{"id":387567,"date":"2026-10-16T00:09:21","date_gmt":"2026-10-16T00:09:21","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/websentry-security-monitor\/"},"modified":"2026-10-18T13:52:01","modified_gmt":"2026-10-18T13:52:01","slug":"websentry-security-monitor","status":"publish","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/websentry-security-monitor\/","author":23586644,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.3.2","stable_tag":"1.3.2","tested":"7.1.3","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"WebSentry Security Monitor","header_author":"AXOX Web Solutions","header_description":"Displays your site's WebSentry security grade and monitoring status right in the WordPress admin dashboard.","assets_banners_color":"051014","last_updated":"2026-10-18 13:52:01","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/websentry.dev\/wordpress","header_author_uri":"https:\/\/axoxweb.com","rating":0,"author_block_rating":0,"active_installs":0,"downloads":116,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.3.0":{"tag":"1.3.0","author":"websentrysecurity","date":"2026-10-16 00:31:25","revision":3749508},"1.3.1":{"tag":"1.3.1","author":"websentrysecurity","date":"2026-10-16 02:28:46","revision":3749584},"1.3.2":{"tag":"1.3.2","author":"websentrysecurity","date":"2026-10-18 13:52:01","revision":3753095}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3749505,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3749505,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3749505,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3749505,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3749505,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.3.0","1.3.1","1.3.2"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3749508,"resolution":"1","location":"assets","locale":"","width":1274,"height":524},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3749508,"resolution":"2","location":"assets","locale":"","width":2540,"height":1366},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3749508,"resolution":"3","location":"assets","locale":"","width":2880,"height":64}},"screenshots":{"1":"Your site's security grade on the WordPress dashboard, with a link to the full report and a button to check it again.","2":"Settings: paste a WordPress plugin key, and the plugin reads the grade for the site it is installed on.","3":"The current grade in the admin bar, on every admin page, for administrators only."}},"plugin_section":[262246],"plugin_tags":[434,5603,600,153786,1536],"plugin_category":[54],"plugin_contributors":[287006],"plugin_business_model":[],"class_list":["post-387567","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-dashboard","plugin_tags-monitoring","plugin_tags-security","plugin_tags-security-headers","plugin_tags-ssl","plugin_category-security-and-spam-protection","plugin_contributors-abimbolaomoyola","plugin_committers-websentrysecurity"],"banners":{"banner":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/banner-772x250.png?rev=3749505","banner_2x":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/banner-1544x500.png?rev=3749505","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/icon.svg?rev=3749505","icon":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/icon.svg?rev=3749505","icon_2x":false,"generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/screenshot-1.png?rev=3749508","caption":"Your site's security grade on the WordPress dashboard, with a link to the full report and a button to check it again."},{"src":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/screenshot-2.png?rev=3749508","caption":"Settings: paste a WordPress plugin key, and the plugin reads the grade for the site it is installed on."},{"src":"https:\/\/ps.w.org\/websentry-security-monitor\/assets\/screenshot-3.png?rev=3749508","caption":"The current grade in the admin bar, on every admin page, for administrators only."}],"raw_content":"<!--section=description-->\n<p><a href=\"https:\/\/websentry.dev\">WebSentry<\/a> is a website security scanning service. It checks a site's SSL certificate, security headers, cookies, DNS and other settings, and grades it from A to F. This plugin shows that grade, when the site was last checked, and a link to the full report, inside your WordPress admin.<\/p>\n\n<p><strong>A free WebSentry account is enough.<\/strong> It includes a WordPress plugin key and 20 checks a month, which is all this plugin needs. You press \"Check now\" in the dashboard widget and the grade updates. Nothing is checked unless you ask, so an unused install costs nothing.<\/p>\n\n<p>A paid plan adds scheduled monitoring: the site is scanned on its own schedule whether or not you are looking, you get an email when the grade drops, and the widget names the checks that moved rather than counting them. See <a href=\"https:\/\/websentry.dev\/pricing\">WebSentry pricing<\/a>.