Watchfox AI

No. It is a short background check about once an hour. It does not run on your visitors' page loads.

It never changes anything without your OK. Each warning tells you what to do. For a plugin or theme with a fix out, the "Fix it now" button opens a screen that says exactly what will happen, and nothing changes until you press Update now. Before the update Watchfox saves a copy of the old plugin files, and if your site stops working afterwards it puts the old version back. It saves files, not your database, so keep a full backup too. You can also turn on Auto-fix (free on every plan), which is off until you read the notice and tick the box. It only updates plugins and themes that have a known security problem and a fix out (if other sites had to undo that exact version, it waits a day or two first, then updates with a backup and an undo). It never switches a plugin off to deal with a warning; only if an update breaks the site and even the old version no longer works does it switch that plugin off. Everything Auto-fix does is listed under "What Watchfox did", and Pro also emails you.

Only if you ask it to: press "Fix it now" on a warning, or turn on Auto-fix. Otherwise it tells you what to do, for example "update this plugin to version 1.3", and links you to the right page.

Watchfox AI complements firewalls and malware scanners; it does not replace them. It does one job: it emails you, in plain words, when something you run has a known security problem. Use it next to whatever else you trust.

Nothing is sent until you finish setup. After that, your site sends your email, language and site address, and only the problems it found, not your full plugin list. See the External services section for every detail.

Watchfox AI is not a malware scanner, so it cannot tell you that. It tells you when software on your site has a known hole that attackers could use, so you can close it.

Yes. The warning emails come in English or Spanish; you choose in setup. The plugin screens follow your WordPress language through translate.wordpress.org, and the Spanish translation is on its way there.

The AI works on our side, not on your site. Every day it reads public security news so we can add new problems to the list early, when a story does not say exactly which versions are affected. The plugin itself runs no AI: it only compares the signed list with the versions on your site. Your site, its content and your plugin list are never sent to any AI.

All of it, inside WordPress. Every finding, how serious it is, the proof behind it and the steps to fix it show on every plan, free included. A free plan sends warning emails for one site.

More email warnings, for more sites. The warnings you see in WordPress do not change with the plan.

No. If you pay, cancel from the Plans tab (Manage or cancel) or from any payment email. Deleting the plugin only tells Watchfox AI to stop watching the site.