Title: UpdateProof Author: zerofrik Published: September 22, 2026 Last modified: September 22, 2026 --- Search plugins ![](https://ps.w.org/zerofrik-maintenance-safety-agent/assets/banner-772x250.png? rev=3707374) ![](https://ps.w.org/zerofrik-maintenance-safety-agent/assets/icon-256x256.png?rev =3707374) # UpdateProof By [zerofrik](https://profiles.wordpress.org/zerofrik/) [Download](https://downloads.wordpress.org/plugin/zerofrik-maintenance-safety-agent.0.6.2.zip) * [Details](https://wordpress.org/plugins/zerofrik-maintenance-safety-agent/#description) * [Reviews](https://wordpress.org/plugins/zerofrik-maintenance-safety-agent/#reviews) * [Installation](https://wordpress.org/plugins/zerofrik-maintenance-safety-agent/#installation) * [Development](https://wordpress.org/plugins/zerofrik-maintenance-safety-agent/#developers) [Support](https://wordpress.org/support/plugin/zerofrik-maintenance-safety-agent/) ## Description UpdateProof is a free local tool for safer site maintenance. Start with one simple workflow: check your site, test important pages, review the update evidence, and approve changes only when you are ready. Learn about the broader UpdateProof roadmap at https://updateproof.zerofrik.com/. The Free/Base release helps developers and maintenance agencies establish an evidence- based update workflow before an update: * Records WordPress and PHP versions. * Records active plugins and the active theme without collecting their source code. * Detects available WordPress, plugin, and theme updates using WordPress native update APIs. * Runs a small, transparent set of deterministic checks and gives a low, review- recommended, or high-risk signal. * Lets administrators configure up to four critical same-site URLs for manual preflight checks. * Records HTTP status, response time, and a privacy-safe HTML fingerprint before and after a deployment attempt. * Creates a selectable plugin/theme deployment plan with an explicit approval step. * Applies selected plugin and theme updates through WordPress native upgrader APIs. * Records post-deployment checks and a local deployment history. * Optionally connects to an administrator-owned browser worker for real Chromium screenshots of up to three public pages. * Captures a baseline and reports pixel-level visual differences after an update, with screenshots stored in the site’s uploads directory. * Exposes site metadata, the latest snapshot, and update inventory through a read- only REST API. * Lets an administrator generate and revoke a per-site API token. The Free/Base plugin does not create a staging site, run synthetic form or WooCommerce tests, schedule updates, automatically roll back a failed update, or provide multi- site/team management. Those are planned Pro/service capabilities. ### Privacy UpdateProof stores the latest safety snapshot and a one-way hash of the optional site token in the WordPress options table. The free plugin does not send site content, visitor data, or telemetry to ZeroFrik or any third party. Visual regression is disabled by default. If an administrator enables it, the configured public page URLs are sent to the administrator-provided browser worker, which returns screenshots and pixel-difference data. The plugin stores those images in the site’s uploads directory. Do not configure private, password-protected, or visitor-personalized pages in this Free/Base feature. If an administrator generates a site token and gives it to an external service, that service can read the site metadata, update inventory, and safety snapshot exposed by the plugin’s authenticated REST API. The token can be revoked at any time from the plugin settings in the WordPress admin. ### External services The optional visual regression feature connects to a browser worker URL entered by the site administrator. There is no default hosted worker and no request is made unless the administrator enables the feature and presses Capture visual baseline or Run visual check. The worker receives the configured public page URL, viewport size, and a site identifier, then returns a Chromium screenshot and pixel-difference result. The plugin stores the returned screenshots in the site’s uploads directory. The worker does not receive WordPress credentials, post content, or visitor data from this plugin. If a third-party worker is used, its operator’s terms and privacy policy apply. ### REST API The optional read-only endpoints are available below the site REST URL: * /wp-json/zerofrik-maintenance-safety-agent/v1/site * /wp-json/zerofrik-maintenance-safety-agent/v1/snapshot * /wp-json/zerofrik-maintenance-safety-agent/v1/updates * /wp-json/zerofrik-maintenance-safety-agent/v1/preflight * /wp-json/zerofrik-maintenance-safety-agent/v1/plan * /wp-json/zerofrik-maintenance-safety-agent/v1/history * /wp-json/zerofrik-maintenance-safety-agent/v1/visual Send the generated token in the X-UpdateProof-Token header. A token is never returned by the API. ## Installation 1. Upload the zerofrik-maintenance-safety-agent folder to /wp-content/plugins/, or install the plugin ZIP from Plugins > Add New > Upload Plugin. 2. Activate the plugin. 3. Open UpdateProof in the WordPress admin. 4. Run a safety check. 5. Generate a site token only if you are connecting the site to an external service. 