LAUNCH30 at checkout, until 30 November. See the pluginsSee plugins
A comprehensive, tamper-evident activity log for WordPress. See who changed what, when, and from where — with field-level change detail.
Features
Comprehensive, tamper-evident activity log for WordPress. See who changed what, when, and from where — with field-level change detail and one-click integrity verification.
See the exact before and after of every change, not just "profile updated"
A cryptographic hash chain proves the log has not been altered, and one click pinpoints the first changed event
Events live in their own indexed table, never in your posts table, and are pruned automatically
New activity appears on the log screen as it happens
Capture, anonymize, or skip IP addresses, and exclude trusted roles from logging
Logged personal data is included in WordPress export and erasure requests
`wp dragon-activity-log list`, `prune`, and `verify`
Dragon Activity Log Pro
Pro add-on for Dragon Activity Log. Adds rich content diffs, one-click rollback, login-anomaly & security alerts, streaming to Slack/webhook/syslog, session management, reports/export, and WooCommerce events.
Guides
Step-by-step guides from the team that builds it. All guides
Security
Why every multi-user WordPress site needs an audit trail, what a good one records, how a hash-chained log proves it has not been edited, and how to use it in an incident.
Security
What actually stops account takeover on WordPress: lockouts that cannot be spoofed, a second factor that gates every login path including XML-RPC, and passkeys for the people who hate codes.
A quiet pointer to the Pro add-on: an Upgrade to Pro link on the Plugins screen, a one-line note at the foot of the plugin's screens, and a single dismissible notice once the plugin has done its job. Nothing in the free plugin is locked or changed, and all three disappear when Pro is active.
