Title: Sentrix – Store Health Monitoring for WooCommerce
Author: ilabs
Published: <strong>August 27, 2026</strong>
Last modified: August 27, 2026

---

Search plugins

![](https://s.w.org/plugins/geopattern-icon/sentrix-by-ilabs.svg)

# Sentrix – Store Health Monitoring for WooCommerce

 By [ilabs](https://profiles.wordpress.org/inspirelabs/)

[Download](https://downloads.wordpress.org/plugin/sentrix-by-ilabs.1.0.0.zip)

 * [Details](https://wordpress.org/plugins/sentrix-by-ilabs/#description)
 * [Reviews](https://wordpress.org/plugins/sentrix-by-ilabs/#reviews)
 *  [Installation](https://wordpress.org/plugins/sentrix-by-ilabs/#installation)
 * [Development](https://wordpress.org/plugins/sentrix-by-ilabs/#developers)

 [Support](https://wordpress.org/support/plugin/sentrix-by-ilabs/)

## Description

Sentrix is a lightweight diagnostic and early-warning assistant for WooCommerce 
stores.

It monitors store health across six areas — sales pipeline, configuration changes,
file integrity, security hardening, task queue hygiene, and store availability —
and surfaces clear, business-language signals inside the WordPress admin panel.

Sentrix does not place test orders, does not simulate customer purchases, and does
not act as a synthetic external monitoring service. It works with real WordPress
and WooCommerce data and presents safe diagnostic summaries without exposing customer
details.

**Why Sentrix?**

WooCommerce issues are often noticed too late. A payment method silently stops converting.
A plugin update breaks the checkout. A file is modified without explanation. A database
task queue grows out of control and slows the store. Sentrix helps connect these
signals before customers start reporting problems.

**Key features:**

 * **SalesGuard** – monitors payment success rates and detects failing gateways.
 * **ChangeMonitor** – records plugin, theme, gateway, and checkout changes.
 * **IntegrityGuard** – detects unauthorized file modifications and suspicious PHP
   files in uploads.
 * **SecurityGuard** – applies WordPress hardening and audits security configuration.
 * **SchedulerCleaner** – monitors and cleans the Action Scheduler task queue.
 * **StoreAvailability** – passively detects PHP fatal errors, HTTP 5xx responses,
   and inferred outages.

Need help or found a bug?
 Contact us at support@ilabs.com.pl

### SalesGuard

SalesGuard detects payment health risks by analyzing real WooCommerce order data.

It is designed to answer a simple question:

**Are customers able to complete payments through the active payment methods in 
this store?**

SalesGuard compares payment success rates across a current and a comparison period.
It identifies:

 * active payment gateways with zero successful orders in the analyzed period;
 * gateways whose success rate has dropped significantly compared with the previous
   period;
 * gateways with no recent payment activity;
 * online gateways with a streak of consecutive failed payment attempts;
 * periods with no order activity at all;
 * insufficient data situations where a reliable conclusion cannot be drawn.

The result is shown as a clear business status:

 * **OK** – no concerning signals were detected in the analyzed period.
 * **Information** – there is not enough data for a reliable assessment.
 * **Warning** – one or more signals should be reviewed.
 * **Critical** – customers may be trying to pay but payments are not completing.

SalesGuard is read-only. It never creates or modifies orders, payments, or store
configuration.

SalesGuard can be run manually from the Sentrix admin screen. It can also be configured
to automatically refresh stale results when the module screen is opened.

### ChangeMonitor

ChangeMonitor records important WordPress and WooCommerce configuration changes.

It helps answer the question:

**What changed in the store before a payment, checkout, or sales issue appeared?**

Monitored change types include:

 * plugin activation, deactivation, and updates;
 * active theme changes;
 * payment gateway enable and disable actions;
 * payment gateway live/test mode changes;
 * payment gateway settings saves;
 * WooCommerce checkout settings changes;
 * selected WooCommerce general store settings changes.

Each event is stored with a date, time, type, and importance level. The store keeps
up to 200 events, with configurable retention of 30, 60, or 90 days. High-importance
changes — such as payment gateway modifications and checkout setting changes — are
highlighted separately.

ChangeMonitor starts recording from the moment it is enabled. It cannot reconstruct
changes that occurred before activation.

ChangeMonitor does not restore previous settings, block changes, or send email alerts.
It is a safe change history that supports diagnostics and support.

### IntegrityGuard

IntegrityGuard detects unauthorized file changes in your WordPress installation 
and suspicious PHP files in the uploads directory.

