Title: AVAR Server Monitor
Author: AVAR Solutions
Published: <strong>4.6.2026</strong>
Last modified: 1.10.2026

---

Hae lisäosia

![](https://ps.w.org/avar-server-monitor/assets/banner-772x250.png?rev=3600543)

![](https://ps.w.org/avar-server-monitor/assets/icon-256x256.png?rev=3600567)

# AVAR Server Monitor

 [AVAR Solutions](https://profiles.wordpress.org/pluptak/)

[Lataa](https://downloads.wordpress.org/plugin/avar-server-monitor.1.12.1.zip)

 * [Tiedot](https://fi.wordpress.org/plugins/avar-server-monitor/#description)
 * [Arvostelut](https://fi.wordpress.org/plugins/avar-server-monitor/#reviews)
 *  [Asennus](https://fi.wordpress.org/plugins/avar-server-monitor/#installation)
 * [Kehitys](https://fi.wordpress.org/plugins/avar-server-monitor/#developers)

 [Tuki](https://wordpress.org/support/plugin/avar-server-monitor/)

## Kuvaus

AVAR Server Monitor is a privacy-first WordPress health dashboard, uptime monitor,
server diagnostics and security insight toolkit built directly into wp-admin.

It helps WordPress administrators understand whether their site is technically healthy,
available, secure and running on a reliable server environment — without requiring
an external SaaS account.

Instead of showing scattered technical data across multiple places, AVAR Server 
Monitor brings the most important signals into one clear dashboard: uptime, SSL 
status, PHP and database health, server resources, WP-Cron, an alert center, security
checks, activity log, 404 monitoring, diagnostic exports, database maintenance and
more.

#### Know what is wrong before visitors notice

WordPress sites often break quietly.

A cron task stops running.
 An SSL certificate gets close to expiration. The database
grows. Debug errors are exposed. A plugin update changes something important. A 
server starts running out of memory. A backup directory may be exposed. A WooCommerce
store accumulates technical clutter.

AVAR Server Monitor helps you spot these problems early and decide what needs attention
first.

#### Site Health Score

The main dashboard includes a 0–100 Site Health Score that summarizes the technical
condition of your WordPress site.

The score is based on weighted categories:

 * Core & Updates
 * Server Environment
 * Security Posture
 * Reliability & Monitoring
 * Performance & Storage

The score is not just a decorative number. It includes top issues, recommendations,
action links and severity caps for critical problems.

For example, if a monitored domain is down, an SSL certificate has expired or a 
snapshot directory is publicly accessible, the score is capped so the site does 
not appear healthier than it really is.

#### Monitoring and diagnostics in one place

AVAR Server Monitor includes practical tools for everyday WordPress administration:

 * Alert Center that turns downtime, SSL expiry, Health Score drops, stalled cron,
   integrity failures, new PHP fatal errors, a filling disk and PHP or database 
   end of life into one incident timeline (with optional email and automatic diagnostic
   snapshots).
 * External heartbeat / dead-man’s switch that pings a URL you control so full outages
   are still detected.
 * PHP error monitoring with fatal/warning trends and alerts on new fatal errors,
   graded by the context each error ran in: a crash that broke a real request is
   critical, while a direct request to a file WordPress never serves is recorded
   without an email. Entries written by other sites sharing the same server log 
   are identified and kept separate, and every alert says what happened, who it 
   affected and what to do, with server paths masked.
 * Health Score history and per-domain response-time trends.
 * Storage growth monitoring: largest database tables, uploads size and a disk-full
   projection.
 * Uptime monitoring for one or more domains.
 * SSL certificate checks and expiration warnings.
 * WP-Cron monitor with overdue event detection.
 * Server resource overview with CPU, memory, disk and database information.
 * WordPress environment overview with versions, plugins, themes and updates.
 * Health Advisor for PHP, database, extensions, cache and connectivity checks.
 * Security audit for HTTPS, debug exposure, file editor status, readme.html, REST
   API, XML-RPC and login hardening.
 * Core file integrity scan against official WordPress.org checksums.
 * Activity Log for important plugin, theme, update, user and login events.
 * 404 monitor for frequently requested missing URLs, with likely bots labelled 
   and broken links on your own site found automatically.
 * Email alerts for downtime, version changes, resource thresholds and summaries.
 * Diagnostic snapshots for troubleshooting and support.
 * Safe Client Health Report for communicating technical status to clients or hosting
   support.
 * Database cleanup preview with risk labels, impact descriptions and confirmation
   flow.
 * Maintenance / coming-soon mode with a customizable page (background colour, gradient
   or image, logo and text colour), live preview, countdown and role-based bypass.

