Pingvera

Pingvera is a monitoring service for studios and agencies that maintain many
client websites. This plugin is the “level 3” connector: it looks at the site
from the inside and reports the following to your dashboard:

• Inventory: WordPress core, PHP and database versions, active theme, plugins and their versions.
• Updates: available core and plugin updates.
• Security: predictable admin login name, debug mode left on, core file integrity (checksums).
• Performance: object cache presence, size of autoloaded options.
• Availability: REST loopback, recent PHP fatal errors (a count only, never the log itself).
• Configuration: WP-Cron mode and task lag; mail/SMTP.
• Commerce: WooCommerce orders (failed-order spikes, order “droughts”), payment gateways, checkout reachability, a daily smoke run.
• Files: write permissions on wp-config.php.

What the plugin does NOT do: it opens no inbound ports, executes no remote
commands, and never transmits passwords, database contents, or visitor
personal data. All communication is outbound HTTPS to your own dashboard.

External services

This plugin is the connector for Pingvera, an external website-monitoring
service (https://pingvera.com). The plugin exists to send your site’s technical
health to your Pingvera dashboard, so using it requires that service. It talks to
the dashboard you configure — a hosted dashboard such as pingvera.com, or your
own self-hosted/on-prem instance — over outbound HTTPS only.

What is sent and when:

• Pairing (once, when you click “Connect”): the one-time pairing code and your
  site URL are sent to obtain a scoped access token. Endpoint: /cms/v1/pair.
• Sync (once an hour via WP-Cron, and on “Sync now”): technical health and
  inventory — WordPress, PHP and database versions; the active theme and the list
  of plugins with their versions; available updates; security, performance and
  configuration findings; WooCommerce order statistics and payment gateway /
  checkout status; and a count of recent PHP fatal errors. Endpoint: /cms/v1/sync.
  Passwords, database contents, post content and visitor personal data are never
  sent.
• Real User Monitoring (only if enabled for your site in the dashboard): a small
  asynchronous script is loaded on the front end to collect anonymous Core Web
  Vitals (loading and interaction timings) of your own pages. Endpoint: /rum/v1/.
  No personal data is collected.

Service provided by Pingvera:

• Terms of Service: https://pingvera.com/terms.html
• Privacy Policy: https://pingvera.com/privacy.html