|

Nothing happens unseen. Every login, edit, and update goes in the permanent record. Sentinel+ watches when patterns start to smell wrong.

Download Free Live Demo
GetSentinel.dev logs
0 Total Logs
0 Today's Logs
0 Logins Today

Always recording

A Day in Your Site's Life

Twenty-four hours. Every login, edit, update, and failed sign-in. Written down as it happens. Still there when you come back.

00 06 12 18

00:00

Deep night

The site is quiet. Sentinel is not.

0 events 0 logins 0 plugins 0 security

00:00 Waiting

The log is empty

Midnight. Nothing has happened yet. When it does, Sentinel writes it here.

Activity log Live

Nothing logged yet.

Every one of those events lives in the log on your site. Free to keep.

Download Sentinel

Used on WordPress sites we build and support

Event Registry

The rest of the site can write in.

WordPress is recording from the first load. Woo, forms, and Yoast join when you flip them on.

WooCommerce

Shop activity in the same log as logins and edits.

  • Orders New orders, status changes, and cancellations. Order ID · total · customer
  • Refunds Refunds against an existing order. Amount · original order · who
  • Customers New accounts and profile edits. Customer · fields changed

Command Center

This is Sentinel. Click around.

Seems there was a failed admin login at 03:12. Check it out.

Demo site · example.test Demo data. Filters and drawers work.

Sentinel

Overview

Today, site timezone.

Needs a look
Last 24 hours · site timezone

Failed sign-ins today. Nothing is blocked. Sentinel only writes it down.

  • High

    2 failed logins for admin

    Same account, same IP, 03:12 and 12:04.

Events today

24

+26% vs yesterday

Accounts today

4

Unique users

Failed logins

2

Today

Errors

1

High, critical, or failed

Watching

  • Rate limiting off
  • Memory watch off
  • File watch on
  • Logging running

Hourly activity

Last 7 days.

Day 00 01:00 02:00 03:00 04:00 05:00 06 07:00 08:00 09:00 10:00 11:00 12 13:00 14:00 15:00 16:00 17:00 18 19:00 20:00 21:00 22:00 23:00
Thu
Fri
Sat
Sun
Mon
Tue
Wed

Busiest window: Wed 11:00 to 12:00 · 14 events

Quiet Busy

Seven-day volume

Events per day.

  • Thu
  • Fri
  • Sat
  • Sun
  • Mon
  • Tue
  • Wed

Thu 12 · Fri 9 · Sat 14 · Sun 8 · Mon 19 · Tue 16 · Wed 24

Recent activity

Last 10 events.

Choose Your Sentinel Experience

Sentinel is the watch. Sentinel+ is the warden.

Sentinel

Free

The watch. Available now.

The WordPress activity log. Overview, filters, registry, export, and a read-only REST API.

  • Activity logging

    Logins, failed sign-ins, content edits, plugin and theme changes, settings, and errors, with who, when, and where.

  • Overview dashboard

    Today's totals, a seven-day heatmap, volume, and the latest events. Refresh the page to see new rows. There is no live websocket stream.

  • Filterable activity log

    Search and filter the stored log by event, user, range, and priority. Open a row for the full record.

  • Event Registry

    See what is watched and pause individual events. WooCommerce, Contact Form 7, WPForms, Gravity Forms, and Yoast SEO events appear when those plugins are active.

  • Retention and exclusions

    Keep live rows for a set number of days, archive or prune on a schedule, and skip logging for chosen roles.

  • CSV, JSON, XML export

    Download from Settings. Pick format, date range, and live, archive, or both.

  • Core file watch

    Off by default. When you turn it on, Sentinel watches those two files on a schedule. Theme, plugin, and custom paths are Sentinel+.

  • Read-only REST API

    Fetch logs and stats with an API key from Settings. Read only.

Download Sentinel

Coming shortly

Sentinel+

£9 /month

The warden. Coming shortly.

Incident detection, extended file watch with diffs, custom events, and optional response.

  • Activity log included

    The activity log is included. Overview, filters, registry, export, and the REST API sit alongside the Plus tools.

  • Incident detection

    Groups brute force, enumeration, and XML-RPC bursts into incidents so you see the pattern, not only each event.

  • Observe, throttle, block

    Optional response on detected incidents. Default is observe. Throttle and block are opt-in. This is not the free log rate-limit setting.

  • File watch and diffs

    Theme, plugin, and custom paths, with a visual diff. Free only watches wp-config.php and .htaccess when you enable that setting.

  • Custom events

    Register your own events in the Event Registry. Built-in WordPress and integration events stay in Free.

  • Priority support

    Priority email support for Plus subscribers. Free support is through the contact form.

Learn more

Frequently Asked Questions

Everything you need to know about Sentinel

01

Will Sentinel impact my site's performance?

Sentinel is built to stay light. Events write as they happen. Rate limiting is on by default so a burst cannot fill the log. If a busy site needs it, you can queue writes in batches from Settings.

  • Rate limiting is on by default
  • Batch queueing is optional and off unless you turn it on
  • Cleanup runs daily by default to keep the live log lean
02

How long are logs stored?

Live activity is kept for 90 days by default, then moved to the archive on the daily cleanup. Archived rows are kept for 1 year by default, then permanently deleted. You can change both periods in Settings.

  • Live retention is a number of days you set
  • Archive can be kept for 6 months, 1 year, 2 years, a custom period, or forever
  • Cleanup also archives when the live log passes a row cap
03

What events does Sentinel track?

Sentinel tracks core WordPress activity: logins, content changes, plugin and theme updates, settings, and errors. WooCommerce, Contact Form 7, WPForms, Gravity Forms, and Yoast SEO events appear in the Event Registry when those plugins are active. Custom events are a Sentinel+ feature.

  • Login/logout attempts and failed authentication
  • Post, page, and comment creation or modifications
  • Plugin activations, theme changes, and system updates
04

Is my data private?

Your logs stay on your server. Free Sentinel does not send site activity to us.

  • IP logging is on by default. Older IPv4 addresses can be anonymised after 30 days. IPv6 is not masked today.
  • Download activity from Settings as CSV, JSON, or XML
  • You can exclude roles, limit what editors see, and log when someone opens the activity log
05

Can I export my logs?

Yes. Download CSV, JSON, or XML from Settings.

  • Pick a date range
  • Choose live activity, the archive, or both
  • This download does not follow the filters on the activity log
06

Does Sentinel require configuration?

No. Sentinel starts logging after activation with defaults you can change later.

  • Core event tracking starts on activation
  • Retention and daily cleanup are already set
  • File watch and batch queueing stay off until you turn them on
07

What's included in Sentinel+?

Sentinel+ is coming shortly. Planned features include incident detection, optional observe, throttle, or block, extended file watch with diffs, custom events, and priority support. Free Sentinel keeps the activity log, including optional watch of wp-config.php and .htaccess.

  • Brute force, enumeration, and XML-RPC flood detection
  • Theme, plugin, and custom file path monitoring
  • Priority email support for Plus subscribers
08

Does Sentinel work with other plugins?

Yes. Sentinel uses standard WordPress hooks, so it sits alongside other plugins and themes.

  • Works alongside security plugins, caching, and page builders
  • WooCommerce, Contact Form 7, WPForms, Gravity Forms, and Yoast SEO appear in the Event Registry when those plugins are active
  • Custom event registration is a Sentinel+ feature

Still have questions?

View Documentation Get in Touch
The log is always watching.

See What's Happening on Your WordPress Site

A clear record of logins, edits, updates, and errors. Free to start.

Start Logging Free View Documentation
Free forever
No credit card required
5-minute setup