#### Login security and access control

AVAR Server Monitor includes a built-in login security layer, so you can harden 
wp-admin without adding a separate plugin:

 * Brute-force protection with escalating lockouts, an IP allowlist and blocklist(
   CIDR and wildcard support) and manual block/unblock of active lockouts.
 * A persistent, paginated login attempt log with per-IP statistics: failed attempts,
   incidents, lockouts and successful sign-ins, plus top attacking IPs and most-
   targeted usernames.
 * A login CAPTCHA on the login, registration and lost-password forms — a privacy-
   first self-hosted math question with honeypot by default, or optional Cloudflare
   Turnstile, Google reCAPTCHA v2 or hCaptcha with your own keys.
 * An optional custom login URL that serves the login page from a secret slug and
   returns 404 for the default wp-login.php.

These features run locally and require no external account; CAPTCHA providers are
contacted only if you explicitly choose one.

#### Part of the AVAR Tools family

AVAR Server Monitor works perfectly on its own with its own top-level menu.

When another AVAR Tools plugin (such as AVAR Media Optimizer) is also active, they
automatically share a single ”AVAR Tools” admin menu with a common dashboard, so
related tools live together instead of scattering across wp-admin. All existing 
page URLs stay the same either way.

#### Privacy-first approach

AVAR Server Monitor is not an external monitoring SaaS platform.

Most features run locally inside your WordPress installation. The plugin does not
require an AVAR cloud account and does not send local health reports, diagnostic
snapshots or server data to AVAR servers.

Some features may connect to public external services only when needed, such as 
the WordPress.org API for checksums and version information, or geolocation providers
for server location lookup.

#### Built for safety

Because monitoring and diagnostics can touch sensitive areas, AVAR Server Monitor
includes a dedicated Advanced Tools safety model.

Higher-risk tools are locked by default and require explicit activation.

Advanced Tools include features such as:

 * Diagnostic snapshots.
 * Full phpinfo().
 * wp-config.php debug switches.
 * Cron run/unschedule actions.
 * Database cleanup.
 * Table optimization.
 * Force HTTPS.
 * HSTS.
 * Selected exports and filesystem operations.

Sensitive actions use capability checks, nonces, confirmations, safety warnings 
and safer defaults where appropriate.

#### Safer HTTPS and HSTS handling

Force HTTPS and HSTS are not simple checkboxes.

They are enabled through protected safety flows with pre-flight checks, host validation
and typed confirmation for HSTS includeSubDomains.

This reduces the risk of locking yourself out of the site or accidentally applying
strict HSTS rules to subdomains that are not ready for HTTPS.

#### Database cleanup with preview

Database cleanup can be useful, but it should never feel like a blind ”delete everything”
button.

AVAR Server Monitor analyzes cleanup candidates first and shows what can be removed,
the risk level and the likely impact.

Riskier actions require typed confirmation. Revision cleanup supports retention 
rules. WooCommerce content in Trash is detected and order-like records are excluded
unless explicitly selected.

The plugin uses WordPress APIs where appropriate, such as when deleting posts and
comments, so other plugins and WordPress hooks can respond correctly.

#### Diagnostic snapshots

Diagnostic snapshots are designed for troubleshooting, support and quick technical
review.

