Silo Scope is a
site health monitoring solution for WordPress that gives you a complete overview of your site's health in one place.
Get a comprehensive health report covering security, performance, server configuration, SEO, and plugins without leaving your WordPress dashboard.
Key Features
Comprehensive Site Reports
- Security: Core/plugin/theme updates, HTTPS status, directory indexing, XML-RPC exposure, admin user check, file permissions, HTTP security headers (CSP, HSTS, X-Frame-Options, etc.), user enumeration detection
- Server & Environment: PHP version and limits, database engine/version, disk space, OPcache status, object cache detection, image toolkit capabilities, PHP error log activity, cron health, timezone alignment
- Performance: Cache detection, compression (gzip/Brotli), autoloaded options size, transient bloat, post revisions, database size
- SEO: Search engine visibility, robots.txt, sitemap detection, meta tags, canonical URLs, permalink structure
- Configuration: Debug flags, cron status, active theme, backup plugin detection, maintenance mode
- Plugins: Total/active/inactive counts, must-use plugins, abandoned plugin detection, update availability, duplicate cache plugin warnings
Context-Aware Help
- Click any metric for a detailed modal explaining:
- What the metric means
- Why it matters
- How to fix it
- Recommended plugins (optional)
Recommendations System
- Smart plugin suggestions based on detected issues
- Non-intrusive inline recommendations in help modals
View Modes
- Switch between different dashboard views for your workflow
- Go-live checklist for pre-launch review
Connection Code Generation
- Generate secure Connection Codes for remote monitoring
- Works with the Silo Scope Fleet extension (sold separately)
Multi-Site Monitoring
Need to monitor multiple WordPress sites from one dashboard? The
Silo Scope Fleet extension (sold separately at
silomade.com) adds:
- Remote site monitoring dashboard
- Batch refresh and bulk actions
- Email digests and scheduled snapshots
- Site limit tiers (25, 75, or 200 sites)
Security Model
Silo Scope takes security seriously:
- API Token Authentication: Remote sites require a valid token (compared via
hash_equals)
- Domain Allowlist: Only configured domains can request reports
- SSRF Prevention: Blocks loopback, private, and reserved IP ranges
- No Tracking: No visitor analytics, pixels, or front-end scripts
Data & Privacy
- All checks run inside your WordPress installation
- HTTP checks are loopback requests to your own site
- Report data stored in WordPress options/transients
- Remote monitoring requires explicit opt-in via Connection Code
External Services
This plugin includes an
optional feature to fetch policy baseline updates from an external server. This feature is
disabled by default and must be explicitly enabled in Plugin Settings.
Remote Policy Baseline (Optional)
When enabled, the plugin fetches health check threshold recommendations from:
- Service URL: https://baseline.scopefleet.com/policy.v1.json
- Data sent: No personal or site data is sent. The request is a simple GET request to retrieve a JSON file.
- When: Only when the "Remote Policy Baseline" option is enabled in Plugin Settings. The data is cached locally for 24 hours.
- Purpose: Provides updated threshold recommendations for site health metrics (e.g., recommended PHP version, memory limits).
- Service provider: SILO (silomade.com)
- Terms of Service: https://silomade.com/terms
- Privacy Policy: https://silomade.com/privacy
If this feature is not enabled, the plugin uses locally bundled policy defaults and makes no external requests.