BloomWatcher turns wp-admin into a gorgeous, live status dashboard for the server your site runs on. No SaaS dashboard, no Grafana, no Linux know-how — just open the dashboard and watch your whole stack breathe. (It does make a few small, cached lookups for plugin-update and TLS data — see “External services” below.)

Most “monitoring” plugins only look at WordPress. This one looks at the whole stack — the server, the web server, PHP, the database, TLS, DNS and WordPress itself — then grades it with an actionable health score.

Built for self-hosted WordPress on a VPS (DigitalOcean, Hetzner, Linode, etc.) and the agencies and freelancers who manage them.

Free features

CPU usage, load average and core count (animated ring gauge)
Memory used / total
Disk usage for the WordPress filesystem
Network throughput and connection count
Top processes by CPU
System uptime, hostname, kernel, OS
PHP version, SAPI, memory limit, OPcache status
Database engine, version, connection status, query count
Web server detection (nginx / Apache / LiteSpeed) and version
SSL certificate days-until-expiry with issuer
DNS check — does the domain actually point at this server?
Domain expiry — domain registration expiry date and registrar, via RDAP
WordPress version and pending core / plugin / theme updates
Autoload analysis — find the autoloaded options bloating every request
Health Diagnosis — a scored (0–100) security, performance and maintenance check-up with an A–D grade and prioritised findings, refreshed on demand
Live updates every few seconds, Apple-Home-style cards, dark mode, mobile friendly
Degrades gracefully on restricted hosts (shows “N/A” instead of breaking)

It’s genuinely useful on day one, for a single site, completely free.

Privacy

Your server and WordPress metrics are read locally and shown only to logged-in administrators — they are never sent to any external service. The plugin’s only outbound requests are the functional, cached lookups described under “External services” below (abandoned-plugin dates from api.wordpress.org, your own site’s TLS certificate, your own domain’s registration expiry from rdap.org, and Freemius for licensing/updates). None of them carry your server metrics or any personal data.

Pro

Stay ahead of problems instead of watching a dashboard:

Plugin Performance — rank your active plugins by how long they take to load (and how much memory they use) on every request, so you can spot the heavyweights. Measured by a tiny, optional must-use profiler file that you install with one click (and can remove just as easily) — see the FAQ for exactly what it adds.
Smart alerts — get notified the moment CPU, memory, disk, SSL or domain expiry crosses a threshold, via email, Telegram, Slack or Discord.
History & trends — 24h / 7d / 30d graphs of your key metrics.
One-click fixes — apply and undo safe hardening (disable XML-RPC, disable the file editor) straight from the diagnosis, fully reversible.

Agency

Multi-site hub — watch every site you manage from one dashboard (up to 20 sites).
Centralized alerts across all your sites and domains.
PDF client reports (coming soon).

The free version is fully functional on its own — Pro and Agency are additions, not unlocks of crippled features.

External services

To provide some of its features, this plugin relies on the following third-party/external services. Each lookup is cached to keep outbound requests to a minimum, and none of them receive your server metrics or personal data.

WordPress.org Plugins API — api.wordpress.org

What it is and what it’s used for: the official WordPress.org Plugins API. The Health Diagnosis “abandoned plugin” check uses it to read each active plugin’s last-release date — the same endpoint WordPress core already contacts for update checks.

What is sent and when: the slugs of your active plugins, periodically when the diagnosis runs (cached for up to a week). No personal data is sent.

RDAP — rdap.org

What it is and what it’s used for: RDAP is the standard registration-data protocol that has replaced WHOIS. The Domain Expiry card reads your own site’s domain registration expiry date and registrar by querying the public RDAP service at rdap.org, which redirects to the authoritative registry for your TLD.

What is sent and when: only your site’s own registrable domain name (e.g. “example.com”), and only when the dashboard refreshes the Domain Expiry card. The result is cached (registrars rate-limit and expiry dates barely move), so lookups are infrequent. No personal data and no server metrics are sent.

About RDAP: https://about.rdap.org/

Freemius — api.freemius.com

What it is and what it’s used for: Freemius handles licensing, secure checkout and automatic updates for the optional Pro/Agency add-ons, and — only if you explicitly opt in — anonymous usage diagnostics that help us improve the plugin.

What is sent and when: on activation the plugin shows an opt-in screen (you can skip it); license/update checks are made when relevant. No diagnostic data is sent unless you agree, and your server metrics are never part of it.

BloomWatcher – Live Server & Site Health Dashboard