It works in two stages:

 1. **Baseline** — you create a snapshot of your current file tree. Each file is recorded
    as a SHA-256 checksum.
 2. **Scan** — when you choose, IntegrityGuard compares the current filesystem against
    the baseline and reports new, modified, and deleted files.

IntegrityGuard also scans the uploads directory for PHP files with known executable
extensions. PHP files in the uploads directory may indicate a backdoor injection.

Monitored areas are individually configurable:

 * WordPress core files (excluding wp-content);
 * wp-content/plugins;
 * wp-content/themes;
 * wp-content/uploads (PHP file detection only).

All operations — creating the baseline, running a scan, and resetting — are triggered
manually by an administrator. There are no automatic or scheduled scans.

Only relative file paths and SHA-256 checksums are stored. No file contents are 
read or retained. No absolute server paths are recorded.

### SecurityGuard

SecurityGuard provides two distinct layers of WooCommerce store protection.

**Hardening layer** — lightweight filters applied on every WordPress request. Each
feature is independently enabled or disabled from the settings screen.

The available hardening features are:

 * **Hide WordPress version** — removes the WordPress version from page headers,
   RSS feeds, Atom feeds, and XML exports, preventing automated scanners from fingerprinting
   the installation.
 * **Hide asset versions** — strips the `?ver=` parameter from enqueued script and
   stylesheet URLs, preventing version-based fingerprinting of themes and plugins.
 * **Unify login errors** — replaces specific login error messages with a generic
   response, preventing username enumeration via the login form.
 * **Block REST users endpoint** — blocks unauthenticated and authenticated access
   to `/wp/v2/users`, preventing automated username enumeration via the WP REST 
   API.
 * **Disable comments** — closes comments and pingbacks on all non-product post 
   types, preserving WooCommerce product reviews.
 * **Block weak passwords** — prevents account registration and profile updates 
   when the chosen password is shorter than eight characters or contains no number
   or symbol.

**Audit layer** — a read-only check that verifies each hardening feature is active
and effective. The audit runs on demand from the SecurityGuard module screen and
covers seven checks:

 * WordPress version hidden;
 * Asset version stripped;
 * Login error unified;
 * REST users endpoint blocked;
 * Comments disabled (reports as informational when the feature is off by design);
 * Weak password block active;
 * Debug log publicly accessible (passive environmental check — checks file existence
   only).

The audit performs no network requests and does not modify any store data.

### SchedulerCleaner

SchedulerCleaner monitors the Action Scheduler task queue and provides a manual 
cleanup operation for completed and canceled records.

It shows the current count of tasks by status: pending, complete, failed, and canceled.

A manual cleanup removes old complete and canceled records older than a configured
number of days (default: 30). Each cleanup operation is bounded to 500 records per
call to protect database performance. For large queues, multiple manual cleanup 
invocations can be used.

SchedulerCleaner never removes pending or failed tasks. Failed tasks require manual
review. There is no automatic or scheduled cleanup in the free version.

### StoreAvailability

StoreAvailability passively monitors your store’s availability by recording PHP 
fatal errors, HTTP 5xx responses, and inferred server outages.

It registers a lightweight PHP shutdown callback on every WordPress request. No 
external monitoring infrastructure is required, and no test or synthetic traffic
is generated.

Detected incident types:

 * PHP fatal errors;
 * HTTP 5xx server error responses;
 * inferred server outages — when the heartbeat gap between successful requests 
   exceeds 120 seconds.

Incidents are stored in a bounded list of up to 50 entries, with a 30-day retention.
Incidents are visible on the Sentrix overview dashboard and the StoreAvailability
module screen.

The module does not read log file contents. Incident records contain only the error
type and a sanitized description. Absolute server paths are excluded. No customer
data, order data, or session data is collected.

There is no real-time alerting in the free version. Incidents are visible when an
administrator opens the Sentrix admin screens.

### Privacy and data safety

Sentrix is designed to avoid storing sensitive customer data.

SalesGuard diagnostic results do not include order IDs, customer names, email addresses,
phone numbers, billing or shipping addresses, or payment tokens. Only aggregated
gateway statistics are stored.

ChangeMonitor stores what changed and when it changed. For payment gateway changes,
only the type of change and changed field names are stored — not secret values or
API keys.

IntegrityGuard stores only relative file paths and SHA-256 checksums. No file contents
are read or retained. No absolute server paths are recorded.

SecurityGuard audit results contain only check IDs, status codes, and diagnostic
messages. The debug log check uses only file existence — it never reads log file
contents. Password values evaluated during registration or profile update are never
logged or persisted.

SchedulerCleaner stores only integer task counts per status and a scan timestamp.
It does not collect Action Scheduler task arguments.

