HackIndex Ladon

Ladon reports which plugins, themes and core version run on this site to your Ladon account at ladon.hackindex.io. Ladon matches them against the Wordfence vulnerability feed and alerts your team when a component you run has a known vulnerability. Premium plugins and themes that are not on wordpress.org are matched the same way.

The plugin only talks outward. It registers no public REST routes, and the Ladon server never reaches back to your site.

What is sent

• WordPress core version and PHP version
• The slug, version and active state of each installed plugin
• The slug, version and active state of each installed theme
• The site URL and name

Nothing is sent before you connect. On disconnect the site token is removed.

When it is sent

• When a plugin is activated, deactivated or updated
• When a theme is switched
• Once a day as a heartbeat

An unchanged inventory is skipped, so a quiet site sends almost nothing.

External service

This plugin connects your site to Ladon, a service operated by HackIndex at ladon.hackindex.io. It is required for the plugin to function: the plugin reports the inventory listed above and reads back this site’s status. The service matches the versions against a vulnerability feed and notifies your team. All processing happens on the Ladon side; the plugin only reports and reads.

Data is sent to https://ladon.hackindex.io/api/v1 only after an administrator connects the site, and only the data listed above. The site is never contacted from the Ladon side.

• Terms of service: ladon.hackindex.io/terms
• Privacy policy: account.hackindex.io/privacy