS account and does not send local diagnostic data to an AVAR server. ### Does the plugin use external services? Yes, some features may use public external services. For example, the WordPress. org API may be used for checksums, plugin/theme/core information, and geolocation providers may be used for server location lookup. These services are documented by the plugin. ### Is the plugin suitable for beginners? Yes. Basic monitoring and the Site Health Score are designed to be useful for regular WordPress administrators. Higher-risk tools are separated into Advanced Tools and include additional warnings. ### Can the plugin break my site? Regular monitoring and diagnostic features are read-only or low risk. Some Advanced Tools can change configuration, delete data or work with files. These actions are protected with confirmations, nonces, capability checks and safety warnings. ### Are database cleanup tools safe? The plugin uses WordPress APIs where appropriate, such as when deleting posts and comments. Cleanup is preview-first, risky items are not selected by default and permanent deletion requires typed confirmation. However, these are still irreversible operations. We recommend having a current backup before running database cleanup. ### Does the plugin delete WooCommerce data? The plugin detects WooCommerce content in Trash during database cleanup and shows special warnings. Order-like records such as orders, refunds and subscriptions are excluded unless explicitly selected by the user. ### Are snapshots a replacement for a full backup solution? No. Diagnostic snapshots are intended for troubleshooting and analysis. For full disaster recovery, use hosting backups or a dedicated backup plugin. ### Where are snapshots stored? The plugin uses private storage outside the web root by default when available. If private storage is not writable, it may use an uploads fallback with best-effort protection. ### Why is HSTS protected through Advanced Tools? HSTS can cause problems if misconfigured, especially when includeSubDomains is used and not all subdomains support HTTPS. For this reason, HSTS activation uses a dedicated safety flow and typed confirmation. ### Does the plugin work on multisite? Yes. The plugin includes basic multisite support and a network overview. Some features may be limited by network configuration and permissions. ### Does the plugin slow down the site? The plugin is designed to minimize performance impact. Admin assets are loaded only where needed. 404 logging includes throttling and static asset ignores. Resource history and uptime monitoring use scheduled tasks and limits. Some manual diagnostic actions, such as size scans, database cleanup or table optimization, may be heavier on large sites. ### How do I get support, report a bug or suggest a feature? The best place is the plugin support forum on WordPress.org at https://wordpress. org/support/plugin/avar-server-monitor/. Post your question, bug report or feature suggestion there — replies are public, so they also help other users. You can also contact the author by email at support@avar.sk or through the plugin website at https://www.avar.sk/en/plugins/avar-server-monitor/. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “AVAR Server Monitor” is open source software. The following people have contributed to this plugin. Contributors * [ AVAR ](https://profiles.wordpress.org/pluptak/) “AVAR Server Monitor” has been translated into 5 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/avar-server-monitor/contributors) for their contributions. [Translate “AVAR Server Monitor” into your language.](https://translate.wordpress.org/projects/wp-plugins/avar-server-monitor) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/avar-server-monitor/), check out the [SVN repository](https://plugins.svn.wordpress.org/avar-server-monitor/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/avar-server-monitor/) by [RSS](https://plugins.trac.wordpress.org/log/avar-server-monitor/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.10.1 * Fixed: an alert type that was turned off could still send its “resolved” email( for example “WP-Cron is running again”) even when the opening alert was never sent. Resolution emails now respect the alert-type filter and are only sent when the opening incident was actually emailed. * Changed: the “WP-Cron is stalled / overdue” alert is now off by default on new installations. WP-Cron only runs when the site is visited, so low-traffic sites often look stalled; enable it under Monitoring Alerts if you want these notices. #### 1.10.0 * New: the Alert Center turns monitoring signals — downtime, SSL expiry, Health Score drops, stalled WP-Cron, core-integrity failures, new PHP fatal errors and a filling disk — into a single incident timeline, with optional email (minimum- severity filter) and automatic diagnostic snapshots on critical events. All notifications now live in one unified Alerts tab. * New: external heartbeat (“dead-man’s switch”) pings a URL you control (healthchecks. io, Cronitor, Uptime Kuma or your own endpoint), so a full outage — the one thing an in-site monitor cannot catch on its own — is still detected. * New: PHP error monitoring with fatal/warning trends and an alert the moment a new fatal error appears. * New: Health Score history and per-domain response-time trends. * New: storage growth monitoring with a disk-full projection. * New: the maintenance page is now customizable — solid colour, gradient or background image, custom text colour and a logo, via the colour picker and media library. * Added a complete Slovak translation. #### 1.8.0 * Removed two-factor authentication (2FA). Account protection now lives in the dedicated AVAR Security plugin, where it is maintained and extended; AVAR Server Monitor keeps its monitoring focus and its Login Security tools (brute-force protection, CAPTCHA, custom login URL). No account is ever locked out — sign- in simply no longer asks for a second factor. If you rely on 2FA, install AVAR Security before or after