Repository navigation
Site Admin Toolkit v2.0.0
Site Admin Toolkit 2.0 marks the transition from a lightweight WordPress administration utility into a modular security, operations, monitoring, and forensic analysis console.
Highlights
- Tabbed security and operations console
- Site health and update monitoring
- Database health inspection
- WordPress activity monitoring
- Threat correlation and risk scoring
- Network and request analytics
- Outbound connection baselining
- Security alert engine
- SHA-256 file integrity monitoring
- File-change and suspicious-upload detection
- Error log and diagnostics viewer
- Backup readiness monitoring
- Maintenance mode
- Optional email alert delivery
- Generic JSON webhook support
- Optional Zoho integration
- Zoho OAuth connection testing
- Zoho Flow alert delivery
- Automatic alert dispatch with duplicate suppression
- CSV incident and network report exports
Security Design
Site Admin Toolkit focuses on defensive visibility and investigation.
It does not automatically block users, delete suspicious files, or modify database content based on security findings.
Threat classifications are indicators intended to support administrator review and incident response.
Privacy
The monitoring system intentionally avoids storing passwords, authentication cookies, authorization headers, API keys, OAuth secrets, request bodies, and sensitive query-string values.
Zoho
Zoho integration is completely optional.
Credentials are read from wp-config.php and are not stored in normal WordPress options or displayed by the plugin.
Current Scope
Network analytics represent requests and activity processed by WordPress/PHP.
Traffic blocked upstream by Apache, Nginx, a WAF, CDN, reverse proxy, or firewall may not appear in the application-level monitor.
Future Direction
Future development may include:
- Apache/Nginx log ingestion
- Security event timeline
- Trusted proxy support
- Alert history and acknowledgement
- Scheduled reports
- Additional SIEM and helpdesk integrations