<\/p>\n\n<p><strong>What it shows:<\/strong><\/p>\n\n<ul>\n<li>The site it is installed on: no address to type<\/li>\n<li>A dashboard widget with your security grade (A to F), and whether it went up or down since the previous check<\/li>\n<li>How many checks got worse or were fixed since the previous scan. On a paid plan, which ones<\/li>\n<li>When the site was last checked, and a note when that grade has gone stale<\/li>\n<li>A link to your full WebSentry report<\/li>\n<li>A colour-coded grade in the admin bar, for administrators<\/li>\n<li>A notice when your grade drops, which each administrator can dismiss. A later drop shows it again<\/li>\n<li>\"Check now\" in the widget, which runs a fresh check and spends one of your monthly checks<\/li>\n<li>On a plan with monitors, one button adds the site to your account and scans it on a schedule<\/li>\n<\/ul>\n\n<p>Nothing is added to your public pages, and nothing runs outside the admin.<\/p>\n\n<h3>External services<\/h3>\n\n<p>This plugin connects to the WebSentry API to fetch your site's security grade and to check the site when you ask. It is needed for everything the plugin shows.<\/p>\n\n<ul>\n<li><strong>What is sent:<\/strong> your WebSentry API key and your site's address.<\/li>\n<li><strong>When:<\/strong> to fetch the grade, when an administrator opens the dashboard and the stored result is more than an hour old, and when someone presses Test Connection or Refresh. To check the site, only when an administrator presses Check now. To add the site to your account, only when an administrator presses Start monitoring this site. Nothing is sent before an API key is entered, and nothing is sent from public pages.<\/li>\n<li><strong>Where:<\/strong> https:\/\/websentry.dev\/api\/plugin\/status to fetch the grade, https:\/\/websentry.dev\/api\/scan to check the site, and https:\/\/websentry.dev\/api\/monitors to add the site as a monitor.<\/li>\n<\/ul>\n\n<p>WebSentry <a href=\"https:\/\/websentry.dev\/terms\">terms of service<\/a> and <a href=\"https:\/\/websentry.dev\/privacy\">privacy policy<\/a>.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Create a free account at <a href=\"https:\/\/websentry.dev\/register\">websentry.dev<\/a> if you do not have one.<\/li>\n<li>Install and activate the plugin.<\/li>\n<li>Go to <strong>Settings, WebSentry<\/strong>.<\/li>\n<li>In your WebSentry dashboard, under API Keys, create a key of type <strong>WordPress plugin<\/strong>. Paste it into the plugin's settings and save.<\/li>\n<li>Press <strong>Test Connection<\/strong>.<\/li>\n<li>Open your dashboard and press <strong>Check this site now<\/strong> in the WebSentry Security widget. On a plan with monitors, press <strong>Start monitoring this site<\/strong> instead and it is scanned on a schedule from then on.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"do%20i%20need%20a%20paid%20websentry%20plan%3F\"><h3>Do I need a paid WebSentry plan?<\/h3><\/dt>\n<dd><p>No. A free account includes a WordPress plugin key and 20 checks a month, which is enough to see your grade and recheck it after a fix.<\/p>\n\n<p>A paid plan adds scheduled monitoring, so the grade stays current without you asking, an email when it drops, and the names of the checks that changed rather than a count.<\/p><\/dd>\n<dt id=\"how%20often%20is%20the%20grade%20updated%3F\"><h3>How often is the grade updated?<\/h3><\/dt>\n<dd><p>On a free account, when you ask. Press <strong>Check now<\/strong> in the widget and it runs a fresh check. The widget tells you when the grade is more than seven days old.<\/p>\n\n<p>On a plan with monitors, the site is scanned on the monitor's schedule and the widget shows the latest result. The plugin keeps that result for an hour before fetching it again.<\/p><\/dd>\n<dt id=\"does%20it%20scan%20my%20site%20in%20the%20background%3F\"><h3>Does it scan my site in the background?<\/h3><\/dt>\n<dd><p>No. On a free account nothing is checked unless an administrator presses the button, so an install nobody looks at never scans and never spends your allowance. Scheduled scanning is what a monitor adds, and monitors run on WebSentry's servers rather than through this plugin.<\/p><\/dd>\n<dt id=\"can%20i%20use%20it%20on%20several%20sites%3F\"><h3>Can I use it on several sites?<\/h3><\/dt>\n<dd><p>Yes. Install the plugin on each site with the same API key. On a free account every site shares the same monthly allowance of checks. On a plan with monitors, press Start monitoring this site on each one and each uses one of your plan's monitors.<\/p><\/dd>\n<dt id=\"which%20kind%20of%20api%20key%20do%20i%20need%3F\"><h3>Which kind of API key do I need?<\/h3><\/dt>\n<dd><p>A <strong>WordPress plugin<\/strong> key. It can read a site's grade and start a check, and nothing else, so a key sitting in your WordPress database cannot reach the rest of your WebSentry account. A free account includes one, separately from the CI key, so installing this plugin does not cost you a key you were using elsewhere.