They use private storage by default when possible, long random archive names, self-
healing protection files, public-access checks and safer file exclusions.

Snapshots are a diagnostic aid, not a replacement for a full disaster recovery backup
strategy. For complete recovery protection, use hosting-level backups or a dedicated
backup plugin.

#### Who is AVAR Server Monitor for?

AVAR Server Monitor is useful for:

 * WordPress administrators who want a clear technical overview.
 * Freelancers maintaining client websites.
 * Small agencies managing business sites.
 * WooCommerce store owners who want to catch technical risks early.
 * Website owners who want monitoring without an external SaaS account.
 * Developers who need quick diagnostics inside wp-admin.
 * Support teams that need safe technical reports from clients.

#### What makes it different?

Many tools focus on only one area: uptime, backups, security, debugging, logs or
server information.

AVAR Server Monitor focuses on the practical day-to-day question most WordPress 
administrators have:

”Is this site technically healthy, and what should I check first?”

It combines health scoring, monitoring, security checks, cron visibility, diagnostics,
reports and safer maintenance tools into one privacy-first WordPress dashboard.

#### Typical use cases

Use AVAR Server Monitor to:

 * Check whether your site is currently healthy.
 * Monitor uptime and SSL status.
 * See if WP-Cron is running correctly.
 * Review PHP, database and server environment health.
 * Detect security configuration issues.
 * Track important plugin/theme/update activity.
 * Find repeated 404 requests.
 * Export a safe client or support report.
 * Review database cleanup candidates before deleting anything.
 * Create a diagnostic snapshot for troubleshooting.
 * Understand which issues deserve attention first.

#### Important note

AVAR Server Monitor provides monitoring, diagnostics and safety-focused maintenance
tools. Some Advanced Tools can change configuration, delete data or access sensitive
diagnostic information.

Read warnings carefully, keep regular backups and test higher-risk actions on staging
sites whenever possible.

### External services

AVAR Server Monitor connects to the services below only for the features named, 
and only when they are in use. It does not send data to AVAR.

 * WordPress.org API (api.wordpress.org): core file checksums and the connection
   check on the Health Advisor tab. The request includes the WordPress version and
   locale. Privacy policy: https://wordpress.org/about/privacy/
 * Cloudflare (server location, only if you select the Cloudflare provider): the
   plugin requests https://www.cloudflare.com/cdn-cgi/trace, and Cloudflare receives
   the server’s IP address. Terms: https://www.cloudflare.com/website-terms/ Privacy
   policy: https://www.cloudflare.com/privacypolicy/
 * ip-api.com (server location, only if you select it): the server’s IP address 
   is sent to ip-api.com. Terms and privacy: https://ip-api.com/docs/legal
 * MaxMind GeoLite (server location, only if you select it and enter your own MaxMind
   license key): the server’s IP address is sent to geolite.info. Terms: https://
   www.maxmind.com/en/geolite2/eula Privacy policy: https://www.maxmind.com/en/privacy-
   policy
 * Cloudflare Turnstile (login CAPTCHA, only if you choose it): the login page loads
   the Turnstile script from challenges.cloudflare.com, and the challenge token 
   and the visitor’s IP address are sent to Cloudflare for verification. Terms: 
   https://www.cloudflare.com/website-terms/ Privacy policy: https://www.cloudflare.
   com/turnstile-privacy-policy/
 * Google reCAPTCHA (login CAPTCHA, only if you choose it): the login page loads
   the reCAPTCHA script from www.google.com, and the challenge token and the visitor’s
   IP address are sent to Google for verification. Terms: https://policies.google.
   com/terms Privacy policy: https://policies.google.com/privacy
 * hCaptcha (login CAPTCHA, only if you choose it): the login page loads the hCaptcha
   script from js.hcaptcha.com, and the challenge token and the visitor’s IP address
   are sent to hCaptcha for verification. Terms: https://www.hcaptcha.com/terms 
   Privacy policy: https://www.hcaptcha.com/privacy
 * Your own addresses: the uptime monitor requests the site addresses you add on
   the Uptime tab, and the external heartbeat (only if you enable it) requests the
   URL you enter, for example on healthchecks.io, Cronitor or Uptime Kuma. The heartbeat
   request contains no site data.

