Deviser Shield – Instant Activity & File Change Alert

Keep your WordPress site secure and under control by monitoring all plugin-related activities.

Deviser Shield tracks important WordPress plugin activities, including activations, deactivations, deletions, and file modifications. It helps site administrators detect unauthorized changes, troubleshoot issues, and maintain full visibility over plugin activity.

Email notifications for plugin activations, deactivations, and deletions are sent instantly to the site administrator or to custom email addresses configured in the plugin settings.

For file and folder modifications, the plugin performs an automated scan every 15 minutes using WordPress Cron. If any changes are detected, an email notification is sent with details of modified, added, or deleted files.

In addition to email alerts, Deviser Shield maintains a local activity log file (deviser-shield.log) within the plugin directory. Administrators can view these logs directly from the settings page via an interactive modal log viewer. The viewer categorizes log entries with colored badges and details, and features instant real-time search filtering, a copy-to-clipboard function, and log clearing capabilities.

The plugin provides an interactive “Email Alert Graph” on the settings page. This visual dashboard tracks the total lifetime count of email alerts sent for each specific plugin action, giving you a clear, at-a-glance overview of all recorded activity.

New Advanced Settings plugin table allowing administrators to selectively track activities (Activation, Deactivation, Deletion, Manual Edits) on a per-plugin basis.

WordPress core monitoring checks files and folders in the WordPress root, wp-admin, and wp-includes. It detects additions, changes, and deletions, and checks eligible core files against official WordPress checksums. The wp-content folder and all its subfolders are excluded from core scanning. Core scans are scheduled daily through WP-Cron. The first inventory scan establishes a baseline, and unchanged findings do not repeatedly trigger alerts.

MU-plugin monitoring separately checks wp-content/mu-plugins and its subfolders for added, modified, or deleted files every 15 minutes through WP-Cron. The first scan establishes a baseline.

Theme monitoring checks the themes directory and its subfolders for added, modified, or deleted files and folders every 15 minutes through WP-Cron. The first scan establishes a baseline.

New user registration monitoring sends email notifications when a WordPress user account is created. Core-file monitoring, MU-plugin monitoring, theme monitoring, and new-user email alerts can each be enabled or disabled in settings. Scheduled scans may run later than expected on low-traffic sites because they rely on WP-Cron.

Features

• Monitor plugin activation and deactivation events

• Detect plugin deletions instantly

• Track file and folder modifications within plugins

• Local activity logging in a dedicated file with enable/disable settings

• Interactive log viewer modal to view, search, and copy logs directly from the dashboard

• Skip log file email alerts option to filter out noise from automated log file changes

• Selectively track or ignore specific plugin activities (activations, deactivations, deletions, modifications)

• New Advanced Settings plugin table allowing administrators to selectively track activities (Activation, Deactivation, Deletion, Manual Edits) on a per-plugin basis.

• WordPress core monitoring checks files and folders in the WordPress root, wp-admin, and wp-includes. It detects additions, changes, and deletions, and checks eligible core files against official WordPress checksums. The wp-content folder and all its subfolders are excluded from core scanning. Core scans are scheduled daily through WP-Cron. The first inventory scan establishes a baseline, and unchanged findings do not repeatedly trigger alerts.

• MU-plugin monitoring separately checks wp-content/mu-plugins and its subfolders for added, modified, or deleted files every 15 minutes through WP-Cron. The first scan establishes a baseline.

• Theme monitoring checks themes and subfolders for added, modified, or deleted files and folders every 15 minutes through WP-Cron. The first scan establishes a baseline.

• New user registration monitoring sends email notifications when a WordPress user account is created. Core-file monitoring, MU-plugin monitoring, theme monitoring, and new-user email alerts can each be enabled or disabled in settings. Scheduled scans may run later than expected on low-traffic sites because they rely on WP-Cron.

• Download raw log files directly to your device

• Clear activity logs instantly inside the viewer modal

• Receive real-time email notifications

• Lightweight and performance-optimized

• Easy to configure and use

Third-Party Libraries

Deviser Shield bundles the following open-source libraries:

• Chart.js (version 4.5.1) – JavaScript charting library used for the Email Alert Graph. License: MIT. Project: https://www.chartjs.org/ . License: https://github.com/chartjs/Chart.js/blob/master/LICENSE.md . Bundled file: assets/js/chart.min.js .

• Select2 (version 4.1.0-rc.0) – Enhanced selection controls in plugin settings. License: MIT. Project: https://select2.org/ . License: https://github.com/select2/select2/blob/4.1.0-rc.0/LICENSE.md . Bundled files: assets/js/select2.min.js and assets/css/select2.min.css .

Both libraries are distributed under their respective MIT licenses. WordPress-provided jQuery is used as a dependency and is not bundled with this plugin.

How It Works

After activation, the plugin automatically starts monitoring plugin activity. Whenever a change is detected, an email notification is sent with detailed information so administrators can take immediate action if required.

Use Cases

• Improve WordPress site security

• Detect unauthorized plugin changes

• Monitor administrator or developer actions

• Maintain an audit trail of plugin activity