Monitor your domain security in real time, directly from your MainWP dashboard.
The Vigidomain integration in MainWP acts as a lightweight monitoring agent connected directly to the secure Vigidomain cybersecurity servers. Designed for administrators who value infrastructure health, it centralizes critical security alerts and metrics.
Technical Specifications
| Feature | Requirement / Details |
| WordPress Version | 6.0 or higher |
| PHP Version | 8.0 or higher |
| License | GPLv2 or later |
| Official Directory | WordPress.org Plugin Repository |
Data Privacy & Security
At Vigidomain, we treat your website’s security and data integrity with the highest level of commitment.
- No Data Reselling: We do not, and will never, sell, rent, or lease your data to any third parties. Your data belongs entirely to you.
- Secure Storage: All data processed by our service is hosted and stored exclusively on our own highly secured servers. We implement industry-standard protocols to guarantee its protection.
- Consent-Driven Collection: Data synchronization only happens with your explicit consent. The plugin will never silently extract or upload information without your authorization or outside of the requested monitoring scope.
- Strictly Technical Data: The information collected is strictly limited to non-sensitive technical data related to your website’s infrastructure (such as domain names and related security alerts) necessary to provide the monitoring service. We never collect, track, or store any personal user data, passwords, or customer information.
Configuration
The add-on requires a connected Vigidomain account before use. You have two options: Register a new account, or Login with an existing one.
Option A – Register a New Account
- Open the Vigidomain Integration page from your MainWP dashboard menu.
- On Register tab fill your email address and name and submit.
- Check your inbox for a verification email from Vigidomain.
- Once the email validated, return to the add-on. Refresh the page and you will be redirected to your Dashboard.
Option B – Login with an Existing Account
- Open the Vigidomain Integration page from your MainWP dashboard menu.
- Go to Login tab and click “Login”.
- A new browser tab will open, taking you to the Vigidomain login page. Sign in to your vigidomaine account.
- After logging in, you will land on a page displaying a token, copy it.
- Return to the Vigidomain Integration tab, paste the token and submit.
- You will land on your Dashboard.
Usage
The Vigidomain dashboard – showing domain security score, monitoring status, and key metrics at a glance.
The alerts tab – Active security alerts panel with severity levels and details for immediate action.
The settings page – managing your Vigidomain account and monitored websites.
External services
This plugin connects to the Vigidomain API (https://web.vigidomaine.fr/) to provide real-time domain security monitoring, alerts, and health tracking for your WordPress site.
Vigidomain is a first-party service operated by the plugin author.
No data is sent until you click “Connect” in the plugin settings and start the setup process. This action is the explicit consent required before complete site information is transmitted.
The external service is used for:
- Registering and linking your WordPress installation to your Vigidomain account
- Checking your Vigidomain account email verification status
- Fetching domain security scores, status, and metrics for the dashboard
- Retrieving and syncing the list of monitored domains
- Retrieving active security alerts
Data sent to the service, by endpoint:
/pre-register — called only after user consent, when the user starts the connection setup. Sends:
- Site home URL and site URL
- Site server IP address (from SERVER_ADDR, or resolved from SERVER_NAME)
- Site name, WordPress version, PHP version, site language, HTTPS status
- Full list of installed plugins: name, version, active status (all plugins, not just active ones)
- Debug status: whether WP_DEBUG and WP_DEBUG_LOG are enabled
- HTTPS usage status
- Available update counts: core, plugin, theme
- Site domain (parsed from the home URL)
- WordPress admin account email, first name, last name, display name (fallback), locale
/register — called when the user submits the registration form. Sends:
- Email, username, and name provided by the user in the form
/setup/email-verification-state — called after login/registration to check account status. Sends:
- Authenticated session token (no additional site data)
/domains/dashboard — called when the dashboard is viewed (cached 2 minutes). Sends:
- Authenticated session token, site domain
/domains/monitored — called when managing monitored domains. Sends:
- Authenticated session token
/domains/monitored/configure — called when the site URL changes or on manual sync. Sends:
- Current site URL, authenticated session token
/alerts/list — called when viewing alerts (cached 2 minutes). Sends:
- Authenticated session token, site domain
No passwords, payment information, or post/page content is transmitted.
All requests are sent over HTTPS.