About this plugin
Controla helps you monitor and improve the security posture of your WordPress installation.
The plugin securely sends essential system metadata to your Controla dashboard so you can identify risks, outdated software, missing configurations, and general site health issues.
Data sent to Controla includes:
– Site and home URLs
– WordPress version, locale, multisite status, and automatic plugin update status
– Installed plugin names, file paths, versions, activation status, and update availability
– Basic server information
– WordPress user IDs, names, email addresses, roles, and two-factor authentication provider status (if configured)
– The plugin’s security-hardening settings and generated server security recommendations
The plugin does NOT collect passwords, site content, or session data.
Separately, the plugin stores a local security audit log in the WordPress database. Audit entries can contain usernames, WordPress user IDs, IP addresses, event details, and timestamps. These entries are not included in the data sent to Controla and are retained until the site owner deletes them.
A free Controla account is recommended to make the most out of this plugin.
External services
ai to display WordPress security and health insights in the user’s Controla dashboard. The connection is required only for the dashboard integration; the plugin’s local security-hardening features can be used without it.
After an administrator enters a Controla API key, the plugin sends the API key for authentication and the site metadata listed in the Description section. Data is sent when the plugin settings are saved, approximately once every 24 hours, and after a WordPress user is registered, updated, or deleted or a plugin is activated or deactivated (limited to at most once every five minutes for these events). No site data is sent to Controla until an API key has been configured.
This service is provided by Controla AB:
ai/
ai/en/terms-and-conditions
ai/en/privacy-policy