Vulnz Agent

A WordPress plugin that syncs your site's plugin inventory to the Vulnz vulnerability management platform for security monitoring.

Features

• Automated Sync — hourly background sync of installed plugins via WP-Cron
• On-Demand Sync — manual "Sync Now" button for immediate updates
• Vulnerability Dashboard — view plugins with known vulnerabilities in the WordPress admin
• Flexible Configuration — admin UI settings or wp-config.php constants for mu-plugin deployments
• Privacy-Focused — only plugin metadata is transmitted; no personal data

Quick Start

1. Download the latest release and install in WordPress
2. Activate and go to Vulnz Agent > Settings
3. Enter your API key from vulnz.net and enable the connection

Documentation

• Installation — regular plugin and mu-plugin deployment
• Configuration — admin settings and wp-config.php constants
• API Integration — sync behaviour, data transmitted, and security
• GitHub Auto-Updates — how auto-updates work, caching, and how to disable

External Service & Privacy

This plugin communicates with the Vulnz API at https://api.vulnz.net to sync your site's data for vulnerability monitoring. An API key from vulnz.net is required.

Data transmitted: site title, domain, WordPress version, PHP version, database server type/version, SSL status, admin login URL, and installed plugins (slug and version only).

Not transmitted: no personal data, user accounts, site content, or credentials.

See API Integration for full details.

Links

• Vulnz Platform: vulnz.net
• Self-Hosted: github.com/headwalluk/vulnz
• Issues: github.com/headwalluk/vulnz-agent/issues
• Changelog: CHANGELOG.md

License

GPL v2 or later. See LICENSE.

Author

Paul Faulkner — Headwall Hosting