Adds one-click hosted browser connect, Reports suite, consolidated Settings, and timezone-aware timestamps.<\/p>","0.1.0":"
Initial public release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3696057,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3696057,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3696057,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3696057,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.1.0","0.1.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3696057,"resolution":"1","location":"assets","locale":"","width":1440,"height":900},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3696057,"resolution":"2","location":"assets","locale":"","width":1440,"height":900},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3696057,"resolution":"3","location":"assets","locale":"","width":1440,"height":900},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3696057,"resolution":"4","location":"assets","locale":"","width":1440,"height":900}},"screenshots":{"1":"ncdLabs Assure dashboard with readiness score and control summary","2":"Controls list with GDPR, OWASP Top 10, and pack management","3":"Consent banner configuration and preview","4":"Findings view with remediation actions"}},"plugin_section":[262246],"plugin_tags":[8533,14361,20011,131785,396],"plugin_category":[54],"plugin_contributors":[273565],"plugin_business_model":[],"class_list":["post-364694","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-audit","plugin_tags-compliance","plugin_tags-consent","plugin_tags-gdpr","plugin_tags-privacy","plugin_category-security-and-spam-protection","plugin_contributors-ncdlou","plugin_committers-ncdlou"],"banners":{"banner":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/banner-772x250.png?rev=3696057","banner_2x":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/banner-1544x500.png?rev=3696057","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/icon-128x128.png?rev=3696057","icon_2x":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/icon-256x256.png?rev=3696057","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/screenshot-1.png?rev=3696057","caption":"ncdLabs Assure dashboard with readiness score and control summary"},{"src":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/screenshot-2.png?rev=3696057","caption":"Controls list with GDPR, OWASP Top 10, and pack management"},{"src":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/screenshot-3.png?rev=3696057","caption":"Consent banner configuration and preview"},{"src":"https:\/\/ps.w.org\/ncdlabs-assure\/assets\/screenshot-4.png?rev=3696057","caption":"Findings view with remediation actions"}],"raw_content":"\n
ncdLabs Assure helps WordPress site owners and operators run technical<\/strong> GDPR readiness work inside wp-admin: site discovery, control evaluation, consent management, script enforcement, evidence collection, remediation helpers, and audit reporting.<\/p>\n\n ncdLabs Assure verifies controls it can observe on your site, records evidence, and flags items that need manual review. It does not replace legal counsel and does not certify legal compliance.<\/strong><\/p>\n\n HIPAA, SOC 2, CCPA, WCAG, and other framework catalogs are not bundled<\/strong> in the WordPress.org plugin. Purchase a yearly subscription through Stripe Checkout at ncdLabs Assure<\/a>, download the encrypted ncdLabs Assure connects to external services only in the cases below. Hostnames such as Pack activation (ncdlabs.com)<\/strong> \u2014 When you import a purchased compliance pack, ncdLabs Assure sends your pack unlock key, framework identifier, and this site's URL to the ncdLabs activation API to verify the Stripe purchase and bind the license to one site:<\/p>\n\n Browser verification (ncdlabs.com, optional)<\/strong> \u2014 Hosted browser verification is optional. Free sites can connect with one click from the setup wizard or Manage \u2192 Settings \u2192 Remote browser<\/strong>: the plugin starts an exchange, you confirm the administrator email, ncdLabs approves the site, and sealed site credentials are delivered locally. Purchased compliance packs may still call the provisioning API after import. When connected, audits and discovery may send scan targets to the hosted browser verification service:<\/p>\n\n Google Analytics \/ Google Tag Manager OAuth (Google + ncdlabs.com, optional)<\/strong> \u2014 When an administrator connects Google Analytics or Google Tag Manager from Manage \u2192 Settings \u2192 Integrations<\/strong>, ncdLabs Assure may use Google OAuth plus the Google Analytics Admin API and\/or Google Tag Manager API. If you have not configured your own Google OAuth client credentials, ncdLabs Assure uses an ncdLabs OAuth proxy:<\/p>\n\n Third-party script detection signatures (no outbound calls)<\/strong> \u2014 During discovery, audits, and optional browser verification, ncdLabs Assure matches HTML, network requests, and installed plugins against known vendor hostname patterns (examples: Google Analytics\/Tag Manager, Meta Pixel \/ Site self-scan (your own WordPress site)<\/strong> \u2014 During discovery and audits, ncdLabs Assure may request your site's public homepage and REST API to detect scripts, embeds, forms, and integrations. These requests stay on your site; ncdLabs Assure does not send discovery results to ncdLabs.