The WordPress activity log that watches every site at once
VigilDeck records who changed what, and when, across every WordPress website you manage — then streams it to one tamper-evident timeline you can search, filter and trust.
At a glance
- Plugin, theme, core, user and password events in one feed
- Actor, timestamp, object and before/after on every entry
- Off-site & tamper-evident — survives a hack or wipe
- Cross-site timeline across your entire portfolio
- Free WordPress connector plugin, no account required
When something breaks, guesswork is expensive
A WordPress activity log is the audit trail of your site: a chronological record of every meaningful change, from a plugin update to a password reset. It answers the question every developer and agency eventually asks at 2am — “what changed, and who changed it?”
Most activity log plugins stop at a single site and store the record inside the same database that just got compromised. VigilDeck takes a different approach: it logs locally and streams a signed copy off-site, so you get one searchable timeline across every site you manage — and a record that still exists even if a site is hacked, wiped or rolled back.
A client site goes white. A checkout stops converting. A page that ranked yesterday is suddenly slow. Without an activity log, you are reverse-engineering the cause: diffing files, interrogating hosting logs, asking teammates if they “touched anything.” The clock is running and the client is emailing.
The problem compounds at scale. When you manage twenty, fifty or a hundred WordPress sites, no human can remember every update applied and every setting changed. Native WordPress keeps almost none of this history, and the record you do have lives inside the very site that failed.
An activity log turns that investigation into a lookup. Instead of guessing, you open the timeline, filter to the affected site and the hour it broke, and read the exact sequence of changes that led to it. Mean time to resolution drops from hours to minutes.
Every change, captured with context
VigilDeck records the events that actually cause incidents and matter for security and compliance — each one enriched with the actor, the object and the before/after state.
Plugin activity
Installs, activations, updates, deactivations and deletions — with the version before and after every update.
Theme activity
Theme switches, updates and direct file edits, so a change to functions.php never goes unseen.
WordPress core updates
Every core version upgrade, major or minor, recorded the moment it is applied.
User & authentication
Logins, logouts, failed attempts, password resets, role changes and profile edits — a full user audit trail.
Before & after state
Where it applies, VigilDeck captures what a value was and what it became, not just that something happened.
Cross-site rollup
One timeline unifies events from every connected site, filterable by site, user, event type and date.
From WordPress hook to searchable timeline
Capture
The connector plugin hooks the relevant WordPress actions the instant they fire, on the site itself.
Sign
Each event is packaged and signed with an HMAC key unique to that site, then sent over HTTPS.
Verify & store
VigilDeck verifies the signature, normalizes the event and writes it to an append-only, tamper-evident store.
Surface
The event appears on your cross-site timeline in seconds, ready to search, filter, export or alert on.
Why an off-site activity log matters
Resolve incidents faster
Correlate any breakage to the exact change that caused it and roll back with confidence, not guesswork.
Keep the record after a breach
Because the log lives off-site, it survives exactly when an attacker would delete the on-site one.
Prove accountability
Every action is tied to a real user, settling “who did that?” for teams, clients and compliance alike.
Report with evidence
Export a clean change history for a client, an auditor or an incident post-mortem in a couple of clicks.
Built for how WordPress work really happens
-
Agencies & maintenance teams
Prove the maintenance you deliver and pinpoint which update broke a client site — across every account, from one screen.
-
Freelancers & developers
Get a professional audit trail without standing up your own logging stack, and look proactive when a client asks what changed.
-
Security & compliance
Maintain a tamper-evident record of user and configuration activity for SOC-style reviews, ISO or internal governance.
Related monitoring features
Activity Log: frequently asked questions
What is a WordPress activity log plugin?
It is a plugin that records a chronological audit trail of changes on your WordPress site — plugin and theme updates, core upgrades, logins, password changes and more. VigilDeck adds an off-site, cross-site timeline so you can see that history for every site you manage in one place.
Does the activity log work on a single site without an account?
Yes. The free VigilDeck connector plugin logs activity locally in your WordPress database with no account. Connecting an account adds the off-site cloud timeline, cross-site view, longer retention and alerts.
How long is activity history kept?
Local logs live in your own site. In the cloud, the Free plan keeps 7 days of history, Pro keeps a full year, and the Agency plan keeps history indefinitely.
Is the activity log tamper-evident?
Yes. Events are signed on the site with an HMAC key and written to an append-only store, so the off-site record cannot be quietly altered or deleted — even if the site itself is compromised.
Will activity logging slow down my site?
No. The connector hooks events and sends them asynchronously; it does not block page rendering. There is no measurable impact on your visitors’ experience or your PageSpeed scores.
Can I see activity across all my WordPress sites at once?
Yes — that is the point of VigilDeck. Every connected site rolls up into a single timeline you can filter by site, user, event type and date range.
Put every WordPress change on one timeline
Install the free activity log plugin, connect a site, and watch changes stream into your dashboard within minutes.
Free for up to 3 sites · No credit card required · Cancel anytime