Logs a hacker can't burn.
Every WordPress activity-log plugin stores its log in the site's own database — when an attacker owns the box, they own the evidence. AuditVault ships security events off-server in real time into a hash-chained, tamper-evident log, with real-time hack alerts. From $9/month.
Why AuditVault
Post-hack forensics is impossible when the logs live on the hacked server. The authoritative copy has to live somewhere the attacker isn't.
Off-server by design
A lightweight collector plugin ships events to our cloud in seconds. The plugin holds no authoritative copy — that's the whole point versus on-server plugins.
Tamper-evident hash chain
Every entry is cryptographically linked to the previous one. Alter anything and the verify endpoint shows exactly where the chain broke.
Real-time hack alerts
New admin users, file modifications, failed-login spikes — fired in seconds via webhook.
Compliance-ready exports
CSV export anytime — built for insurance questionnaires and forensics. Weekly integrity-verification reports are on the roadmap.
Plans from $9/mo
One critical site starts on Single. Freelancers cover their client list on Pro.