<\/p>\n\n Optional deactivation feedback (wp_mail)<\/strong> \u2014 When an administrator deactivates the plugin, an optional survey may appear. Feedback is never required: Skip & deactivate<\/strong>, Close, Escape, or Cancel leave without sending anything. If the administrator submits feedback, the selected reason and optional comments are emailed to ncdLabs ( No usage telemetry or analytics are sent to ncdLabs by the plugin.<\/p>\n\n Admin, front-end, and plugins.php deactivation-feedback JavaScript and CSS are built with Composer production dependencies are MIT-licensed and GPL-compatible:<\/p>\n\n See each package's LICENSE file under If you clone the repository, run No. The free plugin includes complete GDPR, OWASP Top 10, and NIST CSF 2.0 technical control catalogs, consent manager, enforcement tools, audits, evidence, and reporting. Paid yearly packs add optional frameworks such as HIPAA, SOC 2, CCPA, and WCAG.<\/p><\/dd>\nFree frameworks (included)<\/h4>\n\n
\n
Optional compliance packs (sold separately, not included in this plugin)<\/h4>\n\n
.assure-pack<\/code> file from your order confirmation, then import it from Manage \u2192 Settings \u2192 Controls \u2192 Install framework pack<\/strong> with your unlock key. Packs are not required for GDPR, OWASP, or NIST CSF functionality.<\/strong><\/p>\n\nWho this is for<\/h4>\n\n
\n
External services<\/h4>\n\n
js.stripe.com<\/code>, connect.facebook.net<\/code>, googletagmanager.com<\/code>, and youtube.com<\/code> that appear in plugin source are local detection \/ verification signature strings<\/strong> used to recognize scripts already present on your site. The plugin does not<\/strong> load those third-party scripts, call those vendors' APIs, or send visitor data to them.<\/p>\n\n\n
https:\/\/ncdlabs.com\/products\/assure\/api\/activate<\/code><\/li>\n\n
https:\/\/ncdlabs.com\/products\/assure\/api\/browser-verification\/request\/bootstrap<\/code><\/li>\nhttps:\/\/ncdlabs.com\/products\/assure\/api\/browser-verification\/request\/status<\/code><\/li>\n\u2026\/request\/confirm-email\/\u2026<\/code> and \u2026\/request\/admin-confirm<\/code> (ncdLabs-operated)<\/li>\nhttps:\/\/ncdlabs.com\/products\/assure\/api\/browser-verification\/provision<\/code><\/li>\nhttps:\/\/browser-verify.ncdlabs.com<\/code><\/li>\nassure_browser_verification_allowed_hosts<\/code> filter.<\/li>\n\n
https:\/\/ncdlabs.com\/products\/assure\/api\/google\/oauth\/start<\/code> and ...\/exchange<\/code><\/li>\naccounts.google.com<\/code>, oauth2.googleapis.com<\/code>, www.googleapis.com<\/code>, analyticsadmin.googleapis.com<\/code>, tagmanager.googleapis.com<\/code><\/li>\nconnect.facebook.net<\/code>, LinkedIn Insight, Hotjar, Microsoft Clarity, YouTube, Vimeo, HubSpot, Mailchimp, Brevo, Stripe \/ js.stripe.com<\/code>). Examples also include CDN hostnames such as gstatic.com<\/code>, cloudflare.com<\/code>, unpkg.com<\/code>, and cdnjs.cloudflare.com<\/code> that appear only as local classification signatures in discovery code. Matching is local string comparison against content already on your site or observed in a verification scan of your site. ncdLabs Assure does not call these vendors, load their scripts, or transmit data to them.<\/p>\n\nfeedback+assure@ncdlabs.com<\/code>) using this site's WordPress mail. A separate checkbox (unchecked by default) can include plugin, WordPress, and PHP versions only \u2014 never the site URL or admin email. Mail\/API failure still proceeds to deactivate.<\/p>\n\n\n
Source code for built assets<\/h4>\n\n
@wordpress\/scripts<\/code> (package.json<\/code> and webpack.config.js<\/code>). Human-readable sources ship in the plugin under assets\/src\/<\/code>. Production builds ship in build\/<\/code>.<\/p>\n\nThird-party libraries<\/h4>\n\n
\n
vendor\/<\/code> for copyright notices.<\/p>\n\n\n\n
\/wp-content\/plugins\/ncdlabs-assure\/<\/code> or install through the WordPress Plugins screen.<\/li>\nDevelopment build<\/h4>\n\n
npm install && npm run build<\/code> before activating so build\/<\/code> assets exist.<\/p>\n\n\n\n
Do I need a paid pack to use ncdLabs Assure?<\/h3><\/dt>\n
Does ncdLabs Assure make my site legally compliant?<\/h3><\/dt>\n