Compliance reports for WordPress
Five report types generated from your real security data (including GDPR and security audit reports), plus a compliance dashboard covering GDPR, PCI DSS, HIPAA and SOC 2.
What it does
When an auditor, a client or a regulator asks "show me", assembling evidence by hand out of raw logs costs days. The report service turns your logged security data into structured reports: a GDPR compliance report, a security audit report, login and user activity reports, and a compliance summary.
The compliance dashboard scores your configuration against four frameworks (GDPR, PCI DSS, HIPAA and SOC 2), checking whether the relevant protections are switched on. It is a posture snapshot, not an audit.
How it works
Pick a report type, a date range and optionally a specific user. The security audit report, for example, pulls real lockouts, security-plugin deactivations, suspicious file events and critical option changes from your logs, and appends generated recommendations. Because reports come from the activity log, the story they tell is your site's actual history, consistent with what the plugin promised: no invented numbers.
- GDPR compliance report
- Security audit report with recommendations
- Login activity and user activity reports
- Compliance summary report
- Date-range and per-user scoping; exportable output
Compliance report questions
Does this make my site GDPR / PCI / HIPAA compliant?
No tool can claim that honestly. What it does is generate the evidence and posture tracking those frameworks require: the operational record that compliance work is built on.
Where does the report data come from?
From your own activity log and security events, stored in your own database. Reports describe what actually happened on your site.
Related features
Secure your site today
Install the free plugin from WordPress.org and set up real protection with the guided setup wizard. Upgrade to Pro whenever you need more.