Adds a consent card for external requests and fixes database migration stability. Safe to update.<\/p>","1.9.2":"
Adds the Schedule tab in Settings. No database changes. Safe to update.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3648633,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3648633,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3648633,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3648633,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["2.2.5"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3648633,"resolution":"1","location":"assets","locale":"","width":2172,"height":836},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3648633,"resolution":"2","location":"assets","locale":"","width":2180,"height":870},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3648633,"resolution":"3","location":"assets","locale":"","width":2128,"height":1140},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3648633,"resolution":"4","location":"assets","locale":"","width":1460,"height":704},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3648633,"resolution":"5","location":"assets","locale":"","width":2134,"height":978}},"screenshots":{"1":"Configuration \u2014 onboarding wizard with Quick Start and Guided Setup options","2":"Dashboard \u2014 active high-urgency alert, recent activity panel, and pending updates","3":"Discovery \u2014 plugin inventory with tier and ownership classification","4":"Settings \u2014 schedule overview with scan frequency and timing configuration","5":"Alerts \u2014 alert card with full AI impact assessment and keyword highlighting"}},"plugin_section":[],"plugin_tags":[1110,13434,265442,600,2550],"plugin_category":[54],"plugin_contributors":[273127],"plugin_business_model":[],"class_list":["post-349670","plugin","type-plugin","status-publish","hentry","plugin_tags-alerts","plugin_tags-changelog","plugin_tags-plugin-monitor","plugin_tags-security","plugin_tags-updates","plugin_category-security-and-spam-protection","plugin_contributors-spartanlogicbuilders","plugin_committers-spartanlogicbuilders"],"banners":{"banner":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/banner-772x250.png?rev=3648633","banner_2x":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/banner-1544x500.png?rev=3648633","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/icon-128x128.png?rev=3648633","icon_2x":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/icon-256x256.png?rev=3648633","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/screenshot-1.png?rev=3648633","caption":"Configuration \u2014 onboarding wizard with Quick Start and Guided Setup options"},{"src":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/screenshot-2.png?rev=3648633","caption":"Dashboard \u2014 active high-urgency alert, recent activity panel, and pending updates"},{"src":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/screenshot-3.png?rev=3648633","caption":"Discovery \u2014 plugin inventory with tier and ownership classification"},{"src":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/screenshot-4.png?rev=3648633","caption":"Settings \u2014 schedule overview with scan frequency and timing configuration"},{"src":"https:\/\/ps.w.org\/slb-impact-sentinel\/assets\/screenshot-5.png?rev=3648633","caption":"Alerts \u2014 alert card with full AI impact assessment and keyword highlighting"}],"raw_content":"\n
Impact Sentinel keeps watch over your WordPress plugins so you do not have to. When a plugin updates, it fetches the changelog, scores it against a risk keyword list, and sends you an email alert \u2014 before you decide whether to apply or roll back the update.<\/p>\n\n
Know what changed before it breaks anything.<\/strong><\/p>\n\n Most WordPress sites apply plugin updates without reading what changed. Impact Sentinel reads the changelog for you, flags risky updates (breaking changes, deprecated APIs, security patches), and gives you the information to make an informed decision \u2014 not just a blind click on \"Update All.\"<\/p>\n\n How it works<\/strong><\/p>\n\n No AI required. No external account required. Changelog scanning and email alerts work out of the box.<\/p>\n\n On first run, Impact Sentinel scans all installed plugins and builds a persistent inventory. Classify each plugin by tier \u2014 Self-Managed (your code), WP.org (community), or Premium (paid third-party) \u2014 and mark which ones you own or actively maintain. Classification context appears on every alert so your team knows what they are looking at.<\/p>\n\n Plugins can declare their dependencies using the standard WordPress Requires Plugins header. Impact Sentinel reads these declarations automatically and seeds the dependency map without any manual input.<\/p>\n\n Impact Sentinel resolves changelogs through six sources in priority order:<\/p>\n\n Changelogs are scored against a tiered keyword list. The high tier includes security-focused terms: CVE, XSS, SQL injection, RCE, authentication bypass, privilege escalation, unauthenticated, vulnerability, and more. Medium and low tiers cover breaking changes, deprecations, and general notices.<\/p>\n\n The keyword list is fully customizable in Settings \u2014 add your own global terms, or set per-plugin overrides with Impact Sentinel Pro.