FAIR

Federated and Independent Repositories

Web Plura Operation Guard – Site Operations & Update Readiness Checker

Plugin Banner

Web Plura Operation Guard – Site Operations & Update Readiness Checker

by Web Plura

Download
Description

A WordPress site can look fine on the homepage while forms, lead capture, SMTP, digital delivery, cron, REST, marketplace operations, or update readiness quietly drift.

Web Plura Operation Guard is a WordPress site operations and update readiness checker for administrators, agencies, and maintainers who need one local dashboard for form security, lead capture health, marketplace signals, digital product checks, cron/REST health, and update risk.

Use it before a maintenance window, client handoff, campaign launch, product launch, or update review. The plugin turns common operational blind spots into a local Fix First list so you can see which WordPress workflows need attention before they affect leads, orders, downloads, vendors, or updates.

WordPress operations problems it helps review

Operation Guard is built for local readiness checks such as:

  • Contact form, lead capture, SMTP, spam protection, public form page, and upload-risk review.
  • Digital product delivery, license, renewal, and basic access-risk checks for supported commerce plugins.
  • Marketplace vendor status, commission, payout, vendor product change, notification, and order warning checks.
  • Cron, REST, HTTP policy, object cache, autoload size, expired transient, Site Health, and update readiness signals.
  • Manual local workflow contracts with redacted evidence, comparison, CSV export, and retention controls.

Product page: https://wplura.com/products/web-plura-operation-guard
Terms: https://wplura.com/terms
Privacy: https://wplura.com/privacy

The plugin is intentionally local-first. It reads bounded WordPress metadata such as plugin inventory, page markers, update metadata, privacy page configuration, product delivery metadata, and marketplace option signals. It does not collect form submissions, lead payloads, customer records, order payloads, vendor payout ledgers, download files, access keys, or external account passwords. Optional telemetry is disabled by default and is not required for local checks.

Admin menu counters may show locally cached actionable findings or jobs. Automatic update checks use WordPress.org for public packages.

WordPress Site Health can show a cached Guard report summary after local guard checks have run. The Site Health test reads cached transients only and does not start new guard scans.

Included Site Operations Checks

  • Dashboard: one full-width overview for all local guard areas.
  • Form: form plugin, public form page, spam protection, upload risk, SMTP, and outdated form plugin checks.
  • Digital Product: EDD, WooCommerce, SureCart, download metadata, renewal, and basic access-risk checks.
  • Marketplace: marketplace platform, vendor status, commission, payout, vendor product change, notification, and order warning checks.
  • Lead: lead plugin, capture page, SMTP, privacy page, spam protection, and outdated lead plugin checks.
  • Site Systems: cron, REST route, HTTP policy, object cache, autoload size, and expired transient checks.
  • Update: WordPress core, plugin, theme, WooCommerce, PHP compatibility, backup readiness, and failed update residue checks.
  • Flow Contracts: manual local workflow checks, redacted evidence, recent-change timeline, baseline comparison, CSV export, and retention controls.

Good Fit For

  • WordPress admins preparing for updates, launches, and maintenance windows.
  • Agencies checking client form, lead, digital product, marketplace, and update workflows.
  • WooCommerce, Easy Digital Downloads, and SureCart operators who need local operational readiness checks.
  • Maintainers who want cached Site Health visibility after local guard checks have run.

External Services

This plugin does not transmit guard reports externally unless an administrator enables optional sanitized telemetry categories.

Optional telemetry can be enabled by a site administrator from the plugin telemetry settings. It is disabled by default and is not required for local operations checks. When enabled, the plugin may send selected categories to Web Plura at https://api.wplura.com/v1/plugin/telemetry/events:

  • Usage analytics: plugin lifecycle, consent, and version events.
  • Error diagnostics: sanitized plugin error category, severity, component, message code, and fingerprint.
  • Environment diagnostics: coarse WordPress, PHP, multisite, locale, and plugin version metadata with consented events.

The recipient is Web Plura. The data is used to understand plugin reliability and compatibility. The plugin does not send local report contents, Flow Contract evidence, form submissions, lead payloads, customer records, order payloads, vendor payout records, passwords, API secrets, JWTs, authentication headers, request bodies, full file paths, raw stack traces, or unrelated personal information. Consent can be withdrawn later from the plugin telemetry settings, and local checks continue working when telemetry is disabled or unavailable.

Admins may manually open these Web Plura information links from this readme or plugin metadata:

  • Product page: https://wplura.com/products/web-plura-operation-guard
  • Terms: https://wplura.com/terms
  • Privacy: https://wplura.com/privacy

WordPress may contact WordPress.org to check for plugin updates for this public package:

  • WordPress.org plugins: https://wordpress.org/plugins/
  • WordPress.org privacy policy: https://wordpress.org/about/privacy/
  1. Upload the web-plura-operation-guard folder to /wp-content/plugins/ or install the plugin ZIP in wp-admin.
  2. Activate Web Plura Operation Guard from the Plugins screen.
  3. Open Web Plura Operation Guard in wp-admin.
  4. Run all checks from the Dashboard or open a section for targeted checks.

