Small developer update. No visible changes.<\/p>","1.1.0":"
Advanced mode is removed. Every check, alert and protection stays; Settings gains privacy and data options.<\/p>","1.0.2":"
Maintenance release with extension hooks for developers. No visible changes.<\/p>","1.0.1":"
Clearer, better-looking alert and summary emails.<\/p>","1.0.0":"
First public release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3697610,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3697610,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500-rtl.png":{"filename":"banner-1544x500-rtl.png","revision":3697610,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3697610,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250-rtl.png":{"filename":"banner-772x250-rtl.png","revision":3697610,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3697610,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.1.1","0.1.3","1.0.0","1.0.1","1.1.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3700573,"resolution":"1","location":"assets","locale":"","width":2256,"height":2486},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3700573,"resolution":"2","location":"assets","locale":"","width":2256,"height":1700},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3700573,"resolution":"3","location":"assets","locale":"","width":2256,"height":1340},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3700573,"resolution":"4","location":"assets","locale":"","width":2256,"height":2554},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3700573,"resolution":"5","location":"assets","locale":"","width":2256,"height":1908},"screenshot-6.png":{"filename":"screenshot-6.png","revision":3700573,"resolution":"6","location":"assets","locale":"","width":2256,"height":3614},"screenshot-7.png":{"filename":"screenshot-7.png","revision":3700573,"resolution":"7","location":"assets","locale":"","width":2256,"height":1040}},"screenshots":{"1":"Home when something needs you: a plain-language headline and a card per problem, each with \"Show me what to do\".","2":"Home when there is nothing urgent: worth a look, but it can wait.","3":"Home on a quiet week, because staying silent is the point.","4":"Activity: everything Karetaker recorded, grouped by day and written in plain words.","5":"Protection: optional protections you can switch on or off. None of them can lock you out.","6":"Settings: where alerts go, the weekly summary, a one-hour pause, site type, and privacy and data options.","7":"The one-minute setup that runs on first activation."}},"plugin_section":[],"plugin_tags":[8531,168808,31093,5603,600],"plugin_category":[54],"plugin_contributors":[280945],"plugin_business_model":[],"class_list":["post-369054","plugin","type-plugin","status-publish","hentry","plugin_tags-activity-log","plugin_tags-file-integrity","plugin_tags-hardening","plugin_tags-monitoring","plugin_tags-security","plugin_category-security-and-spam-protection","plugin_contributors-krikir","plugin_committers-krikir"],"banners":{"banner":"https:\/\/ps.w.org\/karetaker\/assets\/banner-772x250.png?rev=3697610","banner_2x":"https:\/\/ps.w.org\/karetaker\/assets\/banner-1544x500.png?rev=3697610","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/karetaker\/assets\/icon-128x128.png?rev=3697610","icon_2x":"https:\/\/ps.w.org\/karetaker\/assets\/icon-256x256.png?rev=3697610","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-1.png?rev=3700573","caption":"Home when something needs you: a plain-language headline and a card per problem, each with \"Show me what to do\"."},{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-2.png?rev=3700573","caption":"Home when there is nothing urgent: worth a look, but it can wait."},{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-3.png?rev=3700573","caption":"Home on a quiet week, because staying silent is the point."},{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-4.png?rev=3700573","caption":"Activity: everything Karetaker recorded, grouped by day and written in plain words."},{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-5.png?rev=3700573","caption":"Protection: optional protections you can switch on or off. None of them can lock you out."},{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-6.png?rev=3700573","caption":"Settings: where alerts go, the weekly summary, a one-hour pause, site type, and privacy and data options."},{"src":"https:\/\/ps.w.org\/karetaker\/assets\/screenshot-7.png?rev=3700573","caption":"The one-minute setup that runs on first activation."}],"raw_content":"\n