<\/p>\n\n When a scan finds a version change and the changelog scores above your configured threshold, an alert is sent to your recipient list. Set the threshold to Critical only, High and above, Medium and above (recommended), or All. Alerts include the plugin name, version arrow, matched keywords, and a changelog excerpt.<\/p>\n\n Map which plugins your custom code depends on. The dependency matrix shows which of your owned plugins would be affected if a given third-party plugin introduced a breaking change. Auto-detection scans your plugin source files and proposes likely dependencies. All relationships can be confirmed, dismissed, or added manually.<\/p>\n\n When an alert is created, a corresponding work queue item is added for your team. Resolve items with notes, set a default assignee, and track what was done about each update.<\/p>\n\n The dashboard shows all WordPress-tracked pending updates for your monitored plugins before they are applied \u2014 with version arrows and classification badges so you know which updates need a closer look before you click Update.<\/p>\n\n Impact Sentinel Pro adds automated nightly scanning, Stage 1 and Stage 2 Claude AI impact analysis, Code Graph (maps which of your functions call into updated dependencies), Conflict Scanner, WP Core monitoring, file integrity monitoring, WPScan CVE vulnerability feed, weekly digest emails, queue history, per-plugin keyword overrides, AI model selection, config export \/ import, and Safe Update pre-update risk analysis (a risk verdict badge on the Plugins page, with the option to block or warn before auto-updates apply).<\/p>\n\n Learn more at spartanlogicbuilders.com\/impact-sentinel\/<\/p>\n\n No external account or API key is required to use Impact Sentinel.<\/p>\n\n Email alerts use WordPress's built-in wp_mail function \u2014 delivered through whatever mail configuration your site already has.<\/p>\n\n AI features (Stage 1 and Stage 2 Claude impact analysis) require an Anthropic API key and are available in Impact Sentinel Pro only.<\/p>\n\n This plugin connects to the following external services:<\/p>\n\n WordPress.org Plugin API<\/strong> (Free)\nFetches structured changelog text for plugins listed on WordPress.org.\nURL: https:\/\/api.wordpress.org\/plugins\/info\/1.0\/{slug}.json\nData sent: Plugin slug only. No visitor or site owner data is transmitted.\nPrivacy policy: https:\/\/wordpress.org\/about\/privacy\/<\/p>\n\n Anthropic API<\/strong> (optional \u2014 requires API key)\nUsed for AI-powered changelog impact analysis (Stage 1 and Stage 2).\nURL: https:\/\/api.anthropic.com\/v1\/messages\nData sent: Changelog text and plugin source file excerpts. No visitor data is transmitted.\nPrivacy policy: https:\/\/www.anthropic.com\/privacy<\/p>\n\n WPScan API<\/strong> (optional \u2014 requires API key)\nChecks installed plugins against known CVE vulnerability records.\nURL: https:\/\/wpscan.com\/api\/v3\/\nData sent: Plugin slugs and version numbers. No visitor or site owner data is transmitted.\nPrivacy policy: https:\/\/automattic.com\/privacy\/<\/p>\n\n No data leaves your site by default.<\/strong><\/p>\n\n All plugin data, scan results, alerts, and queue items are stored locally in your WordPress database. Impact Sentinel does not transmit analytics, telemetry, or usage data to Spartan Logic Builders or any third party.<\/p>\n\n Changelog fetching (optional network requests):<\/strong><\/p>\n\n When Impact Sentinel fetches a changelog, it makes an outbound HTTPS request to:\n* api.wordpress.org \u2014 the WordPress.org plugin info API (only for plugins with a WP.org listing)\n* A URL you have configured for a specific plugin\n* A probe of common changelog paths on the plugin's declared Plugin URI<\/p>\n\n These requests are made by the server, not the visitor's browser. No visitor data is transmitted.<\/p>\n\n If you enable AI features (optional):<\/strong><\/p>\n\n AI analysis transmits changelog text and plugin source file excerpts to the Anthropic API (api.anthropic.com) over HTTPS. No visitor data is ever transmitted. Refer to Anthropic's privacy policy at https:\/\/www.anthropic.com\/privacy for details.<\/p>\n\n WPScan vulnerability feed (optional):<\/strong><\/p>\n\n Requires a WPScan API key. Plugin slugs and version numbers are transmitted to wpscan.com to check for known CVEs. No visitor or site owner data is transmitted. WPScan is operated by Automattic \u2014 refer to their privacy policy at https:\/\/automattic.com\/privacy\/ for details.<\/p>\n\n\n No. Plugin discovery, changelog scanning, keyword scoring, email alerts, and the relationship map all work with no external account or API key required.<\/p>\n\n An Anthropic API key is only needed for the AI-powered impact analysis features, which are part of Impact Sentinel Pro.<\/p><\/dd>\n\n
Plugin Discovery & Inventory<\/h4>\n\n
Changelog Scanning<\/h4>\n\n
\n
Risk Keyword Scoring<\/h4>\n\n
Email Alerts<\/h4>\n\n
Relationship Map & Dependency Matrix<\/h4>\n\n
Work Queue<\/h4>\n\n
Pending Updates Panel<\/h4>\n\n
Pro Features<\/h4>\n\n
Features<\/h4>\n\n
\n
Requirements<\/h4>\n\n
External Services<\/h3>\n\n
Privacy<\/h3>\n\n
\n
\/wp-content\/plugins\/slb-impact-sentinel\/<\/code>, or install through the WordPress Plugins screen directly.<\/li>\n\n
Do I need an API key or external account?<\/h3><\/dt>\n