StoreAvailability stores only sanitized error types and truncated descriptions. 
Absolute file paths are excluded. No customer, session, or order data is collected.

No diagnostic data is transmitted to iLabs or any external service.

### What Sentrix does not do

Sentrix is a diagnostic and hardening tool. It is not an external monitoring system
or a store configuration manager.

It does not:

 * place test orders or simulate customer purchases;
 * log in as a customer;
 * verify payment gateway API keys or credentials directly;
 * guarantee that a payment method works at the exact current moment;
 * automatically fix store configuration;
 * restore previous settings;
 * block administrators from making changes;
 * perform automatic or scheduled file integrity scans;
 * perform automatic or scheduled Action Scheduler cleanup;
 * send automatic email alerts;
 * transmit store data to external services.

The plugin provides early-warning signals and hardening based on available WordPress
and WooCommerce data.

### External Services

When an administrator opens the Sentrix **Support** page, the plugin embeds an iframe
that loads a contact form hosted at ilabs.dev. This service is operated by Inspire
Labs (iLabs), the developer of Sentrix.

When a user submits the contact form, the submitted data (name, email address, and
message) is sent to ilabs.dev. This connection is only established when an administrator
visits the Support page. No data from the WordPress site or WooCommerce store is
transmitted automatically.

 * Service URL: https://ilabs.dev
 * Privacy Policy: https://ilabs.dev/polityka-prywatnosci/ (Polish)

### Third-Party Libraries

This plugin bundles Chart.js 4.5.1 (MIT License) by Chart.js Contributors.
 Source
and license: https://github.com/chartjs/Chart.js

### Source Code

The minified file `resources/dist/js/admin.min.js` is compiled from the unminified
source at `resources/assets/admin/js/admin.js`, which is included in this package.
The SCSS source files for compiled stylesheets are included at `resources/assets/
admin/scss/`.

Assets are compiled using webpack. The build configuration is included in this package
at `webpack.config.js` and `package.json`.

## Installation

 1.  Download the Sentrix plugin ZIP file from the WordPress.org repository.
 2.  In your WordPress admin panel, go to **Plugins > Add New > Upload Plugin**.
 3.  Upload the ZIP file and activate the plugin.
 4.  Go to **Sentrix** in the WordPress admin menu.
 5.  Open the **Overview** screen to see the status of all modules.
 6.  Open **SalesGuard** and click **Check store** to run the first payment analysis.
 7.  Open **ChangeMonitor** to review recent store changes and configure event retention.
 8.  Open **IntegrityGuard** to create a file baseline and run your first integrity
     scan.
 9.  Open **SecurityGuard** to review active hardening features and run a security 
     audit.
 10. Open **SchedulerCleaner** to check the current Action Scheduler queue and run 
     a cleanup if needed.

## FAQ

### Do I need WooCommerce to use Sentrix?

Yes. Sentrix is built for WooCommerce stores running on WordPress.

SalesGuard and ChangeMonitor depend directly on WooCommerce data. SecurityGuard,
IntegrityGuard, StoreAvailability, and SchedulerCleaner work with WordPress itself,
but the plugin as a whole is designed for WooCommerce store environments.

### Does SalesGuard place test orders?

No. SalesGuard analyzes existing WooCommerce order data. It does not create, modify,
or simulate orders, cart activity, or checkout in any way.

### Does SalesGuard check if a payment gateway is configured correctly?

Not directly. SalesGuard does not validate API keys, webhook secrets, or gateway
credentials. It analyzes the real outcomes of recent WooCommerce orders and payment
attempts.

If customers attempt to pay with a specific gateway but no orders become paid, SalesGuard
can flag that as a critical signal.

### Does a green SalesGuard result guarantee that payments work right now?

No. A positive result means that no concerning signals were detected in the analyzed
order data. It is not a real-time guarantee and does not replace a direct gateway
test.

### What happens when there are not enough orders?

Sentrix avoids false alarms. When there is insufficient data for a reliable assessment,
SalesGuard shows an informational status rather than raising a warning or critical
alert.

### Does Sentrix store customer data?

No. SalesGuard stores aggregated gateway statistics only — payment method name, 
attempt count, and success rate. It does not store order IDs, customer names, email
addresses, addresses, or phone numbers in the diagnostic result.

### What does ChangeMonitor record?

ChangeMonitor records selected important store changes: plugin activation, deactivation,
and updates; theme changes; payment gateway changes; checkout settings changes; 
and selected WooCommerce configuration changes. Each event stores what changed, 
when it changed, and its importance level.

### Can ChangeMonitor show changes from before it was enabled?

No. ChangeMonitor starts recording from the moment it is enabled. It cannot reconstruct
changes that occurred before activation.

