{"id":353394,"date":"2026-08-22T08:04:48","date_gmt":"2026-08-22T08:04:48","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/sitemap-guardian\/"},"modified":"2026-08-23T09:04:57","modified_gmt":"2026-08-23T09:04:57","slug":"sitemap-guardian","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/sitemap-guardian\/","author":23548719,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.18","stable_tag":"1.0.18","tested":"7.1","requires":"6.4","requires_php":"7.4","requires_plugins":null,"header_name":"Sitemap Guardian","header_author":"Sitemap Co.","header_description":"Firewall, malware scanning, login protection, hardening, audit logging, and security monitoring for WordPress.","assets_banners_color":"030d26","last_updated":"2026-08-23 09:04:57","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/www.sitemap.qa\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":104,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","changelog"],"tags":{"1.0.1":{"tag":"1.0.1","author":"sitemapqa","date":"2026-08-22 08:04:30"},"1.0.17":{"tag":"1.0.17","author":"sitemapqa","date":"2026-08-23 08:21:18"},"1.0.18":{"tag":"1.0.18","author":"sitemapqa","date":"2026-08-23 09:04:57"},"1.0.2":{"tag":"1.0.2","author":"sitemapqa","date":"2026-08-22 08:50:01"},"1.0.3":{"tag":"1.0.3","author":"sitemapqa","date":"2026-08-22 09:08:28"},"1.0.4":{"tag":"1.0.4","author":"sitemapqa","date":"2026-08-22 09:21:23"},"1.0.5":{"tag":"1.0.5","author":"sitemapqa","date":"2026-08-22 17:00:19"},"1.0.6":{"tag":"1.0.6","author":"sitemapqa","date":"2026-08-22 18:43:09"}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3660179,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3661545,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1","1.0.17","1.0.18","1.0.2","1.0.3","1.0.4","1.0.5","1.0.6"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[262246],"plugin_tags":[1174,31093,602,6464,600],"plugin_category":[38,54],"plugin_contributors":[276923],"plugin_business_model":[],"class_list":["post-353394","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-firewall","plugin_tags-hardening","plugin_tags-login","plugin_tags-scanner","plugin_tags-security","plugin_category-authentication","plugin_category-security-and-spam-protection","plugin_contributors-sitemapqa","plugin_committers-sitemapqa"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/sitemap-guardian\/assets\/icon-128x128.png?rev=3660179","icon_2x":false,"generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Sitemap Guardian is a free all-in-one security toolkit for WordPress. It helps administrators monitor site security, strengthen common settings, review activity, and identify files or stored content that need attention.<\/p>\n\n<p>Key features include:<\/p>\n\n<ul>\n<li>Local request and login protection.<\/li>\n<li>Configurable hardening and security headers.<\/li>\n<li>File-integrity, database health, and database-content scans.<\/li>\n<li>Security activity logging, alerts, and update awareness.<\/li>\n<li>Protected database backup and scheduled local file scans.<\/li>\n<li>WordPress core, plugin, and theme update inventory.<\/li>\n<\/ul>\n\n<p>All features are free. Sitemap Guardian does not collect product telemetry.<\/p>\n\n<h3>Privacy<\/h3>\n\n<p>Sitemap Guardian stores its security settings, scan results, and audit information in the site\u2019s own WordPress database. Audit events can include a validated IP address and user agent where available; records follow the configured retention period. The plugin sends no product telemetry.<\/p>\n\n<h3>External services<\/h3>\n\n<p>WordPress core checksum verification contacts the official WordPress.org checksum service when a file scan is finalized. The dashboard can request the official WordPress.org security-news RSS feed, which is cached locally. Administrator-login emails can include an Opentracker IP lookup link; no request is made to Opentracker unless an email recipient opens that link.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Install and activate Sitemap Guardian.<\/li>\n<li>Open Sitemap Guardian from the WordPress admin menu.<\/li>\n<li>Review the settings for your environment.<\/li>\n<li>Run an initial file scan to establish a local baseline.<\/li>\n<\/ol>\n\n<!--section=changelog-->\n<h4>1.0.18<\/h4>\n\n<ul>\n<li>Adds an administrator-only System Information panel with safe website, server, database, and permission diagnostics.<\/li>\n<\/ul>\n\n<h4>1.0.17<\/h4>\n\n<ul>\n<li>Adds an optional, safe first-time setup wizard for new installations.<\/li>\n<\/ul>\n\n<h4>1.0.16<\/h4>\n\n<ul>\n<li>Adds daily or weekly scheduled local file scans with clear enable\/disable controls.<\/li>\n<li>Adds protected database backup, database health, and database content scans.<\/li>\n<li>Adds detailed WordPress core, plugin, and theme update inventory.<\/li>\n<li>Refines Smart 404 protection to a one-minute, per-IP threshold with a default of 50 requests.<\/li>\n<\/ul>\n\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>Adds the WordPress.org release panel and fixes Smart 404 throttling to use only a validated individual visitor IP.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>First WordPress.org-ready stable release.<\/li>\n<\/ul>","raw_excerpt":"Free, practical security monitoring and hardening for WordPress.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/353394","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=353394"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/sitemapqa"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=353394"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=353394"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=353394"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=353394"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=353394"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=353394"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}