Vigidomain

Descripció

A monitoring agent connected to Vigidomain server designed to protect your WordPress site by tracking the status of your domain in real time. It interfaces seamlessly with the secure Vigidomain API to deliver critical alerts directly to your WordPress dashboard.

Key Features

• Real-time Monitoring: Automated and centralized retrieval of information and security alerts related to your domain name.
• Optimized Performance: Use a caching system based on native WordPress transients to avoid making too much request to the third-party API.

External services

This plugin connects to the Vigidomain API (https://web.vigidomaine.fr/) to provide real-time domain security monitoring,
alerts, and health tracking for your WordPress site.

Vigidomain is a first-party service operated by the plugin author.

The external service is used for:
– Registering and linking your WordPress installation to your Vigidomain account
– Checking your Vigidomain account email verification status
– Fetching domain security scores, status, and metrics for the dashboard
– Retrieving and syncing the list of monitored domains
– Retrieving active security alerts

Data sent to the service, by endpoint:

/pre-register — called only after user consent, when the user starts the connection setup. Sends:

– Site home URL and site URL
– Site server IP address (from SERVER_ADDR, or resolved from SERVER_NAME)
– Site name, WordPress version, PHP version, site language, HTTPS status
– Full list of installed plugins: name, version, active status (all plugins, not just active ones)
– Debug status: whether WP_DEBUG and WP_DEBUG_LOG are enabled
– HTTPS usage status
– Available update counts: core, plugin, theme
– Site domain (parsed from the home URL)
– WordPress admin account email, first name, last name, display name (fallback), locale

/register — called when the user submits the registration form. Sends:

– Email, username, and name provided by the user in the form

/setup/email-verification-state — called after login/registration to check account status. Sends:

– Authenticated session token (no additional site data)

/domains/dashboard — called when the dashboard is viewed (results cached 1 hour). Sends:

– Authenticated session token, site domain

/domains/monitored — called when managing monitored domains. Sends:

– Authenticated session token

/domains/monitored/configure — called when the site URL changes or on manual sync. Sends:

– Current site URL, authenticated session token

/alerts/list — called when viewing alerts (cached 5 minutes). Sends:

– Authenticated session token, site domain

No passwords, payment information, or post/page content is transmitted.
All requests are sent over HTTPS.

Vigidomain terms of service and privacy policy: https://vigi.domains/fr/cgv-cgu/

This plugin requires a working connection to Vigidomain to function.