updating. * Joined the AVAR Tools family: when another AVAR Tools plugin is active, they share a single “AVAR Tools” admin menu and a common dashboard; on its own, AVAR Server Monitor keeps its top-level menu. All existing page URLs are unchanged. * Redesigned the admin interface in the AVAR brand, added a new status-gauge plugin icon and a customizable shared dashboard that surfaces the Site Health Score with its category breakdown. #### 1.7.0 * New Login Security module: brute-force protection with escalating lockouts (up to 24 hours), an IP allowlist and blocklist (CIDR and wildcard support), and manual block/unblock of active lockouts. * New persistent, per-IP login attempt log: every attempt is recorded and classified, with statistics for failed attempts, incidents, lockouts and successful sign- ins, plus top attacking IPs and most-targeted usernames. * New login CAPTCHA on the login, registration and lost-password forms: a privacy- first self-hosted math question with honeypot by default, or optional Cloudflare Turnstile, Google reCAPTCHA v2 or hCaptcha with your own keys. * New optional custom login URL: serve the login page from a secret slug and return 404 for the default wp-login.php. * Optional email alerts when a lockout is triggered or an administrator signs in, with automatic log pruning on a configurable retention window. #### 1.6.0 * Added a weighted Site Health Score with Core, Server, Security, Reliability and Performance categories, severity caps, top issues, recommendations and action links. * Added Safe Client Health Report and improved system exports for support, diagnostics and client communication. * Improved the Advanced Tools safety model for sensitive actions such as diagnostic snapshots, full phpinfo(), wp-config debug switches, cron management, database cleanup, table optimization and one-click security fixes. * Improved Force HTTPS and HSTS flows with capability checks, nonces, HTTPS pre- flight checks, host validation and typed confirmation for HSTS includeSubDomains. * Improved diagnostic snapshots with private storage by default, long random archive names, self-healing directory protection, public-access checks and safer file exclusions. * Improved database cleanup with a preview-first workflow, risk labels, impact descriptions, batch processing, WordPress API deletion for posts/comments and typed confirmation for risky actions. * Improved revision cleanup with retention options and safer WooCommerce handling, including warnings for store content and explicit opt-in for order-like records. * Improved table optimization so it targets only the current WordPress table prefix by default, with an opt-in option for all database tables and clearer performance warnings. * Improved cron tools so run and unschedule actions target a single event by hook, timestamp and arguments while protecting critical hooks. * Improved wp-config.php edits with timestamped backups, atomic writes, permission preservation where possible and cancellation when a backup cannot be created. * Improved REST API restriction with an allowlist and improved login-attempt limiting with IP + username matching and trusted proxy/CDN header support. * Improved 404 logging, error-log handling and phpinfo access to reduce performance impact and better protect sensitive diagnostic information. * Improved Health Score signals for downtime, SSL expiry and not-checked states, backup exposure, debug-log size and critical score caps. * Improved admin navigation and UI organization across Overview, Monitoring, System, Security, Tools and Settings. * Improved uninstall cleanup options for plugin-created files such as diagnostic snapshots and wp-config/readme backups. * Fixed multiple HTML, SVG, cleanup, filesystem, directory-scan and WordPress.org readiness issues. #### 1.5.11 * Added plugin screenshots and aligned screenshot captions. * Documentation-only update with no functional code changes. #### 1.5.10 * Initial public release on WordPress.org. * Added WordPress health, server monitoring, uptime checks, resource history, environment details and server location overview. * Added security audit tools, SSL checks, cron monitoring, activity logging, 404 monitoring and email alerts. * Added diagnostic tools including backups/snapshots, database cleanup, table optimization, PHP diagnostics, maintenance mode and system exports. * Improved WordPress.org readiness, coding standards compliance, filesystem safety and external-service documentation. #### Earlier internal builds * Internal development builds used before the first public WordPress.org release. * Core monitoring, security, uptime, cron, logging, diagnostics and maintenance features were developed and tested during this phase. ## Meta * Version **1.10.1** * Last updated **3 days ago** * Active installations **10+** * WordPress version ** 6.0 or higher ** * Tested up to **7.0.2** * PHP version ** 7.4 or higher ** * Languages * [Czech](https://cs.wordpress.org/plugins/avar-server-monitor/), [Dutch](https://nl.wordpress.org/plugins/avar-server-monitor/), [English (US)](https://wordpress.org/plugins/avar-server-monitor/), [Russian](https://ru.wordpress.org/plugins/avar-server-monitor/), [Slovak](https://sk.wordpress.org/plugins/avar-server-monitor/), and [Spanish (Spain)](https://es.wordpress.org/plugins/avar-server-monitor/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/avar-server-monitor) * Tags * [monitoring](https://wordpress.org/plugins/tags/monitoring/)[security](https://wordpress.org/plugins/tags/security/) [server](https://wordpress.org/plugins/tags/server/)[site health](https://wordpress.org/plugins/tags/site-health/) [uptime](https://wordpress.org/plugins/tags/uptime/) * [Advanced View](https://wordpress.org/plugins/avar-server-monitor/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/avar-server-monitor/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/avar-server-monitor/reviews/) ## Contributors * [ AVAR ](https://profiles.wordpress.org/pluptak/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/avar-server-monitor/)