Sitemap Guardian is a free all-in-one security toolkit for WordPress. It helps administrators monitor site security, strengthen common settings, review activity, and identify files or stored content that need attention.
Key features include:
- Local request and login protection.
- Configurable hardening and security headers.
- File-integrity, database health, and database-content scans.
- Security activity logging, alerts, and update awareness.
- Protected database backup and scheduled local file scans.
- WordPress core, plugin, and theme update inventory.
All features are free. Sitemap Guardian does not collect product telemetry.
Privacy
Sitemap Guardian stores its security settings, scan results, and audit information in the site’s own WordPress database. Audit events can include a validated IP address and user agent where available; records follow the configured retention period. The plugin sends no product telemetry.
External services
WordPress core checksum verification contacts the official WordPress.org checksum service when a file scan is finalized. The dashboard can request the official WordPress.org security-news RSS feed, which is cached locally. Administrator-login emails can include an Opentracker IP lookup link; no request is made to Opentracker unless an email recipient opens that link.