← All help articles

WordPress plugin — install and configuration

The companion WordPress plugin adds a NoDowntimeShield settings panel to WP admin and can block risky publishes before they go live. This is the in-CMS plugin — for the outside-in scanner that fingerprints any WordPress site without installing anything, see WordPress scanner.

Quick install

  1. Dashboard → Integrations → WordPress plugin to find your API key.
  2. In WP admin: Plugins → Add New → Upload Plugin, upload the plugin zip, then Activate.
  3. Settings → NoDowntimeShield → paste the API key and asset ID.

What it does

  • Exposes plugin inventory, core version, and active theme to the platform.
  • Sends critical events (plugin installs, core updates, failed logins) as they happen.
  • Scan before publish — a button in the post-publish box that triggers a real scan of your site's public domain.

Go-live readiness gate

When a post or page is published, the plugin fetches current open critical/high findings and, if any exist, shows an admin notice before the post goes out. Configure under Settings → NoDowntimeShield → Publish behaviour:

  • Warn only (default) — publish proceeds, notice shown on next page load.
  • Block publish (opt-in) — post is reverted to Pending until the posture is clean.

The gate is fail-open: if the platform API is unreachable, publishing is never blocked by a connectivity issue.