Pulbeat

A contact form can break without anyone noticing: a plugin update, an expired SMTP password or a hosting change, and enquiries quietly stop arriving. Pulbeat watches for exactly that and tells you by email or Telegram.

What Pulbeat notices

• Email delivery failures when WordPress cannot send a form notification (wp_mail errors).
• Unusual silence: no form submissions or orders for longer than is normal for your site at that time of day.
• The site is down or not responding.
• Monitoring is blocked (for example, by a security plugin or a firewall), or the site returns a response that does not pass signature checks.

Supported sources

• Contact Form 7
• Elementor Pro forms
• WooCommerce orders
• Any email sent through wp_mail

Privacy by design

The plugin stores only five-minute aggregate counters: how many submissions succeeded, how many emails failed, how many were marked as spam, how many orders were created or failed. It never collects or sends form contents, names, email addresses, phone numbers, IP addresses or order details. Forms are identified only by a salted hash, not by their title or ID.

Until an administrator connects the site with a one-time code from the Pulbeat dashboard, the plugin makes no external requests at all.

How it works

1. Create a free account at pulbeat.com and add your site in the dashboard. You will get a one-time connection code.
2. Install and activate this plugin, open Settings → Pulbeat and enter the code.
3. The Pulbeat cloud checks your site every few minutes over a signed connection and alerts you when something goes wrong.

Pulbeat is currently in a free public beta. The Solo plan (one site) is free during the beta; paid plans will be announced at least 14 days in advance and nothing is ever charged without your explicit action.

External services

This plugin connects to the Pulbeat cloud service (https://pulbeat.com), which is required for monitoring and alerts. No connection is made until a site administrator enters a connection code in Settings → Pulbeat.

• When connecting: the plugin sends the one-time connection code, the site address (scheme and host of the home URL), a newly generated public key of the site and the plugin version to https://pulbeat.com/v1/sites/connect, together with a timestamp, a random nonce and a signature in request headers. The request is signed with the site’s private key, which never leaves the site. While this request is open, the Pulbeat cloud calls the plugin’s REST endpoint once to verify that it controls the site.
• During monitoring: the Pulbeat cloud requests the plugin’s REST endpoint (/wp-json/pulbeat/v1/pulse) every few minutes. Each request is signed by the cloud and verified by the plugin; unsigned requests are rejected. The plugin replies with the aggregate counters described above (per five-minute interval, with the source plugin of each form and a salted hash identifying the form), the site ID assigned by Pulbeat, the current server time, the plugin version, the WordPress version and the PHP version, signed with the site’s key.
• No personal data of your visitors or customers is sent: no form fields, names, email addresses, phone numbers, IP addresses or order contents.
• Disconnecting in Settings → Pulbeat or deleting the plugin stops all communication; deleting the plugin also removes all local data it stored.

The service is provided by Pulbeat: Terms of Service, Privacy Policy.