Description
A site is not only broken when the page stays white. It is also broken when no order confirmation has gone out for
three days because WP-Cron has stalled. Or when the certificate expires in two weeks and nobody read the issuer’s
email. Or when a plugin has been carrying a known vulnerability for months.
DomainWarn monitors your domains from the outside – availability, redirects, TLS
certificate, DNS, SPF, DKIM, DMARC, blacklists, domain expiry. This plugin adds the inside view that nobody can see
from outside.
What the plugin does
- Adds the addresses of this site to monitoring. In a network, every site.
- Reports what is invisible from outside: the exact WordPress and PHP version, plugins and themes with a pending
update, the mail setup – sender address and server. Together with the DNS records this yields the finding “your
site sends through a server that is not in the SPF record”, which neither the site nor an outside check can reach
on its own. - Notices when WP-Cron stalls. A scheduled run reports in every 15 minutes. If it stops, WP-Cron has stalled:
the site still answers, but no mail goes out and nothing is processed. DomainWarn then opens an incident and sends
it to your channels – email, Slack, Teams or webhook. - Works from the command line as well:
wp domainwarn test,wp domainwarn sync,wp domainwarn report.
Which data is transmitted
The plugin sends to DomainWarn: the addresses of the site, the WordPress and PHP version, the names and versions of
installed plugins and themes, the sender address and mail server, and whether maintenance mode is on.
Not transmitted are users, posts, comments, orders or any content of the site. The API token is stored on the
site only and never reaches the browser. The plugin works with a DomainWarn account only; the processing is
described in DomainWarn’s privacy policy.
External service
This plugin connects to the DomainWarn API at https://api.domainwarn.com (operated by Wigandt Technology,
Germany). Without an API token that you create yourself, the plugin stays idle and contacts nothing. The API
address is configurable, DomainWarn can also be self-hosted.
Screenshots
Installation
- Install and activate the plugin.
- Under Settings DomainWarn, click “Connect with DomainWarn”. You confirm in DomainWarn, and the token lands here by itself. A free account is enough to start.
- “Add addresses”. Done.
Prefer to do it by hand? Create a token in DomainWarn under Settings API with write scope and paste it into the token field instead.
For the heartbeat, WP-Cron must run – which is exactly what it checks.
FAQ
-
Do I need a paid account?
-
No. The plugin is free and works with the free DomainWarn account. What is charged is the monitoring service, once
more domains or shorter check intervals are needed. -
Is content of my site transmitted?
-
No. Transmitted are addresses, versions, installed plugins and themes, sender address and mail server, and the
maintenance mode. No users, posts, comments or orders. -
Does the plugin work with a self-hosted DomainWarn?
-
Yes. The API address can be changed on the settings page.
-
Why does DomainWarn open an incident although my site is up?
-
Because the heartbeat stopped. Then WP-Cron has stalled: the site still answers, but it sends no mail and processes
nothing.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“DomainWarn Monitoring” is open source software. The following people have contributed to this plugin.
Contributors
Translate “DomainWarn Monitoring” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.1.0
- “Connect with DomainWarn” sets the connection up with one click – no token to copy.
- “Assign to client” is a list of your clients in DomainWarn instead of a free text field.
- The organization slug and the API address moved under “Advanced”.
1.0.1
- The scheduled run is now really scheduled: on activation the 15-minute interval was not known yet, so no
heartbeat was ever set up. - Corrected links and contributor in this readme.
1.0.0
- First release: add addresses to monitoring, report the inside view, heartbeat against a stalled WP-Cron, settings
page and WP-CLI commands.