Scanfully

Know which WordPress sites need attention

A client finds a broken image. A password reset never arrives. A site gets slower after a round of updates.

These problems can develop while your homepage still loads normally. Finding them means checking more than whether a site is online.

Scanfully brings uptime, performance, content health, email checks, and WordPress activity together. You can see which sites need attention and investigate what happened around the same time.

Use it to look after your own WordPress sites or manage client sites from one dashboard.

This plugin connects WordPress to the Scanfully monitoring service. A Scanfully account is required. Start with a 14-day free trial; continued monitoring requires a paid subscription.

Find problems across your sites

• Uptime monitoring: Check your site and selected pages for failures, then review outages, recoveries, and response details. CDN-aware checks help you investigate availability when caching sits between visitors and your server.
• Performance monitoring: Track response times and see where a request slows down. Review DNS lookup, connection, TLS, server response, and HTML download times to choose where to investigate.
• Content health: Find broken internal and external links, missing images, and other media that fail to load. See the pages using each resource, share findings, and recheck after a repair. Mark known false positives so they stop appearing in your reports. Crawls check public HTML; they do not log in or execute JavaScript.
• SSL and DNS monitoring: Spot certificate expiry and configuration problems, and review DNS changes across resolvers. Check what changed when a domain, certificate, or mail setup starts behaving differently.
• Plugin vulnerabilities and updates: See known vulnerabilities affecting installed plugins, including inactive plugins. Review severity, available fixes, and reported updates to decide which sites need follow-up.
• WordPress Site Health: Review WordPress, PHP, server, and database information without opening each site’s admin. Get alerts about missing security updates and software versions that no longer receive security fixes. Inspect must-use plugins and drop-ins, and mark expected ones to focus on unexpected changes. Mute accepted health issues until they change or are resolved.
• Email monitoring: Check whether a test message sent through WordPress reaches Scanfully’s inbox. Review authentication and blocklist findings when delivery fails. This tests your site’s sending setup; it does not verify delivery to every customer’s inbox.

Understand what changed inside WordPress

When something breaks, the next step is often finding out what changed.

Scanfully’s WordPress Activity Log records updates, plugin activation and deactivation, content edits, media changes, and changes to WordPress users. It also covers settings, menus, widgets, the Customizer, and Site Editor changes. Edits through WordPress’s plugin and theme file editors include the changed code. Inspect change details, including content comparisons and failed-update errors, to see what actually happened.

For users with elevated permissions, it records successful logins, password and email changes, and application-password events. Failed logins are summarized hourly.

Search and filter the activity log to narrow your investigation by user, event, or date. Jump to a date or export results to CSV when you need to review or share the history. Activity history is kept for 18 months. Compare those events with downtime and performance results to build a timeline of the problem.

An update near a slowdown gives you a starting point for investigation. The timing alone does not establish the cause.

Keep client sites organized

The Scanfully dashboard brings current status, findings, and history into each site’s monitoring views.

Group sites by client or label, filter your portfolio, and save views for the sites you regularly check. Filter by WordPress or PHP version to find sites sharing an outdated stack. Switch between sites while keeping the monitoring view you’re working in.

Get useful alerts without watching the dashboard

Send notifications through email, Slack, Discord, or Pushover. Set rules across your sites, clients, or labels so new sites fit your notification setup.

Group related alerts, use quiet hours, snooze notifications during planned work, or review a daily digest. The notification log shows delivery history when you need to check an alert.

Bring monitoring into your own workflow

Use the Scanfully API to work with supported monitoring data and account operations.

Connect supported AI apps through MCP with access you approve and can revoke. Connections default to read-only access; optional write permissions cover the actions documented by Scanfully.

Protect your Scanfully account with authenticator-based two-factor sign-in, including when you use a social sign-in provider.

WooCommerce checkout monitoring: beta

A working homepage does not tell you whether a shopper can reach checkout.

For accounts with beta access, Scanfully can test a configured purchase flow through the product, cart, and checkout steps. Tests stop at the payment step without completing a payment. Review the failed step and available screenshots when a test fails.

See the WooCommerce monitoring documentation for requirements and beta access.

How the plugin and service work together

The plugin collects WordPress activity and health information, then sends it to Scanfully through background jobs. It also runs the WordPress side of email tests and supported checkout tests.

Scanfully stores received monitoring data and runs the dashboard outside WordPress. The plugin handles local collection and background syncing; external checks request pages from your site.

Visit the documentation for setup and troubleshooting, or contact support for help.

External services

This plugin connects to the Scanfully service at scanfully.com and its API at api.scanfully.com. It does not send monitoring data until you connect your site. Starting the connection passes your site URL and return URL to Scanfully.

Once connected, the plugin sends the following data to provide monitoring, diagnostics, and WordPress activity context:

• Site and health information: WordPress, PHP, server, and database details, including the database username; site settings; user counts; plugin inventory; must-use plugin and drop-in details, including file hashes; and directory sizes. Health data syncs on connection, every three hours, and after plugin changes. Directory sizes sync daily.
• WordPress activity: Event details, the acting user’s ID and display name, and relevant old and new setting values. Content and file edits can include changed text or code and nearby context. This includes content from draft, private, and password-protected posts.
• WordPress user events: User IDs, display names, and roles. Events for users with elevated permissions also include their email address. Successful logins and first application-password use for those users include IP addresses, forwarded proxy information, and browser details.
• Failed-login summaries: Hourly counts and details of targeted users with elevated permissions. These summaries omit IP addresses and attempted usernames.
• WooCommerce configuration: On connected WooCommerce sites, shop details sync even when checkout tests are off. These include the store address, WooCommerce version, product and cart/checkout URLs, shipping details, and login requirements. When checkout tests are enabled, Scanfully creates test orders. The plugin cancels test orders and deletes cancelled test orders through scheduled cleanup after seven days by default.
• Connection changes: When the plugin is deactivated, disconnected, or deleted, that it happened and the display name of the person who did it.
• Sync diagnostics: When Scanfully asks the plugin to sync, the plugin’s version, when its last request to Scanfully succeeded, and the time, status, and error message of its last failed request.

Email checks are enabled by default after connection. The plugin sends test messages through your site’s mail setup to a Scanfully address. Messages include site and version details and verification identifiers. The sender defaults to your WordPress administration email. The plugin also reports the detected mail plugin or WordPress version and local send errors to the API. You can turn these checks off under Settings > Scanfully.

Read Scanfully’s terms and conditions, privacy policy, and GDPR information for service and data-handling details.