Activity Guard is a free WordPress plugin that covers four things most plugins charge separately for: a complete activity log, an IP-based security firewall, a plugin vulnerability scanner, and WooCommerce abandoned cart analytics. Alerts go out in real time to Slack, Telegram, or email, all from one dashboard.<\/p>\n\n
Most activity log plugins stop at logging. Most security plugins don't touch WooCommerce. Plugins like WP Activity Log, Simple History, and Stream do logging well \u2014 Activity Guard adds real-time Slack and Telegram alerts, an IP firewall with emergency shutdown, CVE vulnerability scanning, and WooCommerce abandoned cart recovery analytics, all at no cost. No paid tier required for any of it.<\/p>\n\n
No other free plugin on WordPress.org combines these four in one place: a complete audit log, an IP security firewall, a multi-database vulnerability scanner, and WooCommerce analytics with cart recovery tracking.<\/p>\n\n
[youtube https:\/\/youtu.be\/KXT0QcnFLOg]<\/p>\n\n
Activity Guard Website<\/a> | Documentation<\/a> | Pro Support<\/a><\/p>\n\n Activity Guard records every meaningful change on your site, including the IP address, username, timestamp, and the exact change made. The audit log covers:<\/p>\n\n Visual charts summarize your audit log at a glance. No need to scroll through raw log tables to understand what's happening on your site.<\/p>\n\n Activity Guard actively blocks threats rather than just recording them.<\/p>\n\n The Emergency Shutdown feature is specific to Activity Guard: one click and every logged-in session on your site ends immediately \u2014 useful when you detect a breach in progress and need everyone out now.<\/p>\n\n Activity Guard scans every installed plugin and theme against multiple vulnerability databases before problems develop:<\/p>\n\n No other free activity log plugin on WordPress.org includes a built-in multi-database vulnerability scanner.<\/p>\n\n Activity Guard logs every WooCommerce event and adds analytics built specifically for store owners.<\/p>\n\n Order tracking covers status changes, payments, refunds, and cancellations. You also get stock level changes and low-stock events, coupon creation and usage, product pricing edits, billing and shipping address updates, customer registration changes, and real-time shipping status updates.<\/p>\n\n The abandoned cart and incomplete-order analytics go further than basic logging. The dashboard shows checkout drop-off rates, recovery potential, recovery rate, and how customers interact with their carts before leaving. This tells you where revenue is being lost, not just that it was lost.<\/p>\n\n WooCommerce abandoned cart analytics with recovery rate tracking is included free. No competing free activity log plugin on WordPress.org provides this.<\/p>\n\n Activity Guard sends alerts the moment a critical event occurs, across four channels:<\/p>\n\n Events that trigger alerts include core file changes, plugin and theme updates (with the username that triggered the update), WooCommerce orders, payments, coupon usage, incomplete order follow-ups, product edits, stock changes, login and registration events, page and post changes, form submissions, and admin settings changes. A daily digest and weekly plugin download summary are also available.<\/p>\n\n You can schedule notifications for specific times and control exactly which events send alerts.<\/p>\n\n WooCommerce store owners use it to track every order, coupon, product change, and shipping event, and to recover revenue with abandoned cart analytics. Site administrators use it to know exactly who changed what, instantly log out suspicious users, and maintain a clean audit trail. Agencies and developers use it to monitor plugin updates, configuration changes, fatal errors, and debug logs across client sites. Security-focused admins use it to block IPs, scan for CVEs, monitor file integrity, and trigger emergency shutdowns. Multi-author sites use it to hold contributors accountable with full user activity logging and role-change tracking.<\/p>\n\n Join us: Facebook<\/a> | YouTube<\/a> | X \/ Twitter<\/a><\/p>\n\n Activity Guard sends notifications to your Slack workspace using a Slack incoming webhook URL that you provide. To set one up:<\/p>\n\n No data is stored by Slack beyond what you configure in your own Slack workspace. See Slack's privacy policy<\/a> for details.<\/p>\n\n Activity Guard uses Cloudflare Turnstile<\/a> for login bot protection. When Turnstile is enabled, your login page communicates with Cloudflare's verification servers. See Cloudflare's privacy policy<\/a> for details.<\/p>\n\n All scans run locally using public metadata and vulnerability feeds. Activity Guard does not collect, store, or transmit any personal information during scans.<\/p>\n\n Activity Guard uses the Freemius<\/a> SDK for optional telemetry. No data is collected by default. Data collection only starts after you explicitly confirm in the admin notice. See the Freemius privacy policy<\/a> for details.<\/p>\n\nWordPress Activity Log<\/h3>\n\n
\n
Security Firewall and IP Blocking<\/h3>\n\n
\n
Plugin Vulnerability Scanner<\/h3>\n\n
\n
WooCommerce Activity Log and Analytics<\/h3>\n\n
Slack and Telegram Notifications<\/h3>\n\n
\n
Admin and Developer Tools<\/h3>\n\n
\n
Who Uses Activity Guard<\/h3>\n\n
External Services<\/h3>\n\n
Slack Webhook Integration<\/h4>\n\n
\n
Cloudflare Turnstile<\/h4>\n\n
Plugin Vulnerability Scanner - Data Sources<\/h4>\n\n
\n
Freemius<\/h4>\n\n
WPAzleen Settings API<\/h4>\n\n