WordPress health and POPIA-aware audit plugin

WordPress plugin PHP REST API vanilla JS custom DB schema license server
~/work/wp-health $ cat README.md
product: SiteLens
type: WordPress plugin
version: 0.1.0
status: staging / wp.org prep in progress
angle: POPIA compliance, SA market

The problem

SA-based WordPress site owners had no affordable, locally-aware audit tool. Existing tools (US-built, all of them) flag the standard checks: security, performance, SEO, accessibility. None of them know what POPIA is.

POPIA (Protection of Personal Information Act) is South Africa's data privacy law. If your WP site collects personal data from SA residents, you have obligations under it. No existing plugin audit tool checks for any of them.

The approach

Build it as a real WP plugin, not a hosted report tool. On-site analysis only. Results stored in a custom WP table. Four free axes run without a license. Three Pro axes behind a license gate.

wp.org distribution from day one. No SaaS overhead, no monthly subscription for the basic tier.

Audit axes

sitelens/ free-tier/ security/ SSL, file permissions, login URL, xmlrpc performance/ Core Web Vitals, image optimisation, caching headers seo/ meta, OG tags, sitemap, robots.txt, hreflang accessibility/ alt text coverage, heading hierarchy, contrast (basic) pro-tier/ [license required] popia/ cookie consent, privacy policy check, form data handling, third-party script disclosure advanced-seo/ structured data, canonical audit, internal link depth uptime/ scheduled checks, change detection, alerting

Each free axis runs on-site via WP cron or manual trigger. Results stored in a custom table with timestamps. Historical comparison shows what changed between runs.

Technical implementation

architecture

Plugin, not SaaS

Installs directly to WP. No outbound API call for the free tier. Your data stays on your server.

data

Custom DB table

Results stored in a wpdb table with run history. Not post meta, not options. Queryable, migratable.

api

REST API endpoints

WP REST API for the JS frontend. Nonce-authenticated. Results fetchable without page reload.

licensing

License gate

License server for Pro tier activation. One-time license key, no recurring auth calls for free checks.

POPIA wedge

The differentiation from US-built competitors is the POPIA axis. SA site owners collecting personal data (contact forms, WooCommerce orders, newsletter signups) have specific obligations. SiteLens checks the practical ones: cookie consent mechanism, privacy policy presence and link placement, third-party script disclosure, form data handling indicators.

It's not a legal opinion. It's a checklist. But it's a checklist no other WP plugin audit tool provides for the SA market.

Status

~/sitelens $ git log --oneline -5
53 commits on main
0.1.0 tagged
staging: live
wp.org: submission prep in progress
pro tier: license server built

SiteLens 0.1.0 is on staging. wp.org submission pipeline prepared (readme.txt, screenshots, tag structure). Pro tier license server is built. POPIA axis is the primary differentiator for SA SMB market.

> back to all work    > start your project