Monitor your domain security in real time, directly from your WordPress dashboard.
The Vigidomain extension acts as a lightweight monitoring agent connected directly to the secure Vigidomain cybersecurity servers. Designed for administrators who value infrastructure health, it centralizes critical security alerts and metrics.
Technical Specifications
| Feature | Requirement / Details |
| WordPress Version | 6.0 or higher |
| PHP Version | 8.0 or higher |
| License | GPLv2 or later |
| Official Directory | WordPress.org Plugin Repository |
Data Privacy & Security
At Vigidomain, we treat your website’s security and data integrity with the highest level of commitment.
- No Data Reselling: We do not, and will never, sell, rent, or lease your data to any third parties. Your data belongs entirely to you.
- Secure Storage: All data processed by our service is hosted and stored exclusively on our own highly secured servers. We implement industry-standard protocols to guarantee its protection.
- Consent-Driven Collection: Data synchronization only happens with your explicit consent. The plugin will never silently extract or upload information without your authorization or outside of the requested monitoring scope.
- Strictly Technical Data: The information collected is strictly limited to non-sensitive technical data related to your website’s infrastructure (such as domain names and related security alerts) necessary to provide the monitoring service. We never collect, track, or store any personal user data, passwords, or customer information.
External services
This plugin connects to the Vigidomain API (https://web.vigidomaine.fr/) to provide real-time domain security monitoring, alerts, and health tracking for your WordPress site.
Vigidomain is a first-party service operated by the plugin author.
No data is sent until you click “Connect” in the plugin settings and start the setup process. This action is the explicit consent required before complete site information is transmitted.
The external service is used for:
- Registering and linking your WordPress installation to your Vigidomain account
- Checking your Vigidomain account email verification status
- Fetching domain security scores, status, and metrics for the dashboard
- Retrieving and syncing the list of monitored domains
- Retrieving active security alerts
Data sent to the service, by endpoint:
/pre-register — called only after user consent, when the user starts the connection setup. Sends:
- Site home URL and site URL
- Site server IP address (from SERVER_ADDR, or resolved from SERVER_NAME)
- Site name, WordPress version, PHP version, site language, HTTPS status
- Full list of installed plugins: name, version, active status (all plugins, not just active ones)
- Debug status: whether WP_DEBUG and WP_DEBUG_LOG are enabled
- HTTPS usage status
- Available update counts: core, plugin, theme
- Site domain (parsed from the home URL)
- WordPress admin account email, first name, last name, display name (fallback), locale
/register — called when the user submits the registration form. Sends:
- Email, username, and name provided by the user in the form
/setup/email-verification-state — called after login/registration to check account status. Sends:
- Authenticated session token (no additional site data)
/domains/dashboard — called when the dashboard is viewed (cached 2 minutes). Sends:
- Authenticated session token, site domain
/domains/monitored — called when managing monitored domains. Sends:
- Authenticated session token
/domains/monitored/configure — called when the site URL changes or on manual sync. Sends:
- Current site URL, authenticated session token
/alerts/list — called when viewing alerts (cached 2 minutes). Sends:
- Authenticated session token, site domain
No passwords, payment information, or post/page content is transmitted.
All requests are sent over HTTPS.