The default location provider (Anonymous) and the default CAPTCHA (a self-hosted
math question) use no external service. The plugin does not require an AVAR account
and does not send diagnostic snapshots or health reports to AVAR servers.

## Kuvankaappaukset

[⌊Overview dashboard with the Site Health Score, top issues, environment cards and
key server/resource status.⌉⌊Overview dashboard with the Site Health Score, top 
issues, environment cards and key server/resource status.⌉[

Overview dashboard with the Site Health Score, top issues, environment cards and
key server/resource status.

[⌊System Resources with live CPU load, memory usage, database size, disk usage, 
history graphs and storage growth.⌉⌊System Resources with live CPU load, memory 
usage, database size, disk usage, history graphs and storage growth.⌉[

System Resources with live CPU load, memory usage, database size, disk usage, history
graphs and storage growth.

[⌊Alert Center: one place for downtime, SSL expiry, Health Score drops, stalled 
cron, integrity, PHP fatals and disk alerts, plus the external heartbeat.⌉⌊Alert
Center: one place for downtime, SSL expiry, Health Score drops, stalled cron, integrity,
PHP fatals and disk alerts, plus the external heartbeat.⌉[

Alert Center: one place for downtime, SSL expiry, Health Score drops, stalled cron,
integrity, PHP fatals and disk alerts, plus the external heartbeat.

[⌊Security screen with the HTTPS/HSTS safety flow, login/API hardening, SSL certificate
status, configuration audit and core file integrity.⌉⌊Security screen with the HTTPS/
HSTS safety flow, login/API hardening, SSL certificate status, configuration audit
and core file integrity.⌉[

Security screen with the HTTPS/HSTS safety flow, login/API hardening, SSL certificate
status, configuration audit and core file integrity.

[⌊Login Security with brute-force protection, per-IP attempt statistics, active 
lockouts, allow/block lists, custom login URL and CAPTCHA.⌉⌊Login Security with 
brute-force protection, per-IP attempt statistics, active lockouts, allow/block 
lists, custom login URL and CAPTCHA.⌉[

Login Security with brute-force protection, per-IP attempt statistics, active lockouts,
allow/block lists, custom login URL and CAPTCHA.

## Asennus

 1. Upload the plugin folder to `/wp-content/plugins/avar-server-monitor/`, or install
    the plugin through the WordPress admin area.
 2. Activate the plugin from the Plugins screen.
 3. Open AVAR Server Monitor from the left admin menu.
 4. Review the Overview dashboard and Site Health Score.
 5. Enable uptime monitoring, email alerts or Advanced Tools as needed.
 6. Read the warnings carefully before using sensitive tools.

## UKK

### Do I need an external account or SaaS service?

No. The plugin is designed to work directly inside WordPress. Most features run 
locally inside wp-admin.

### Does the plugin send data to an AVAR server?

No. The plugin does not require an AVAR SaaS account and does not send local diagnostic
data to an AVAR server.

### Does the plugin use external services?

Yes, some features may use public external services. For example, the WordPress.
org API may be used for checksums, plugin/theme/core information, and geolocation
providers may be used for server location lookup. These services are documented 
by the plugin.

### Is the plugin suitable for beginners?

Yes. Basic monitoring and the Site Health Score are designed to be useful for regular
WordPress administrators. Higher-risk tools are separated into Advanced Tools and
include additional warnings.

### Can the plugin break my site?

Regular monitoring and diagnostic features are read-only or low risk. Some Advanced
Tools can change configuration, delete data or work with files. These actions are
protected with confirmations, nonces, capability checks and safety warnings.