6. Optional: configure an administrator-owned browser worker under Visual page check, save a baseline, and run a visual check. The visual-regression screen can generate a one-time worker token. Copy it to the worker server as `UPDATEPROOF_WORKER_TOKEN`, restart the worker, and leave the saved token unchanged in WordPress. To rotate it later, use Generate and replace token, update the worker environment variable, restart the worker, and test again. ## FAQ ### Does the plugin update WordPress or plugins? The Free/Base version can apply selected plugin and theme updates only after an administrator explicitly approves a deployment plan. It does not apply WordPress core updates. ### Does it require an account? No. The local dashboard works without registration or an external service. ### Does it send my code to an AI service? No. The free plugin does not read or transmit PHP source code, post content, or visitor data. ### What is planned for Pro? The planned Pro/service layer will add connected multi-site management, staging or isolated test environments, more pages and viewports, synthetic form and WooCommerce tests, scheduled updates, automatic rollback, notifications, team access, client reports, and recovery workflows. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “UpdateProof” is open source software. The following people have contributed to this plugin. Contributors * [ zerofrik ](https://profiles.wordpress.org/zerofrik/) [Translate “UpdateProof” into your language.](https://translate.wordpress.org/projects/wp-plugins/zerofrik-maintenance-safety-agent) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/zerofrik-maintenance-safety-agent/), check out the [SVN repository](https://plugins.svn.wordpress.org/zerofrik-maintenance-safety-agent/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/zerofrik-maintenance-safety-agent/) by [RSS](https://plugins.trac.wordpress.org/log/zerofrik-maintenance-safety-agent/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 0.6.2 * Added a stable Pro approval hook so an active Pro recovery rule can block maintenance until a restore point is confirmed. * Improved blocked-deployment notices so administrators see the actual safety reason. #### 0.6.1 * Added a guided setup checklist to make the first safety check easier to follow. * Added stable extension hooks for the separate UpdateProof Pro add-on. * Added a restrained Pro roadmap link in the Help section. #### 0.6.0 * Renamed the plugin to UpdateProof and requested the matching WordPress.org slug. * Moved admin CSS and tab JavaScript into enqueued plugin assets. * Audited request values and tightened worker-token sanitization. * Shortened the directory submission description to meet the WordPress.org limit. #### 0.5.0 * Improved the release-candidate branding and WordPress.org submission metadata. #### 0.4.1 * Renamed the Tests tab to Site checks and added a simple recommended-check workflow. * Added an explicit deployment workflow guide and clear empty-update states. #### 0.4.0 * Reorganized the admin workspace into Dashboard, Tests, Updates & deploy, Connection, and Help & limits tabs. * Simplified administrator-facing labels and added a guided start panel. * Added a clear Free/Base capability and limit summary. #### 0.3.3 * Added visible per-page baseline capture results and screenshot previews. * Fixed alignment of visual settings and token actions. #### 0.3.2 * Fixed visual regression action buttons being rendered disabled even when configuration was complete. * Added a visible visual-test readiness status and improved action-button alignment. #### 0.3.1 * Clarified the worker shared-secret workflow and added one-time token generation and rotation in the admin UI. #### 0.3.0 * Added an opt-in administrator-owned browser-worker integration for three-page Chromium visual regression. * Added encrypted-at-rest worker token storage, local screenshot storage, visual results in the admin UI, and a read-only visual REST summary. #### 0.2.0 * Added configurable critical-path HTTP preflight tests. * Added selectable plugin/theme deployment plans with explicit approval. * Added post-deployment verification and local deployment history. * Added read-only REST endpoints for preflight, plan, and history data. #### 0.1.0 * Initial free WordPress.org release candidate. ## Meta * Version **0.6.2** * Last updated **17 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.0 or higher ** * Tested up to **7.1.2** * PHP version ** 7.4 or higher ** * Tags * [developer-tools](https://wordpress.org/plugins/tags/developer-tools/)[maintenance](https://wordpress.org/plugins/tags/maintenance/) [security](https://wordpress.org/plugins/tags/security/)[site health](https://wordpress.org/plugins/tags/site-health/) [updates](https://wordpress.org/plugins/tags/updates/) * [Advanced View](https://wordpress.org/plugins/zerofrik-maintenance-safety-agent/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/zerofrik-maintenance-safety-agent/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/zerofrik-maintenance-safety-agent/reviews/) ## Contributors * [ zerofrik ](https://profiles.wordpress.org/zerofrik/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/zerofrik-maintenance-safety-agent/)