UpdateProof is a free local tool for safer site maintenance.<\/p>\n\n
Start with one simple workflow: check your site, test important pages, review the update evidence, and approve changes only when you are ready. Learn about the broader UpdateProof roadmap at https:\/\/updateproof.zerofrik.com\/.<\/p>\n\n
The Free\/Base release helps developers and maintenance agencies establish an evidence-based update workflow before an update:<\/p>\n\n
The Free\/Base plugin does not create a staging site, run synthetic form or WooCommerce tests, schedule updates, automatically roll back a failed update, or provide multi-site\/team management. Those are planned Pro\/service capabilities.<\/p>\n\n
UpdateProof stores the latest safety snapshot and a one-way hash of the optional site token in the WordPress options table. The free plugin does not send site content, visitor data, or telemetry to ZeroFrik or any third party.<\/p>\n\n
Visual regression is disabled by default. If an administrator enables it, the configured public page URLs are sent to the administrator-provided browser worker, which returns screenshots and pixel-difference data. The plugin stores those images in the site's uploads directory. Do not configure private, password-protected, or visitor-personalized pages in this Free\/Base feature.<\/p>\n\n
If an administrator generates a site token and gives it to an external service, that service can read the site metadata, update inventory, and safety snapshot exposed by the plugin's authenticated REST API. The token can be revoked at any time from the plugin settings in the WordPress admin.<\/p>\n\n
The optional visual regression feature connects to a browser worker URL entered by the site administrator. There is no default hosted worker and no request is made unless the administrator enables the feature and presses Capture visual baseline or Run visual check. The worker receives the configured public page URL, viewport size, and a site identifier, then returns a Chromium screenshot and pixel-difference result. The plugin stores the returned screenshots in the site's uploads directory. The worker does not receive WordPress credentials, post content, or visitor data from this plugin. If a third-party worker is used, its operator's terms and privacy policy apply.<\/p>\n\n
The optional read-only endpoints are available below the site REST URL:<\/p>\n\n
Send the generated token in the X-UpdateProof-Token header. A token is never returned by the API.<\/p>\n\n\n
The visual-regression screen can generate a one-time worker token. Copy it to the worker server as The Free\/Base version can apply selected plugin and theme updates only after an administrator explicitly approves a deployment plan. It does not apply WordPress core updates.<\/p><\/dd>\n No. The local dashboard works without registration or an external service.<\/p><\/dd>\n No. The free plugin does not read or transmit PHP source code, post content, or visitor data.<\/p><\/dd>\n The planned Pro\/service layer will add connected multi-site management, staging or isolated test environments, more pages and viewports, synthetic form and WooCommerce tests, scheduled updates, automatic rollback, notifications, team access, client reports, and recovery workflows.<\/p><\/dd>\n\n<\/dl>\n\n\nUPDATEPROOF_WORKER_TOKEN<\/code>, restart the worker, and leave the saved token unchanged in WordPress. To rotate it later, use Generate and replace token, update the worker environment variable, restart the worker, and test again.<\/p>\n\n\n\n
Does the plugin update WordPress or plugins?<\/h3><\/dt>\n
Does it require an account?<\/h3><\/dt>\n
Does it send my code to an AI service?<\/h3><\/dt>\n
What is planned for Pro?<\/h3><\/dt>\n
0.6.2<\/h4>\n\n
\n
0.6.1<\/h4>\n\n
\n
0.6.0<\/h4>\n\n
\n
0.5.0<\/h4>\n\n
\n
0.4.1<\/h4>\n\n
\n
0.4.0<\/h4>\n\n
\n
0.3.3<\/h4>\n\n
\n
0.3.2<\/h4>\n\n
\n
0.3.1<\/h4>\n\n
\n
0.3.0<\/h4>\n\n
\n
0.2.0<\/h4>\n\n
\n
0.1.0<\/h4>\n\n
\n