### Are database cleanup tools safe?

The plugin uses WordPress APIs where appropriate, such as when deleting posts and
comments. Cleanup is preview-first, risky items are not selected by default and 
permanent deletion requires typed confirmation.

However, these are still irreversible operations. We recommend having a current 
backup before running database cleanup.

### Does the plugin delete WooCommerce data?

The plugin detects WooCommerce content in Trash during database cleanup and shows
special warnings. Order-like records such as orders, refunds and subscriptions are
excluded unless explicitly selected by the user.

### Are snapshots a replacement for a full backup solution?

No. Diagnostic snapshots are intended for troubleshooting and analysis. For full
disaster recovery, use hosting backups or a dedicated backup plugin.

### Where are snapshots stored?

The plugin uses private storage outside the web root by default when available. 
If private storage is not writable, it may use an uploads fallback with best-effort
protection.

### Why is HSTS protected through Advanced Tools?

HSTS can cause problems if misconfigured, especially when includeSubDomains is used
and not all subdomains support HTTPS. For this reason, HSTS activation uses a dedicated
safety flow and typed confirmation.

### Does the plugin work on multisite?

Yes. The plugin includes basic multisite support and a network overview. Some features
may be limited by network configuration and permissions.

### Does the plugin slow down the site?

The plugin is designed to minimize performance impact. Admin assets are loaded only
where needed. 404 logging includes throttling and static asset ignores. Resource
history and uptime monitoring use scheduled tasks and limits.

Some manual diagnostic actions, such as size scans, database cleanup or table optimization,
may be heavier on large sites.

### How do I get support, report a bug or suggest a feature?

The best place is the plugin support forum on WordPress.org at https://wordpress.
org/support/plugin/avar-server-monitor/. Post your question, bug report or feature
suggestion there — replies are public, so they also help other users. You can also
contact the author by email at support@avar.sk or through the plugin website at 
https://www.avar.sk/en/plugins/avar-server-monitor/.

## Arvostelut

There are no reviews for this plugin.

## Avustajat & Kehittäjät

“AVAR Server Monitor” perustuu avoimeen lähdekoodiin. Seuraavat henkilöt ovat osallistuneet
tämän lisäosan kehittämiseen.

Avustajat

 *   [ AVAR Solutions ](https://profiles.wordpress.org/pluptak/)

“AVAR Server Monitor” has been translated into 6 locales. Kiitoksia [kääntäjille](https://translate.wordpress.org/projects/wp-plugins/avar-server-monitor/contributors)
heidän työstään.

[Käännä “AVAR Server Monitor” omalle kielellesi.](https://translate.wordpress.org/projects/wp-plugins/avar-server-monitor)

### Oletko kiinnostunut kehitystyöstä?

[Browse the code](https://plugins.trac.wordpress.org/browser/avar-server-monitor/),
check out the [SVN repository](https://plugins.svn.wordpress.org/avar-server-monitor/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/avar-server-monitor/)
by [RSS](https://plugins.trac.wordpress.org/log/avar-server-monitor/?limit=100&mode=stop_on_copy&format=rss).

## Muutosloki

#### 1.12.1

 * New: the plugin runs in WordPress Playground, so it can be tried in the Live 
   Preview on WordPress.org.
 * New: filters for the CPU load, memory usage and largest database tables (avar_sm_cpu_load_percent,
   avar_sm_memory_usage, avar_sm_top_tables), like the existing disk filter.
 * Fixed: the Health Score trend on the Overview, the error trends on the Debugging
   tab and the response-time trend on the Uptime tab showed no chart.
 * Fixed: a site on SQLite (the SQLite Database Integration plugin) is no longer
   reported as running MySQL 8.0 past its end of life. Its database size is the 
   size of the database file.
 * Fixed: the PHP version is recorded when PHP reports the command-line SAPI for
   web requests, as in WordPress Playground.
 * Changed: the Tools tab says so when the database does not report table sizes,
   instead of listing every table as 0 B.

