Skip to content

Site Admin Toolkit v2.0.0

Latest

Choose a tag to compare

@CraftEarth CraftEarth released this 09 Oct 16:37
· 15 commits to main since this release

Site Admin Toolkit v2.0.0

Site Admin Toolkit 2.0 marks the transition from a lightweight WordPress administration utility into a modular security, operations, monitoring, and forensic analysis console.

Highlights

  • Tabbed security and operations console
  • Site health and update monitoring
  • Database health inspection
  • WordPress activity monitoring
  • Threat correlation and risk scoring
  • Network and request analytics
  • Outbound connection baselining
  • Security alert engine
  • SHA-256 file integrity monitoring
  • File-change and suspicious-upload detection
  • Error log and diagnostics viewer
  • Backup readiness monitoring
  • Maintenance mode
  • Optional email alert delivery
  • Generic JSON webhook support
  • Optional Zoho integration
  • Zoho OAuth connection testing
  • Zoho Flow alert delivery
  • Automatic alert dispatch with duplicate suppression
  • CSV incident and network report exports

Security Design

Site Admin Toolkit focuses on defensive visibility and investigation.

It does not automatically block users, delete suspicious files, or modify database content based on security findings.

Threat classifications are indicators intended to support administrator review and incident response.

Privacy

The monitoring system intentionally avoids storing passwords, authentication cookies, authorization headers, API keys, OAuth secrets, request bodies, and sensitive query-string values.

Zoho

Zoho integration is completely optional.

Credentials are read from wp-config.php and are not stored in normal WordPress options or displayed by the plugin.

Current Scope

Network analytics represent requests and activity processed by WordPress/PHP.

Traffic blocked upstream by Apache, Nginx, a WAF, CDN, reverse proxy, or firewall may not appear in the application-level monitor.

Future Direction

Future development may include:

  • Apache/Nginx log ingestion
  • Security event timeline
  • Trusted proxy support
  • Alert history and acknowledgement
  • Scheduled reports
  • Additional SIEM and helpdesk integrations