Site Snapshot
Capture site posture (WordPress, PHP, plugins, themes, role counts, config flags), keep history, and compare two captures.
What it does
Site Snapshot records a lightweight posture document for the current site: runtime versions, installed plugins/themes, active theme, user role counts (no emails or logins), and a few safe config flags.
It is not a file integrity baseline (that is Integrity), not a malware scanner, and not a cloud product. Snapshots stay on your WordPress database.
How it works
- Open Snapshot in Stalza Security (or use the Dashboard card).
- Click Take snapshot for a manual capture.
- After plugin, theme, or core updates, Free can auto-capture one snapshot per update batch (15-minute cooldown by default; identical posture is skipped for auto only).
- Select two rows → Compare selected to see structured buckets (plugins added/removed/changed, config flips, etc.).
Privacy
- No user emails, usernames, or display names.
- No salts, database credentials, or full
wp-configdumps. - Site host only (
home_host), not full URLs with query tokens.
Settings
Under Settings → Site Snapshot:
| Setting | Default | Meaning |
|---|---|---|
| Enable Site Snapshot | On | Master switch for manual + auto |
| Auto-capture on updates | On | Hook updates |
| Retention | 20 | Max stored snapshots |
| Auto cooldown (minutes) | 15 | Min gap between auto captures |
If Snapshot is disabled, Take snapshot is unavailable and auto-capture no-ops.
Recommended action
Take a snapshot before major plugin updates, then compare after. Use Integrity for file-level changes; use Snapshot for “what versions and config moved.”