#### 1.12.0

 * New: an alert when your PHP or database version reaches its end of life.
 * Changed: the Health Score, the Overview, WordPress Site Health and the alerts
   now always agree. Each check is decided in one place, so a database past its 
   end of life can no longer show as Critical on one screen and score 100 on another.
 * Changed: PHP and database versions are judged by their official end-of-life dates.
   The last six months before the end of life are a note, past it is a warning, 
   and more than a year past it is critical.
 * Changed: the Alerts switch turns off every alert e-mail, including downtime, 
   resource and lockout e-mails. The digest and change notices keep their own switches.
 * Changed: on a new installation the dashboard widget is on, with live CPU, memory
   and database size. Sites updated from an earlier version keep their setting.
 * Fixed: pending updates are counted the same in e-mails and scheduled checks as
   on screen.
 * Fixed: SSL, HTTPS, disk space, core files, backups, uptime and cron each follow
   one rule on every screen and in every alert.
 * Fixed: a core file removed on purpose, such as readme.html, is no longer reported
   as missing.
 * Fixed: the core file check no longer reports wp-includes/version.php as modified
   when the site language differs from the installed WordPress package.
 * Fixed: when WP-Cron runs from a server crontab, the checks use the PHP version
   and settings of the website, not those of the command line.
 * Fixed: snapshots left in an earlier storage location are still checked, listed
   and can be deleted.

#### 1.11.2

 * New: the 404 list shows the likely source of each address, such as a bot, a search
   engine or another website.
 * Fixed: the Health Score warned that e-mail alerts were not configured even when
   they were on.
 * Fixed: 404s caused by bots no longer lower the Health Score. Only broken links
   on your own site do.
 * Fixed: the 404 log keeps recording new addresses when it is full.

#### 1.11.1

 * Changed: translations are no longer bundled with the plugin. They are installed
   as language packs from translate.wordpress.org, which also makes the download
   smaller.

#### 1.11.0

 * New: PHP fatal errors are graded by the context they ran in. A crash that broke
   a real request is still critical; a direct request to a file WordPress never 
   serves is logged without an e-mail.
 * New: optional suggestions for other free AVAR plugins on the Overview tab, shown
   only when no other AVAR plugin is installed. They can be dismissed or switched
   off on the Display tab.
 * Security: on multisite, the server-modifying tools require a network administrator.
 * Security: on multisite, a backup contains only the tables of the site it was 
   started from.
 * Security: the wp-config.php recovery copy is no longer served as readable text.
 * Security: a spoofed X-Forwarded-For header no longer disables login protection.
 * Security: the crash-context buffer is stored at an unpredictable path, and uninstall
   removes it together with the wp-config.php copies.
 * Security: Clear Log requires the Advanced Tools switch.
 * Fixed: closing an old incident no longer sends a ”has not recurred” e-mail. Only
   a real 24-hour silence is announced.
 * Fixed: the ”has not recurred” e-mail names the error and the date it was first
   reported.
 * Fixed: errors written to a shared log by other sites are no longer counted as
   yours.
 * Fixed: every distinct fatal error in a batch is reported, not only the last one.
 * Fixed: fatal error alerts are written in plain language and mask server paths,
   so they can be forwarded to a host.
 * Fixed: on multisite, uninstalling the plugin on one site no longer deletes another
   site’s backups.
 * Fixed: a backup whose archive could not be written reports the failure instead
   of listing a snapshot that does not exist.
 * Fixed: the readme.html fix moves the file out of the web root, and Force HTTPS
   no longer reverts a change the plugin did not make.
 * Fixed: the Debugging screen no longer overwrites a WP_DEBUG_LOG path or writes
   constants you did not change.
 * Fixed: unticking every Email Alerts type is saved as no types, instead of re-
   enabling all three.
 * Fixed: database size and autoloaded-option figures work again on WordPress 6.6
   and newer.
 * Fixed: the bundled translations are loaded, and the wp-admin menu entry is translatable.
 * Fixed: maintenance mode switches itself off once the launch date has passed.
 * Fixed: the login lockout table has a size limit, and a failed log-table creation
   is retried.
 * Fixed: no false Critical for WP_DEBUG_DISPLAY on sites that are not in debug 
   mode.
 * Fixed: several settings were registered twice and could reset one another on 
   save.
 * Note: some fatal error notifications are no longer sent, and a fatal error whose
   impact cannot be determined is reported as a warning. If your Alerts minimum 
   severity is ”Critical only”, switch it to ”Warning and above”.

