About this plugin
Silo Scope is a site health monitoring solution for WordPress that gives you a complete overview of your site’s health in one place.
Get a comprehensive health report covering security, performance, server configuration, SEO, and plugins without leaving your WordPress dashboard.
Key Features
Comprehensive Site Reports
- Security: Core/plugin/theme updates, HTTPS status, directory indexing, XML-RPC exposure, admin user check, file permissions, HTTP security headers (CSP, HSTS, X-Frame-Options, etc.), user enumeration detection
- Server & Environment: PHP version and limits, database engine/version, disk space, OPcache status, object cache detection, image toolkit capabilities, PHP error log activity, cron health, timezone alignment
- Performance: Cache detection, compression (gzip/Brotli), autoloaded options size, transient bloat, post revisions, database size
- SEO: Search engine visibility, robots.txt, sitemap detection, meta tags, canonical URLs, permalink structure
- Configuration: Debug flags, cron status, active theme, backup plugin detection, maintenance mode
- Plugins: Total/active/inactive counts, must-use plugins, abandoned plugin detection, update availability, duplicate cache plugin warnings
Context-Aware Help
- Click any metric for a detailed modal explaining:
- What the metric means
- Why it matters
- How to fix it
- Recommended plugins (optional)
Recommendations System
- Smart plugin suggestions based on detected issues
- Non-intrusive inline recommendations in help modals
View Modes
- Switch between different dashboard views for your workflow
- Go-live checklist for pre-launch review
Connection Code Generation
- Generate secure Connection Codes for remote monitoring
- Enables integration with external monitoring tools
Security Model
Silo Scope takes security seriously:
- API Token Authentication: Remote sites require a valid token (compared via hash_equals )
- Domain Allowlist: Only configured domains can request reports
- SSRF Prevention: Blocks loopback, private, and reserved IP ranges
- No Tracking: No visitor analytics, pixels, or front-end scripts
Data & Privacy
- All checks run inside your WordPress installation
- HTTP checks are loopback requests to your own site
- Report data stored in WordPress options/transients
- Remote monitoring requires explicit opt-in via Connection Code
External Services
This plugin includes an optional feature to fetch policy baseline updates from an external server. This feature is disabled by default and must be explicitly enabled in Plugin Settings.
Remote Policy Baseline (Optional)
When enabled, the plugin fetches health check threshold recommendations from:
json
– Data sent: No personal or site data is sent. The request is a simple GET request to retrieve a JSON file.
– When: Only when the “Remote Policy Baseline” option is enabled in Plugin Settings. The data is cached locally for 24 hours.
, recommended PHP version, memory limits).
com)
com/terms
com/privacy
If this feature is not enabled, the plugin uses locally bundled policy defaults and makes no external requests.