<\/p>\n\n<p>A full-access key also works, but there is no reason to put one on a WordPress site.<\/p><\/dd>\n<dt id=\"what%20does%20a%20check%20cost%20me%3F\"><h3>What does a check cost me?<\/h3><\/dt>\n<dd><p>One scan from your account's monthly allowance, which the widget shows next to the button. Free accounts get 20 a month; paid plans are unmetered.<\/p><\/dd>\n<dt id=\"which%20address%20is%20monitored%3F\"><h3>Which address is monitored?<\/h3><\/dt>\n<dd><p>The WordPress site's own address, from Settings, General. A site on your own computer or a private network, such as localhost, cannot be monitored, because WebSentry scans from the internet. For an unusual setup, such as a staging copy that should show the live site's grade, a developer can set the address with the <code>websentry_site_url<\/code> filter.<\/p><\/dd>\n<dt id=\"does%20it%20slow%20down%20my%20site%3F\"><h3>Does it slow down my site?<\/h3><\/dt>\n<dd><p>No. The plugin only runs in the WordPress admin. It loads nothing on public pages.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.3.2<\/h4>\n\n<ul>\n<li>The widget says when a grade came from a partial scan. If bot protection blocks our checks, the grade only covers what we could reach, so the widget now names the firewall and links to the fix instead of showing the letter on its own.<\/li>\n<li>Fixed: a partial grade no longer counts as a change. A blocked scan is measured on fewer checks, so it scores higher than a complete one \u2014 it was becoming the baseline, which made the next full scan look like a drop and showed a decline notice for something that never happened. Partial grades are no longer compared or remembered, and no trend arrow is drawn against one.<\/li>\n<\/ul>\n\n<h4>1.3.1<\/h4>\n\n<ul>\n<li>Fixed: a plan that includes monitoring can now start it from the plugin. The button sat in the branch shown before a site's first scan, so anyone who had already fetched a grade, which is everyone who has used the plugin, could never reach it after upgrading. It now appears beside the grade and on the settings page whenever the plan allows monitors and this site has none.<\/li>\n<\/ul>\n\n<h4>1.3.0<\/h4>\n\n<ul>\n<li>Works with a free WebSentry account. A free key and the account's monthly allowance of checks are enough to see a grade, so a paid plan is no longer required.<\/li>\n<li>Check now, in the dashboard widget: runs a fresh check and spends one of your monthly checks. The widget shows how many are left.<\/li>\n<li>The widget says when a grade has gone more than seven days stale, for a site with no monitor keeping it current.<\/li>\n<li>How many checks got worse or were fixed since the previous scan. On a paid plan, which ones.<\/li>\n<li>A site with no monitor says so, instead of reporting a schedule it does not have.<\/li>\n<li>Nothing is scanned in the background: an install nobody opens never spends your allowance.<\/li>\n<li>Folder and main file renamed to match the directory slug, and a translation template added.<\/li>\n<\/ul>\n\n<h4>1.2.0<\/h4>\n\n<ul>\n<li>The plugin monitors the site it is installed on. The Site URL setting is gone; developers can still set an address with the <code>websentry_site_url<\/code> filter.<\/li>\n<li>Start monitoring this site: adds the site to your WebSentry account and runs the first scan, from the dashboard widget or the settings page.<\/li>\n<li>The grade-drop notice shows only when the grade drops, not when it improves, and shows again for a later drop after an earlier one was dismissed. It disappears when the grade recovers.<\/li>\n<li>The refresh button now shows the new result after refreshing.<\/li>\n<li>Removed the hourly scheduled task, which only cleared the stored result. The result now refreshes when it is more than an hour old.<\/li>\n<li>The admin script is a separate file, and all text can be translated.<\/li>\n<li>The text domain is now websentry-security-monitor.<\/li>\n<\/ul>\n\n<h4>1.1.0<\/h4>\n\n<ul>\n<li>Added admin bar badge showing security grade on every admin page.<\/li>\n<li>Added per-user dismissible admin notice on grade drop.<\/li>\n<li>Added AJAX refresh button in the dashboard widget.<\/li>\n<li>Added uninstall.php: all plugin data removed cleanly on delete.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Show your site's WebSentry security grade in the WordPress admin dashboard. Works with a free WebSentry account.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/387567","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=387567"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/websentrysecurity"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=387567"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=387567"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=387567"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=387567"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=387567"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=387567"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}