EN ES
Get early access

We email you when your site is in danger.

Simple security alerts for WordPress. One clear email when something needs fixing, and silence when it doesn’t.

Coming soon to WordPress. We’ll email you once, on launch day. No spam.

We read Wordfence, Patchstack, CISA (US cyber safety agency), NVD (US national bug database) and BleepingComputer all day, and check every story against your plugins.

Try it. What’s on your site?

Pick one to see the email we would send. These are examples.

Security news is written for experts. We rewrite it for you.

On the left, what the news says. On the right, what we send you.

What the news saysUnauthenticated stored XSS in versions ≤ 4.2.1, CVSS 8.8

What we send you: Someone could put a harmful link on your site. Update by Friday.

What the news saysAdded to CISA KEV catalog. Privilege escalation via unauthenticated REST endpoint, exploited in the wild

What we send you: Attackers are using this to take over sites right now. Update today.

What the news saysPHP 7.4 reached end of life; no further security support from upstream

What we send you: Your site runs an old PHP version that no longer gets security fixes. Ask your host to update it.

One problem, from first report to fixed.

One example from start to finish: a dentist’s site, a booking plugin, three days.

  1. A problem is reported.

    A security researcher reports a hole in a popular booking plugin. Thousands of sites use it. Most owners never see the report.

    Booking plugin flaw lets visitors run code on the siteWordfence, 6:40 am

  2. We check it against your site.

    Your site checks itself against our list. The result: you have that plugin, and your version is affected.

    Plugin
    Booking plugin
    Your version
    5.8.1
    Fixed in
    5.9.2

  3. Other trusted sources agree.

    CISA (the US cyber safety agency) says attackers are already using it. NVD (the US national bug database) lists it. That makes it a “Today” warning.

    • Wordfence
    • CISA
    • NVD
    • BleepingComputer

  4. You get one email.

    What happened, why it matters to you, one button, and when to do it by. No jargon.

    Update your booking plugin todayAttackers are breaking into sites through it. Yours has 5.8.1.

  5. You click Update. We confirm it’s fixed.

    Your site detects the new version and we send one short “Sorted” email.

    SortedYour booking plugin is on 5.9.2. Nothing else needs doing.

Every warning shows its proof.

We only warn you when trusted sources agree. Each email lists who confirmed it and when.

It’s under “Proof” in every email. Click a source to read it directly.

Proof receiptBooking plugin, Friday 8:02 am

Confirmed by

Wordfence2 days ago
CISAyesterday
NVDyesterday
BleepingComputertoday
Your version5.8.1, affected
Safe version5.9.2 or newer
Do thisToday

We’ll email you again when it’s fixed.

A week in your inbox.

Most days, no email at all. If you want, we send a short summary on Sunday.

  1. MonNo email
  2. TueNo email
  3. WedUpdate by Friday
  4. ThuSorted
  5. FriNo email
  6. SatNo email
  7. SunWeekly summary

Who is this for?

What we read today.

An example list for a small shop running WooCommerce. The real list updates every few hours.

7 stories read.
1 affects you.

  • Popular gallery plugin lets visitors upload any fileWordfence, 7:10 amYou don’t use it.Doesn’t affect you
  • WooCommerce 9.3.2 fixes a bug that could show order detailsPatchstack, 8:45 am. NVD, 11:20 am.You’re on 9.3.1. We’ve emailed you: update by Friday.Affects you
  • Fake “update your site” emails sent to WordPress ownersBleepingComputer, 9:02 amNothing to update. Reminder: we never ask for your password.Doesn’t affect you
  • Add-on pack for a page builder fixes a stored XSS bugPatchstack, 10:15 amYou have the page builder, not that add-on pack.Doesn’t affect you
  • CISA adds an old slider plugin flaw to its list of flaws attackers are usingCISA, 12:30 pmYou updated that slider in March. You’re safe.Doesn’t affect you
  • Small calendar plugin has a bug in its settings pageNVD, 2:05 pmYou don’t use it.Doesn’t affect you
  • Researchers share early notes on a possible SEO plugin issuePatchstack, 3:40 pmNot confirmed yet. We’ll keep checking.Doesn’t affect you

Simple prices.

When we launch, you can try Pro or Agency free for 14 days. No card needed.

Free

For one small site

$0 forever

  • 1 site
  • One check a month
  • The first “Today” warning each month, in full
Get early access
Our pick for most sites

Pro

For a site you care about

$4 a month, per site

  • Checked all day, every day
  • Every warning, with its proof
  • Early warnings from the news
  • “Sorted” emails when you fix things
  • Optional weekly summary
Get early access

Agency

For people who look after other people’s sites

$19 a month, up to 10 sites

  • Everything in Pro
  • All sites on one page
  • One combined email, not ten
Get early access

We email you 3 days before every payment. Cancel any time.

Watchfox never changes anything on your site.

Questions

Still unsure? Write to alerts@watchfox.site. A person reads every email.

When can I get it?

We’re finishing it now. Leave your email at the top of this page and we’ll write to you once, the day it’s ready.

Will it slow down or break my site?

No. Watchfox doesn’t change anything on your site. It compares your list of plugins with ours a few times a day, which takes less time than loading one page.

What do you see about my site?

Very little. Your site checks itself against our list, and we only learn which problems it found. We never see your customers, orders, posts or passwords.

How do you know a warning is real?

We wait until trusted sources agree, like Wordfence, Patchstack, CISA and NVD. Every email lists who confirmed it and when. Early reports stay off unless you turn them on.

I’m not technical. Can I use it?

Yes, it’s made for you. Install it like any plugin and type your email. Each warning has one button and tells you when to act by.

What happens after the trial?

If you don’t pick a plan, you move to Free and keep your monthly check. If you do, we email you 3 days before each payment.

Find out when your site needs fixing.

Install it once, and we’ll check it every day.

Coming soon to WordPress. We’ll email you once, on launch day. No spam.

Get early access