Karetaker is a watchtower<\/strong>, not a wall.<\/p>\n\n Most security plugins either shout at you all day or quietly lock you out of your own\nsite. Karetaker does neither. It watches the handful of changes that actually mean\nsomething went wrong, keeps a readable record, and emails you only when a human needs\nto act.<\/p>\n\n The quiet business killers that no scanner reports, because technically nothing is \"hacked\":<\/p>\n\n A small set of hardening toggles, every one of them off until you turn it on<\/strong>, and\nevery one reversible from Karetaker \u2192 Protection. Each toggle shows Desired<\/em> next to\nLive now<\/em>, so you always see what is actually in effect rather than what was merely\nrequested.<\/p>\n\n Define Karetaker is GPL, built by Team Krikir<\/a>. It does not phone\nhome, load third-party scripts, or show ads. Issues and pull requests are welcome.<\/p>\n\n Karetaker ships no third-party code, fonts or images. It relies on these projects and services,\nand thanks them:<\/p>\n\n WordPress is a registered trademark of the WordPress Foundation. Microsoft and Microsoft Teams\nare trademarks of the Microsoft group of companies. Slack is a trademark of Slack Technologies, LLC.\nDiscord is a trademark of Discord Inc.\nGoogle and Googlebot are trademarks of Google LLC. Telegram and all other trademarks are the property of their\nrespective owners. Karetaker is an independent project by Team Krikir. It is not created,\nendorsed, sponsored or certified by any of these companies; their names are used only to\ndescribe the services Karetaker can connect to.<\/p>\n\n\n No. Karetaker watches and alerts. It does not filter HTTP traffic.<\/p><\/dd>\n Not by default. There is no login lockout or renamed login URL in the default set.\nHardening toggles are opt-in and reversible from Karetaker \u2192 Protection.<\/p><\/dd>\n Define Agency tools (issue tracking with owners, incident cases, client reports, role access and\nthe read-only API) are no longer part of Karetaker. Everything that watches your site,\nalerts you and protects it stays here and stays free: every check, every alert channel,\nthe weekly summary, all protections and the activity export.<\/p><\/dd>\n No. Uninstall drops the events table, plugin options, and cron hooks.<\/p><\/dd>\n Run Yes. Karetaker does not ship a WAF, does not lock logins by default, and does not write\nserver config. By default, only integrity checks contact WordPress.org to fetch published core\/plugin\nchecksums (same family of APIs WordPress itself uses). Optional features you turn on\nyourself may also leave the site: ACT alert emails (to the address you choose), an ACT\nwebhook POST (to the URL you set), Slack Incoming Webhooks, Telegram Bot API, Discord and\nMicrosoft Teams webhook messages (when enabled), the weekly summary and end-of-pause emails\n(when enabled), and vulnerability lookup requests to wpvulnerability.net (plugin slug only,\nwhen enabled under Settings). The daily \"What Google sees\" check requests your own home\npage twice (once with a Googlebot user agent); it does not contact Google. Karetaker does not phone home to Team Krikir and does\nnot load third-party scripts or ads.<\/p>\n\n When you enable those optional services, you also accept their terms:<\/p>\n\n First public release.<\/p>\n\nWhat it watches<\/h4>\n\n
\n
wp-content\/uploads<\/code> that do not belong there<\/li>\nOne-checkbox catastrophes<\/h4>\n\n
\n
Opt-in hardening, with receipts<\/h4>\n\n
How it reaches you<\/h4>\n\n
\n
Who it is for<\/h4>\n\n
\n
It is deliberately not<\/h4>\n\n
\n
wp-config.php<\/code>, .htaccess<\/code>, or server config<\/li>\n<\/ul>\n\nKill switch<\/h4>\n\n
KARETAKER_DISABLE<\/code> as true in wp-config.php<\/code>, or place an empty file at\n wp-content\/karetaker-disable. The plugin then boots nothing. Uninstall removes the\nplugin's table, options, and scheduled hooks.<\/p>\n\nOpen source<\/h4>\n\n
Credits<\/h4>\n\n
\n
\n
karetaker<\/code> folder to \/wp-content\/plugins\/<\/code>, or install the zip via Plugins \u2192 Add New \u2192 Upload.<\/li>\n\n
Is this a firewall?<\/h3><\/dt>\n
Will it lock me out of wp-login?<\/h3><\/dt>\n
How do I stop it immediately?<\/h3><\/dt>\n
KARETAKER_DISABLE<\/code> as true in wp-config.php<\/code>, or create\n wp-content\/karetaker-disable. The plugin then boots nothing.<\/p><\/dd>\nWhat happened to Advanced mode?<\/h3><\/dt>\n
Does uninstall leave data behind?<\/h3><\/dt>\n
What if I think the site was hacked?<\/h3><\/dt>\n
wp karetaker incident<\/code>. That runs a deeper multi-pass scan and shows a checklist\n(admins, plugins, uploads PHP, integrity, Guard, passwords). If you think someone else is\nlogged in, use Karetaker \u2192 Protection \u2192 \"Sign out all administrators\". Karetaker does not\nclean malware or lock anyone out; it is a guided review, not a clean certificate.<\/p><\/dd>\nCan hosting providers use this?<\/h3><\/dt>\n
wp karetaker status<\/code> prints the host safety profile as JSON, and Site\nHealth reports scan freshness, Guard flags, and the same profile. Kill switch: KARETAKER_DISABLE<\/code> or wp-content\/karetaker-disable<\/code>.<\/p><\/dd>\nWhat data leaves the site?<\/h3><\/dt>\n
\n
1.1.1<\/h4>\n\n
\n
1.1.0<\/h4>\n\n
\n
1.0.2<\/h4>\n\n
\n
1.0.1<\/h4>\n\n
\n
1.0.0<\/h4>\n\n
\n