Description

Walkiria Maintenance is a lightweight but powerful all-in-one security and maintenance plugin for WordPress.

🔐 Custom Login URL – Hide wp-login.php and wp-admin from attackers and bots. Returns a clean 404 to unauthenticated access attempts.
📂 File Integrity Scanner – Builds a cryptographic baseline (SHA-256) of all your site files and alerts you when anything is added, modified or deleted.
🌐 Uptime Monitor – Checks your site every 30 minutes and sends an instant email alert when your site goes down or comes back up.
🔄 Update Notifications – Daily report of available updates for WordPress core, plugins and themes.
📧 HTML Email Alerts – Beautiful, branded HTML emails for every security event.
🗓️ Scheduled Scans – Configurable daily scan time (synced to your WordPress timezone).

This plugin does not collect or transmit any personal data to external servers. All data is stored locally in your WordPress database.

Screenshots

Upload the walkiria-maintenance folder to the /wp-content/plugins/ directory, or install the plugin directly through the WordPress plugin screen.
Activate the plugin through the Plugins screen in WordPress.
Go to Settings Walkiria Maintenance to configure alert email, scan time, custom login URL and excluded directories.
Click Run Scan Now to build the initial baseline. Future scans will only alert you about changes.

Will this plugin slow down my site?: No. The file scanner only runs on schedule (once a day by default) or when manually triggered from the dashboard. It has no impact on front-end performance.
What happens if I lock myself out with the custom login URL?: You can deactivate the plugin via FTP/cPanel by renaming the plugin folder, which will restore normal access to wp-login.php.
Does it work with multisite?: Not officially tested with multisite networks. Single-site installations only at this time.

There are no reviews for this plugin.

“Walkiria Maintenance” is open source software. The following people have contributed to this plugin.

Improved: Full i18n compliance — all strings are now translatable.
Improved: Custom login handler correctly resolves relative paths in subdirectory installations.
Improved: Scanner no longer checks the deprecated safe_mode PHP ini directive (removed in PHP 7.0).
Added: uninstall.php — database table and all plugin options are fully cleaned up on uninstall.
Added: sanitize_callback for the custom login slug setting.
Fixed: wp_die() messages are now translated and properly escaped.
Fixed: Email footer uses gmdate() instead of date() for server-timezone independence.

Improved: Custom login now correctly handles subdirectory installations.
Improved: path_hash column for reliable DB indexing of long file paths (>191 chars).
Added: Automatic DB schema migration via check_upgrade().
Fixed: Scanner timeout raised to 300s / 512MB for large sites.

Added: HTML email templates with branded design.
Added: Persistent dashboard scan logs.
Added: Timezone sync for Cron scheduling.
Added: First-run alert suppression (baseline build does not trigger a false-positive alert).