=== Guardr ===
Contributors: guardr
Tags: security, uptime monitoring, security scanner, site monitoring, misconfigurations
Requires at least: 6.0
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 0.1.3
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Security grade, uptime and misconfiguration monitoring for this site, scanned agentlessly from Cloudflare's edge. Nothing runs on your server.

== Description ==

Guardr connects this site to your Guardr account and shows its security grade, uptime percentage and response time right in wp-admin.

Guardr scans externally, from Cloudflare's edge network, not from an agent installed on your server. There is nothing running on your site beyond this plugin's own wp-admin screens: no background agent, no code injected into your theme or front end, no access to your server's file system or database beyond the two settings this plugin itself stores.

If a scan finds your site down, Guardr confirms the outage across 3 separate global regions before treating it as down, to avoid false positives from a single location's network issue.

This plugin covers one site. If you manage more than one site with Guardr, the full fleet view, including every site on your account, lives on the Guardr dashboard at guardr.io/dashboard - you do not need to install this plugin on every site to get value from Guardr.

= What this plugin does not do (yet) =

* No public "Secured by Guardr" badge - planned for a later release.
* No incident-based email alerting from the plugin itself - handled today through your Guardr account's existing notification settings.
* No MainWP integration - planned as a possible future release.

== Installation ==

1. Install and activate the plugin.
2. Go to Guardr > Setup in the wp-admin menu.
3. Either paste an enrollment token generated from your Guardr dashboard, or paste an existing Guardr API key.
4. Once connected, the Guardr menu shows this site's live grade, uptime and response time.

== Frequently Asked Questions ==

= Does this plugin run anything on my server? =

No. Scanning happens externally, from Cloudflare's edge network. The plugin itself only calls the Guardr API over HTTPS to fetch and display results; it does not scan your site itself.

= Where is my API key stored? =

In this site's own WordPress options table. It is never displayed again in plaintext once setup is complete, the same as the Guardr dashboard's own key handling.

= I manage several sites with Guardr. Do I need to install this on all of them? =

No. The Guardr dashboard already shows every site on your account without any plugin installed. This plugin is for a single site's own wp-admin convenience and for showing that site's manager a live trust signal, not for fleet management.

== Privacy ==

This plugin sends this site's domain name to Guardr's API (api.guardr.io) over HTTPS so it can be scanned and monitored. No page content, no post or user data, no files, and no visitor information ever leaves this site through this plugin.

Every request also includes your Guardr API key (stored in this site's own options table), to authenticate as your account, and a generic identifier of the plugin itself and its version (sent via the standard HTTP User-Agent header, e.g. "Guardr-WordPress-Plugin/0.1.3") so Guardr can tell plugin traffic apart from dashboard or direct API traffic. This plugin explicitly sets that header itself - it does not use WordPress's own default, which would otherwise include this site's URL and WordPress version on every request, including ones that have no other reason to disclose it.

No data from this plugin is sent to any third party other than Guardr itself. See Guardr's privacy policy at guardr.io/privacy and terms of service at guardr.io/terms for how Guardr handles the domain and scan data it receives and the terms governing the underlying Guardr account this plugin connects to.

== Screenshots ==

1. The Guardr dashboard widget displaying the site's grade, uptime and average response time.
2. The Guardr setup screen where the site owner connects using an enrollment token or an API key.
3. The Guardr widget confirming a successful connection immediately after setup completes.
4. The Guardr widget showing a scan in progress after the rescan action is triggered.

== Changelog ==

= 0.1.3 =
* Refreshed plugin and directory icons to the current Guardr mark.

= 0.1.2 =
* Linked the Guardr terms of service alongside the existing privacy policy link.
* Made every admin notice in this plugin explicitly dismissible.
* Reworded the site-limit and stale-data notices to remove any ambiguity about what to do next and to make clear the site limit is the connected Guardr account's own plan limit, not a restriction imposed by this plugin.

= 0.1.1 =
* Removed a non-functional "You manage N sites" banner from the wp-admin widget - it could never display, since a plugin-scoped API key never receives data for more than one site.

= 0.1.0 =
* Initial release: setup wizard (enrollment token or pasted API key), wp-admin monitoring widget, rescan button.

== Upgrade Notice ==

= 0.1.3 =
Refreshed plugin and directory icons to the current Guardr mark. No functional change.

= 0.1.2 =
Notice wording and dismissibility cleanup, ToS link added. No functional change.

= 0.1.1 =
Minor cleanup, no user-facing change.

= 0.1.0 =
Initial release.