#### 1.10.1

 * Changed: the ”WP-Cron is stalled / overdue” alert is off by default on new installations.
   WP-Cron only runs when the site is visited, so low-traffic sites often look stalled.
   You can enable it under Monitoring, Alerts.
 * Fixed: an alert type that was turned off could still send its ”resolved” e-mail.
   Resolution e-mails now respect the alert types and are sent only when the opening
   alert was e-mailed.

#### 1.10.0

 * New: the Alert Center collects downtime, SSL expiry, Health Score drops, stalled
   WP-Cron, core integrity failures, new PHP fatal errors and a filling disk in 
   one incident timeline, with optional e-mail (minimum severity filter) and automatic
   diagnostic snapshots on critical events. All notifications are configured on 
   one Alerts tab.
 * New: an external heartbeat pings a URL you control (for example healthchecks.
   io, Cronitor or Uptime Kuma), so a full outage is detected even when the site
   itself cannot report it.
 * New: PHP error monitoring with fatal and warning trends, and an alert when a 
   new fatal error appears.
 * New: Health Score history and response-time trends for each domain.
 * New: storage growth monitoring with a disk-full projection.
 * New: a customizable maintenance page with a solid colour, gradient or background
   image, a custom text colour and a logo.
 * New: Slovak translation.

#### 1.8.0

 * Removed: two-factor authentication (2FA). Account protection is now part of the
   separate AVAR Security plugin. AVAR Server Monitor keeps its Login Security tools(
   brute-force protection, CAPTCHA, custom login URL). No account is locked out;
   sign-in simply no longer asks for a second factor. If you use 2FA, install AVAR
   Security.
 * New: AVAR Tools family integration. When another AVAR Tools plugin is active,
   they share one ”AVAR Tools” admin menu and a common dashboard. On its own, AVAR
   Server Monitor keeps its top-level menu. All page URLs are unchanged.
 * Changed: redesigned admin interface, a new plugin icon and a customizable shared
   dashboard with the Site Health Score and its categories.

#### 1.7.0

 * New: Login Security module with brute-force protection, escalating lockouts (
   up to 24 hours), an IP allowlist and blocklist (CIDR and wildcards), and manual
   blocking and unblocking.
 * New: a login attempt log for each IP address, with statistics for failed attempts,
   incidents, lockouts and successful sign-ins, plus the most active IPs and most
   targeted usernames.
 * New: login CAPTCHA on the login, registration and lost-password forms. A self-
   hosted math question with a honeypot by default, or Cloudflare Turnstile, Google
   reCAPTCHA v2 or hCaptcha with your own keys.
 * New: optional custom login URL that serves the login page from a secret address
   and returns 404 for wp-login.php.
 * New: optional e-mail alerts when a lockout is triggered or an administrator signs
   in, and automatic log pruning after a configurable period.

