Tailwatch is a WordPress security and site management plugin that gives you real-time visibility into what is happening on your website.
It combines security, monitoring, and backups into one lightweight system, managed from your WordPress dashboard. Optionally connect a free Tailwatch account to receive event-based push notifications so you stay informed wherever you are.
Core Features
- Activity Logs (logins, failed logins, registrations, password resets)
- HTTP Error Logs (4xx / 5xx monitoring)
- Email / SMTP Logging with custom SMTP server support
- Security Hardening Audit
- File & Permission Protection
- Smart SSL Monitoring & Expiry Alerts
- File Integrity Monitoring (baseline + change detection)
- Full Site Backups (files and database)
- Search & Replace (safe database-wide updates with serialized data handling)
- Content Restrictions (browser-level protection controls like copy/inspect restrictions)
- Database Optimization Tools
- Broken Link Scanner
- Cron Job Manager
- 301 Redirect Manager
- User Management (create, edit, delete users and manage roles)
- Login Defender (IP-based brute-force protection: failed-login throttling, automatic temporary lockouts, configurable retention)
- Geo-blocking (allow/block individual IPs or IP ranges; whitelist trusted IPs to bypass restrictions)
- Username Hardening (audits for common high-risk usernames such as admin and administrator)
- Process Monitoring & Recovery (detect stuck long-running tasks and re-schedule them)
- Disk Space Monitoring
- Event-based Push Notifications
Notifications
Once connected to a free Tailwatch account, your site can send event-based push notifications for:
- Login activity (logins, failed logins, registrations, password resets)
- Backup completion and backup failures
- File integrity changes (added, modified, deleted files)
- SSL expiry alerts and certificate status changes
- Security Hardening Audit results (scan completed, issues detected)
- Security feature configuration changes
- Search & Replace completion results
- HTTP error spikes (4xx / 5xx monitoring)
- Database optimization results
- Broken link scan results
- Cron job failures
- Email delivery (success or failed)
- Login Defender events (IPs blocked after repeated failed logins, brute-force attempts detected)
Notifications are delivered to the Tailwatch mobile app using Firebase Cloud Messaging (FCM), routed through
api.wptailwatch.com (the plugin does not contact Firebase directly).
Tailwatch Pro
Tailwatch Pro extends the free version with:
- Malware Guard (cloud malware scanning, suspicious file detection, cleanup, and push alerts for risk-detection events)
- Country blocking (allow or block visitors by country, applied to login forms or your entire site)
- Role-based Two-Factor Authentication (2FA)
- Advanced User Management (account-expiry rules, "login as another user", per-user 2FA status surfaced in the user list)
- Expanded notification credits
- Advanced scheduling controls for backups and maintenance tasks
- Priority support