Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Folio Drawbridge version 1.2.0 as active, updated 2mo ago and tested up to WordPress 7.0.
Overview
About this plugin
Folio Drawbridge lets authenticated WordPress users upload files into named vaults, where they are encrypted at rest using AES-256-CBC before being written to disk. Vault contents can be shared securely with external, unauthenticated recipients through a two-factor verification flow: invite email → email confirmation → one-time code. Every action across the plugin is recorded in an immutable audit log.
Key features
Encrypted vault storage — AES-256-CBC with a unique per-vault key derived from a site-wide master key. Files stored with direct HTTP access blocked.
Two-factor external sharing — recipients receive an invite link, confirm their email, then verify a time-limited one-time code before downloading.
Multi-file and chunked upload — files split client-side and reassembled server-side, bypassing PHP upload_max_filesize limits.
ZIP bulk download — recipients can download all vault files as a single archive (requires PHP ZipArchive ).
File type restrictions and per-user storage quotas — enforced server-side at upload time.
Role-based access — two tiers of non-admin access: Drawbridge Admin (full panel) and Vault User (My Vaults only).
Global share limits — default and maximum download counts and link expiration windows, retroactively enforceable.
OTP rate limiting — configurable cooldown between one-time-code requests.
Lifecycle management — hourly WP-Cron expires vaults and shares, sends expiry warnings, prunes stale OTPs, and cleans orphaned upload chunks.
Download notifications and expiry warnings — vault owners are emailed on recipient downloads and before share links expire.
Customisable email templates — subject and body for all four system emails with {placeholder} tokens.
Immutable audit log — every event logged with actor, IP, and timestamp. Filterable, sortable, exportable to CSV.
SIEM logging — append every audit event to a log file in JSON (NDJSON) or CSV for Splunk, Datadog, ELK, and similar tools. Written inside your uploads directory and protected from direct web access; redirectable with a wp-config.php constant.
Vault inspector — administrators can browse every vault, download files, edit metadata, transfer ownership, and revoke shares. All actions audited.
Part of the Folio suite
Folio Drawbridge shares a single “Folio” admin menu with the other Folio access and data-protection plugins when more than one is installed.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
audit log
file sharing
secure files
two factor
encryption
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 7.0
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 7.0.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.0
Minimum requirementsWordPress 6.2 · PHP 7.4
Update activity12 Aug 20262mo ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