#### 1.6.0

 * New: a weighted Site Health Score with Core, Server, Security, Reliability and
   Performance categories, severity caps, top issues, recommendations and action
   links.
 * New: Safe Client Health Report and improved system exports for support and diagnostics.
 * Changed: safer Advanced Tools for sensitive actions such as diagnostic snapshots,
   full phpinfo(), wp-config debug switches, cron management, database cleanup, 
   table optimization and one-click security fixes.
 * Changed: Force HTTPS and HSTS with capability checks, nonces, HTTPS pre-flight
   checks, host validation and typed confirmation for HSTS includeSubDomains.
 * Changed: diagnostic snapshots use private storage by default, long random archive
   names, self-healing directory protection, public-access checks and safer file
   exclusions.
 * Changed: database cleanup with a preview, risk labels, impact descriptions, batch
   processing, WordPress API deletion for posts and comments, and typed confirmation
   for risky actions.
 * Changed: revision cleanup with retention options and safer WooCommerce handling,
   including warnings for store content and an explicit opt-in for order-like records.
 * Changed: table optimization targets only the current WordPress table prefix by
   default, with an opt-in for all tables and clearer performance warnings.
 * Changed: cron tools run and unschedule a single event by hook, timestamp and 
   arguments, and protect critical hooks.
 * Changed: wp-config.php edits use timestamped backups and atomic writes, keep 
   file permissions where possible and stop when a backup cannot be created.
 * Changed: REST API restriction with an allowlist, and login-attempt limiting by
   IP and username with trusted proxy and CDN header support.
 * Changed: 404 logging, error-log handling and phpinfo access with less performance
   impact and better protection of diagnostic information.
 * Changed: Health Score signals for downtime, SSL expiry and unchecked states, 
   backup exposure, debug log size and critical score caps.
 * Changed: admin navigation across Overview, Monitoring, System, Security, Tools
   and Settings.
 * Changed: uninstall options for plugin-created files such as diagnostic snapshots
   and wp-config and readme backups.
 * Fixed: several HTML, SVG, cleanup, filesystem and directory-scan issues.

#### 1.5.11

 * Added plugin screenshots and aligned the screenshot captions. No functional changes.

#### 1.5.10

 * Initial public release on WordPress.org.
 * WordPress health, server monitoring, uptime checks, resource history, environment
   details and server location overview.
 * Security audit tools, SSL checks, cron monitoring, activity logging, 404 monitoring
   and e-mail alerts.
 * Diagnostic tools including snapshots, database cleanup, table optimization, PHP
   diagnostics, maintenance mode and system exports.

## Metatiedot

 *  Version **1.12.1**
 *  Last updated **2 viikkoa sitten**
 *  Active installations **10+**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.1.3**
 *  PHP version ** 7.4 or higher **
 *  Languages
 * [Czech](https://cs.wordpress.org/plugins/avar-server-monitor/), [Dutch](https://nl.wordpress.org/plugins/avar-server-monitor/),
   [English (US)](https://wordpress.org/plugins/avar-server-monitor/), [Russian](https://ru.wordpress.org/plugins/avar-server-monitor/),
   [Slovak](https://sk.wordpress.org/plugins/avar-server-monitor/), [Spanish (Chile)](https://cl.wordpress.org/plugins/avar-server-monitor/)
   ja [Spanish (Spain)](https://es.wordpress.org/plugins/avar-server-monitor/).
 *  [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/avar-server-monitor)
 * Tags
 * [monitoring](https://fi.wordpress.org/plugins/tags/monitoring/)[security](https://fi.wordpress.org/plugins/tags/security/)
   [server](https://fi.wordpress.org/plugins/tags/server/)[site health](https://fi.wordpress.org/plugins/tags/site-health/)
   [uptime](https://fi.wordpress.org/plugins/tags/uptime/)
 *  [Edistynyt näkymä](https://fi.wordpress.org/plugins/avar-server-monitor/advanced/)

## Arvosanat

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/avar-server-monitor/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/avar-server-monitor/reviews/)

## Avustajat

 *   [ AVAR Solutions ](https://profiles.wordpress.org/pluptak/)

## Tuki

Onko sinulla jotain sanottavaa? Tarvitsetko apua?

 [Tukifoorumi](https://wordpress.org/support/plugin/avar-server-monitor/)