WP-CLI can read cached summaries with wp web-plura operations status or run fresh local checks with wp web-plura operations scan [section|all]. Developers can register additional local sections with the web_plura_operation_guard_sections filter.

  1. Web Plura Operation Guard dashboard with consolidated local guard sections.

    Web Plura Operation Guard dashboard with consolidated local guard sections.

  2. Form guard section with local form security checks.

    Form guard section with local form security checks.

  3. Digital Product guard section with local delivery and renewal checks.

    Digital Product guard section with local delivery and renewal checks.

  4. Marketplace guard section with vendor and payout readiness checks.

    Marketplace guard section with vendor and payout readiness checks.

  5. Update guard section with update readiness checks.

    Update guard section with update readiness checks.

Does Web Plura Operation Guard send report data externally?

No. This local version stores bounded report summaries in WordPress options/transients and does not transmit report payloads externally. Optional telemetry is disabled by default and, if enabled, sends only selected sanitized telemetry categories.

Does the plugin read form submissions or lead messages?

No. It checks local metadata and page markers. It does not read submission bodies, visitor messages, uploaded files, or lead payloads.

Can it help with WordPress forms not sending email?

It can help review local form, lead capture, SMTP, spam protection, public form page, and outdated form plugin signals. It does not send test submissions or guarantee email delivery.

Does the Update section perform updates?

No. It reviews update readiness signals only. It does not apply updates, modify files, change plugin/theme versions, or run automatic maintenance actions.

Does it integrate with WordPress Site Health?

Yes. Site Health can show a cached Guard summary after checks have run. It does not run new checks from the Site Health screen.

Is this plugin a replacement for backups or security monitoring?

No. It is a light local guard and checklist. Use dedicated backup, restore, monitoring, and automation tools where those workflows are required.

Can this help with a WordPress maintenance checklist?

Yes. It groups local checks for forms, lead capture, digital products, marketplace operations, site systems, Site Health visibility, and update readiness.

What are Flow Contracts?

Flow Contracts are manual local workflow checks an administrator can create, run, export, and delete from WordPress. For example, a maintainer can record a redacted pre-launch or maintenance-window check, compare it later, and export a CSV handoff without storing form submissions or order payloads. Flow Contracts do not send email, post webhooks, create transactions, schedule checks, or call Cloud in the free plugin.

0.1.19

  • Improved the local dashboard’s risk hierarchy, section score display, and manual Flow Contract next step.

0.1.18

  • Fixed first-time telemetry opt-in so the consent event queues only after an administrator enables that category.

0.1.17

  • Added an informational Upgrade submenu with a responsive Free and separate service comparison.

0.1.16

  • Added optional, off-by-default telemetry consent controls while keeping local checks independent.
  • Refreshed the WordPress.org readme for clearer operations checklist, form, lead capture, update readiness, and business flow search intent.

0.1.15

  • Removed the nonessential admin information page and kept included checks and Flow Contracts local in the free plugin.

0.1.14

  • Removed service prompts and sibling shared-path loading from the public package so the free plugin remains a standalone local operations checker.

0.1.13

  • Added screenshot-backed admin UI smoke coverage with seeded Flow Contract states for Free-only local audits.

0.1.12

  • Added Business Flow Guard Flow Contracts with local templates, manual execution, evidence summaries, CSV export, retention controls, and extension hooks.

0.1.11

  • Added a Free-owned finding action surface with legacy hook fallback for reversible add-on work-item controls.

0.1.10

  • Added a Free-owned section follow-up surface with local fallback for reversible add-on section-panel replacement.

0.1.9

  • Added a Free-owned dashboard summary extension surface with legacy hook fallback.

0.1.7

  • Add local finding lifecycle, filters, evidence, one-scan comparison, CSV export, Site Systems diagnostics, WP-CLI, and a local-section extension filter.

0.1.6

  • Present AJAX scan progress directly through the submit button without a separate progress panel.

0.1.5

  • Standardize AJAX scan progress, completion, and error presentation across Site Operations pages.

0.1.4

  • Prevent inactive AJAX feedback and spinners from disrupting action-card layouts.

0.1.3

  • Run dashboard and section checks with authenticated AJAX, busy states, and inline feedback.

0.1.2

  • Improve finding-card hierarchy, explanation grouping, and recommended-action presentation.

0.1.1

  • Show observed results, business impact, recommendations, and actions consistently in finding cards.
  • Improve finding priority, score context, accessibility, and responsive presentation.

0.1.0

  • Added native WordPress Site Health integration for cached Guard report summaries without triggering scans from Site Health.
  • Kept public package updates on WordPress.org defaults.
  • Initial consolidated Web Plura Operation Guard plugin with Dashboard, Form, Digital Product, Marketplace, Lead, and Update admin pages.
Back to top