AuditPulse Docs
Everything you need to install, configure and get the most out of AuditPulse. No account needed, no setup wizard, just activate and go.
Requirements
AuditPulse is lightweight and works on most standard WordPress hosting environments.
Version 6.0 or higher. Tested up to WordPress 7.0.
PHP 8.0 or higher. Works on PHP 8.1 and 8.2.
Standard MySQL or MariaDB. The plugin creates one custom table on activation.
Any shared, VPS or managed WordPress host. No special server configuration needed.
Installation
From WordPress.org (recommended)
- Log in to your WordPress admin dashboard.
- Go to Plugins > Add New Plugin.
- Search for AuditPulse.
- Click Install Now and then Activate.
- You will see the AuditPulse menu in your admin sidebar. Logging starts immediately.
Manual upload
- Download the zip from wordpress.org/plugins/auditpulse-activity-log-site-monitor.
- Go to Plugins > Add New Plugin > Upload Plugin.
- Choose the downloaded zip file and click Install Now.
- Click Activate Plugin.
No configuration is needed after activation. The plugin creates its database table automatically and starts recording events right away.
First Steps
After activation, open AuditPulse > Activity Log from your admin menu. You will see events already logged (the activation event itself will be the first entry).
From there, the recommended first steps are:
- Browse the Activity Log to confirm events are coming in.
- Go to Enable/Disable Events and turn off any event categories you do not need.
- Set up an Alert Rule for failed logins if you want instant notification of brute-force attempts.
- Check Settings to adjust log retention (default is 90 days).
Activity Log
The main log table is the core of AuditPulse. Every event recorded by the plugin appears here in reverse chronological order.
Each log entry shows:
- Event type (login, content change, plugin event, etc.)
- Description of what specifically happened
- User who triggered the event
- IP address at the time of the event
- Date and time with your site timezone
You can filter the log by event type, date range, or user. The search box filters across all fields.
Event Types
AuditPulse logs eight categories of events. You can enable or disable each category individually under AuditPulse > Enable/Disable Events.
- User login (success)
- User login (failed) with IP
- User logout
- Password reset request
- Post / page created
- Post / page updated
- Post / page deleted
- Media uploaded or deleted
- Plugin installed
- Plugin activated
- Plugin deactivated
- Plugin deleted or updated
- Site URL changed
- Permalink structure changed
- Theme switched
- Core settings modified
- New user registered
- User role changed
- Profile updated
- User deleted
- Comment approved or rejected
- Comment marked as spam
- Comment deleted
- WordPress core update
- Cron job events
- Database schema changes
- Order status changed
- Product created or updated
- Product deleted
- Stock level changes
Alert Rules
Alert Rules let you get notified immediately when a specific event happens. Go to AuditPulse > Alert Rules to create a rule.
For each rule you choose:
- Event type to watch (e.g. Failed Login, Plugin Deactivated)
- Notification channel: email or Slack webhook
- Email address (if using email notifications)
- Slack webhook URL (if using Slack)
A common setup is to create a rule for Failed Login with email alerts. You will get notified every time someone fails to log in, with their IP address in the alert.
IP Rules
Under AuditPulse > IP Rules you can manage a list of trusted and blocked IP addresses.
- Whitelist: IPs you trust. Useful for your own office or agency IP so you can filter your own activity out of reports.
- Blocklist: IPs you have identified as suspicious. Events from blocked IPs are flagged differently in the log.
Site Health
The Site Health dashboard gives you a quick overview of the security posture of your site. It checks for:
- Recent failed login count
- Number of admin accounts
- Inactive plugins still installed
- Recent user role changes
- Last time settings were modified
Reports
The Reports section gives you a summary view of activity over a chosen time period. Useful for monthly reviews or handing a report to a client. You can filter by date range and export the results.
WooCommerce
If WooCommerce is installed and active on your site, AuditPulse automatically starts logging WooCommerce events. No extra configuration needed.
Logged WooCommerce events include order status changes, product creation and editing, product deletion, and stock level changes. These appear in the main Activity Log with the WooCommerce category label.
Settings
Go to AuditPulse > Settings to adjust the plugin configuration.
Set how many days to keep log entries. Default is 90 days. You can set anywhere from 7 to 365 days. Old entries are automatically purged by the daily cron job.
Toggle individual event categories on or off. If you do not need to log comments or system events, you can disable those categories without affecting the others.
Notifications
Under AuditPulse > Notifications you can set a default email address for alerts and optionally configure a Slack webhook URL for Slack-based notifications.
The Slack webhook URL is the incoming webhook URL you create inside your Slack workspace. Once added, any alert rule that targets Slack will post to that channel.
Export Logs
You can export your activity log as a CSV file from the Reports section. The export includes all visible columns: event type, description, user, IP address, and date. Useful for compliance records or sharing with a client.
FAQ
Is AuditPulse actually free?
Yes, completely. Every feature in the plugin works without paying anything, entering a licence key, or creating an account. There is no Pro version holding back features.
Will it slow my site down?
No noticeable impact. Logging happens on the admin backend when an action occurs. There is no JavaScript added to your front-end pages for visitors.
How long are logs kept?
90 days by default. You can change this in Settings to anywhere from 7 to 365 days. Old entries are cleaned up automatically by a daily background task.
Can I disable logging for specific event types?
Yes. Go to Enable/Disable Events and toggle off any category you do not need. This does not affect other categories.
Does it work with WooCommerce?
Yes. If WooCommerce is active, order and product events are logged automatically with no extra setup required.
Where does the data go?
Nowhere outside your own database. AuditPulse makes no external API calls. All log data stays in a custom table in your WordPress database.
Does it support multisite?
Not in the current version. Multisite support is on the roadmap for a future release.
Can I get alerted about failed logins?
Yes. Create an Alert Rule for the Failed Login event type and set your notification channel to email or Slack. You will receive an alert every time it triggers, with the IP address included.
Privacy
AuditPulse does not send any data to external servers. All activity log data (user actions, IP addresses, timestamps) is stored only in your own WordPress database.
The plugin includes an optional Stay Updated signup page where you can leave your email to be notified about new releases. This is entirely optional and the email is only used to send release notifications. If you do not sign up, no personal data is collected at all.
AuditPulse is fully compatible with GDPR requirements as a data processor tool. You remain the data controller for your own site's activity logs.
Support
For support questions, feature requests or bug reports:
- Use the WordPress.org support forum for the plugin.
- Email us directly at work@crestvox.com for anything urgent.
When reporting a bug, please include your WordPress version, PHP version, and a description of what you expected versus what happened. This helps us fix things faster.