### Can ChangeMonitor show who made a change?

The current version records what changed and when it changed. User attribution is
not included in the current implementation.

### Does IntegrityGuard run scans automatically?

No. All IntegrityGuard operations — creating a baseline, running a scan, and resetting
the baseline — are triggered manually by an administrator. There are no automatic
or scheduled scans in the free version.

### Does IntegrityGuard read file contents?

No. IntegrityGuard computes SHA-256 checksums of files but does not read or store
file contents. Only checksums, relative file paths, and file sizes are recorded 
in the baseline.

### Does SecurityGuard affect my storefront?

Yes, by design. The hardening features — version hiding, asset version stripping,
login error unification, REST users endpoint blocking, optional comment disabling,
and weak password blocking — apply on every WordPress request, including the storefront.

These are lightweight in-process operations. They perform no database queries, no
file reads, and no network calls. Their combined cost is sub-millisecond and is 
designed to have no meaningful impact on storefront performance.

The security audit is entirely separate and runs only on explicit administrator 
action.

### Does SchedulerCleaner delete important tasks?

No. The cleanup operation removes only `complete` and `canceled` Action Scheduler
records older than the configured age threshold (default: 30 days). It never removes
pending, running, or in-progress tasks. Each cleanup is bounded to 500 records per
operation.

### Does StoreAvailability monitor my store from outside?

No. StoreAvailability works entirely within WordPress. It registers a PHP shutdown
callback on every request to detect PHP errors and HTTP 5xx responses. No external
monitoring service, no outbound connections, and no synthetic traffic are used.

### Does Sentrix send data to iLabs?

No. All diagnostic data is generated and stored inside your WordPress installation.
No data is transmitted to iLabs or any external service.

### Can I use this on a production store?

Yes. Sentrix is designed to be safe on production stores. Diagnostic operations 
run only in the WordPress admin area or during explicit administrator-triggered 
actions.

The SecurityGuard hardening filters and StoreAvailability shutdown callback run 
on every request but are lightweight, read-only operations designed to have no meaningful
impact on storefront performance.

### Does it slow down the frontend store?

Sentrix is designed to minimize storefront impact.

SalesGuard analysis, IntegrityGuard scanning, ChangeMonitor analytics, SchedulerCleaner
cleanup, and SecurityGuard audit all run only in the WordPress admin area or on 
explicit administrator request.

ChangeMonitor records events reactively via WordPress hooks using one database read
and one write per event — bounded and infrequent. SecurityGuard hardening callbacks
and the StoreAvailability shutdown callback run on every request but perform no 
queries or I/O on the hot path.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Sentrix – Store Health Monitoring for WooCommerce” is open source software. The
following people have contributed to this plugin.

Contributors

 *   [ ilabs ](https://profiles.wordpress.org/inspirelabs/)

[Translate “Sentrix – Store Health Monitoring for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/sentrix-by-ilabs)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/sentrix-by-ilabs/),
check out the [SVN repository](https://plugins.svn.wordpress.org/sentrix-by-ilabs/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/sentrix-by-ilabs/)
by [RSS](https://plugins.trac.wordpress.org/log/sentrix-by-ilabs/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.0

 * Initial MVP release.
 * Added SalesGuard module for WooCommerce sales and payment diagnostics.
 * Added ChangeMonitor module for critical store change history.
 * Added IntegrityGuard module for file integrity scanning and PHP-in-uploads detection.
 * Added SecurityGuard module for WordPress hardening and security audit.
 * Added SchedulerCleaner module for Action Scheduler queue monitoring and manual
   cleanup.
 * Added StoreAvailability module for passive store availability and incident monitoring.
 * Added manual check and scan actions for all modules.
 * Added safe diagnostic result storage without customer personal data.
 * Added module settings for all included modules.
 * Added analytics sections with trend charts for SalesGuard and ChangeMonitor.

## Meta

 *  Version **1.0.0**
 *  Last updated **2 days ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.2 or higher **
 *  Tested up to **7.1**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [diagnostics](https://wordpress.org/plugins/tags/diagnostics/)[monitoring](https://wordpress.org/plugins/tags/monitoring/)
   [payments](https://wordpress.org/plugins/tags/payments/)[security](https://wordpress.org/plugins/tags/security/)
   [woocommerce](https://wordpress.org/plugins/tags/woocommerce/)
 *  [Advanced View](https://wordpress.org/plugins/sentrix-by-ilabs/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/sentrix-by-ilabs/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/sentrix-by-ilabs/reviews/)

## Contributors

 *   [ ilabs ](https://profiles.wordpress.org/inspirelabs/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/sentrix-by-ilabs/)