Accelvia Uptime Monitor vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Accelvia Uptime Monitor turns your WordPress installation into a self-hosted website monitoring system. Instead of relying on external SaaS platforms, this plugin uses your local WordPress database to store uptime logs and performance metrics directly on your server. The plugin features a Dual-Layer Architecture: WordPress handles local analytics (HTML parsing, SSL certificate inspection), and optionally synchronizes with an external Edge Network. If your WordPress server goes offline, the external “Deadman’s Switch” detects the failure and sends alerts independently. Key Features Dual-Layer Monitoring: The plugin monitors your site locally via WordPress cron. Optionally, an external Edge Fallback (Deadman’s Switch) can detect total server failures and send alerts even when your WordPress installation is unreachable. Self-Hosted Data Storage: All historical analytics, ping logs, and configuration data are stored in your own WordPress database. No external accounts or subscriptions are required for core monitoring. SSL Certificate Tracking: During each monitoring cycle, the plugin inspects the SSL/TLS certificate of your site and calculates the remaining days until expiration. It sends warning alerts at 7 days, 3 days, and 1 day before expiry. Defacement and Crash Detection: You can configure a “Master Keyword” that must be present in your site’s HTML output. If the keyword is missing (indicating a white screen, database error, or content tampering), the plugin marks the site as down. Multi-Channel Alerting: Route alerts and periodic summary reports to Email, Slack, Discord, Telegram, and WhatsApp simultaneously. All channels are configured from the plugin settings page. Additional Capabilities Edge Fallback (Deadman’s Switch): An optional external cloud service that continuously polls your site. If WordPress becomes completely unreachable, the external service sends alerts on your behalf. SSL Expiry Countdown: Automatically dispatches alerts at 7-day, 3-day, and 1-day intervals before your SSL certificate expires. Keyword-Based Content Verification: Verifies that specific content exists in your page’s HTML source, catching silent failures that return HTTP 200 but serve broken content. Local Analytics Logging: Stores all monitoring data in your WordPress MySQL database with configurable retention periods. PageSpeed Insights Integration: Queries Google’s PageSpeed Insights API daily to track Desktop and Mobile performance scores over time. Configuration: Server-Side Cron By default, WordPress relies on “simulated cron” (WP-Cron), which only fires when a user visits your website. If your site receives low traffic, your uptime checks may be delayed. For accurate monitoring intervals, consider disabling default WP-Cron and setting up a server-side cron job (via cPanel or your hosting dashboard) to execute wp-cron.php every 5 minutes. This ensures the monitoring engine executes on schedule regardless of website traffic. External Services This plugin connects to the following third-party and external services. Each service is used only when the corresponding feature is enabled and configured by the site administrator. Accelvia API Proxy (Edge Fallback / Deadman’s Switch) When the “Edge Fallback” feature is enabled in Settings, the plugin sends your monitored URLs, site identifier hash, and configured alert channel credentials to an external proxy service hosted on Vercel. This proxy independently pings your site and sends alerts if your WordPress server becomes completely unreachable. Service URL: https://accelvia-api-proxy.vercel.app Data sent: Monitored URLs, a hashed site identifier, and alert channel configuration (webhook URLs, API tokens). When sent: Each time settings are saved with Edge Fallback enabled, and during scheduled sync cycles. Service provider: Accelvia (hosted on Vercel) Vercel Terms of Service: https://vercel.com/legal/terms Vercel Privacy Policy: https://vercel.com/legal/privacy-policy Telegram Bot API When a Telegram Bot Token and Chat ID are configured in Settings, the plugin sends alert messages and periodic reports to the Telegram Bot API. Service URL: https://api.telegram.org Data sent: Alert text content (site name, status, error details) and the configured Chat ID. When sent: On status changes (up/down), SSL expiry warnings, and scheduled periodic reports (if Telegram channel is selected). Service provider: Telegram FZ-LLC Telegram Terms of Service: https://telegram.org/tos Telegram Privacy Policy: https://telegram.org/privacy CallMeBot WhatsApp API When a WhatsApp phone number and CallMeBot API key are configured in Settings, the plugin sends alert messages via the CallMeBot free API service. Service URL: https://api.callmebot.com Data sent: Alert text content, the configured phone number, and CallMeBot API key. When sent: On status changes (up/down), SSL expiry warnings, and scheduled periodic reports (if WhatsApp channel is selected). Service provider: CallMeBot CallMeBot Website / Info: https://www.callmebot.com CallMeBot Privacy Info: https://www.callmebot.com/privacy-policy/ Google PageSpeed Insights API The plugin queries Google’s PageSpeed Insights API once daily to retrieve Desktop and Mobile performance scores for each monitored URL. Service URL: https://www.googleapis.com/pagespeedonline/v5/runPagespeed Data sent: The monitored URL and optionally a user-provided API key. When sent: Once daily via WordPress scheduled cron, and on manual sync. Service provider: Google LLC Google Terms of Service: https://policies.google.com/terms Google Privacy Policy: https://policies.google.com/privacy Domain Registration Expiry Check (RDAP Protocol) The plugin’s daily security scan checks the domain registration expiration date of each monitored site using RDAP (Registration Data Access Protocol), the official successor to WHOIS as designated by ICANN. RDAP queries are sent directly to the authoritative domain registry for each supported TLD. Data sent: The domain name of each monitored URL. When sent: Once daily during the scheduled security scan. Supported TLDs and their authoritative RDAP servers: .com / .net domains are queried via Verisign (https://rdap.verisign.com) .org domains are queried via Public Interest Registry / PIR (https://rdap.publicinterestregistry.org) Protocol specification: RDAP is an IETF/ICANN standard (RFC 9082, RFC 9083). ICANN RDAP Information: https://www.icann.org/rdap Verisign Terms of Service: https://www.verisign.com/en_US/terms-of-service/index.xhtml Verisign Privacy Policy: https://www.verisign.com/en_US/privacy/index.xhtml PIR (Public Interest Registry) Policies: https://thenew.org/org-people/about-pir/policies/ Discord and Slack Webhooks When Discord or Slack webhook URLs are configured in Settings, the plugin posts alert messages and periodic reports to those webhook endpoints. The webhook URLs are user-provided and point to the user’s own Discord server or Slack workspace. Data sent: Alert and report text content (site name, status, uptime percentage, response times). When sent: On status changes (up/down), SSL expiry warnings, and scheduled periodic reports (if the respective channel is selected). Discord Terms of Service: https://discord.com/terms Discord Privacy Policy: https://discord.com/privacy Slack Terms of Service: https://slack.com/terms-of-service Slack Privacy Policy: https://slack.com/privacy-policy

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!