=== PressPatrol Free ===
Contributors: tpinkus
Tags: security, integrity, malware, monitoring, file-integrity
Requires at least: 6.5
Tested up to: 7.0
Requires PHP: 8.0
Stable tag: 0.9.11
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Local file-integrity patrols for WordPress core, plugins, themes, administrators, uploads, reports, and weekly email summaries.

== Description ==

PressPatrol Free gives WordPress administrators a clear, local view of unexpected file and inventory changes. Run a patrol when you want one, or let WordPress run the scheduled weekly patrol.

The plugin compares WordPress core and eligible WordPress.org plugins and themes with official reference information. It also records administrator, plugin, and theme inventory changes and looks for executable file types inside the uploads directory.

Results are presented in a plain-English dashboard with visual health indicators, a rolling 12-patrol history, recommended next steps, and an exportable JSON report.

= Free features =

* Manual and scheduled weekly integrity patrols.
* Official WordPress core checksum comparison.
* File-by-file comparison for eligible WordPress.org plugins and themes.
* Clear status when no official comparison copy is available.
* Unexpected-file inventory for `wp-admin` and `wp-includes`.
* Administrator, plugin, and theme inventory change tracking.
* Executable-file detection inside the uploads directory.
* WordPress Dashboard status widget.
* Rolling history for the latest 12 patrols.
* Optional weekly email summaries sent by your own WordPress website.
* Downloadable JSON reports.
* No PressPatrol account and no PressPatrol telemetry.

= What PressPatrol Free does not do =

PressPatrol Free is an integrity and change-detection tool. A changed or unexpected file is not automatically malware, and a clean integrity report cannot guarantee that a website is free from every threat. The plugin does not automatically delete, quarantine, repair, or replace files. Review findings carefully, make a backup, and ask your hosting provider or a qualified WordPress professional when you are unsure.

= External WordPress.org services =

PressPatrol Free uses official WordPress.org services only when an administrator runs a patrol or when the site's scheduled weekly patrol runs:

* The WordPress core checksum API at `api.wordpress.org` supplies official hashes for the installed WordPress version and locale.
* The plugin checksum service at `downloads.wordpress.org` supplies official file hashes for eligible WordPress.org plugins.
* The WordPress.org Themes API and download service supply official theme package information and packages for local comparison.

These requests include the installed WordPress version and locale or the relevant plugin/theme slug and version. As with ordinary web requests, WordPress.org may receive the site's IP address and standard request metadata. PressPatrol does not send site files, administrator details, scan results, or report contents to WordPress.org or PressPatrol.

WordPress.org privacy policy: https://wordpress.org/about/privacy/

WordPress.org terms of service: https://wordpress.org/about/terms-of-service/

== Installation ==

1. Install PressPatrol Free from the WordPress Plugin Directory, or upload the plugin ZIP through Plugins > Add New > Upload Plugin.
2. Activate PressPatrol Free.
3. Open PressPatrol from the main WordPress admin menu.
4. Select **Run patrol now** to create the first baseline and report.
5. Optionally enable weekly email summaries at the bottom of the report.

The first patrol is never started automatically. Some patrols take longer on sites with many plugins, themes, or files.

== Frequently Asked Questions ==

= Does PressPatrol upload my website files? =

No. File comparison happens on your WordPress server. PressPatrol does not receive your files, administrator inventory, or patrol results.

= Does a finding mean my site has malware? =

No. A finding means something differs from an official reference or changed since a previous patrol. Normal updates, hosting modifications, incomplete installations, and intentional customization can also create findings.

= Why can some plugins and themes not be compared? =

PressPatrol needs a matching official WordPress.org copy. Plugins and themes supplied by a host, developer, or another website may not have one, so PressPatrol labels them clearly instead of guessing.

= Will PressPatrol repair or delete files? =

No. PressPatrol Free is report-only. It provides the evidence and recommended next steps without changing the files it reviews.

= Where are reports stored? =

Reports, baselines, patrol history, inventory, and optional email settings are stored in this site's WordPress database. Deactivating the plugin preserves them. Deleting the plugin removes its saved options.

= How are weekly emails sent? =

Your own WordPress installation sends the message using its configured email system. PressPatrol does not receive it. WordPress scheduled events depend on site traffic unless your host provides a system cron service.

= Is this a replacement for backups or professional incident response? =

No. Maintain current backups and a secure hosting configuration. If PressPatrol reports an unexplained change, back up the site before replacing anything and ask your host or a qualified WordPress professional for help.

== Screenshots ==

1. The main PressPatrol report summarizes core, administrator, upload, plugin, and theme integrity in one view.
2. Visual core-health and patrol-history panels make file states and changes easier to understand.
3. Plugin and theme findings explain why a file needs review and recommend a practical next step.
4. The WordPress Dashboard widget provides current status and a direct link to the complete report.

== Privacy ==

PressPatrol Free stores its reports and settings inside the website's own WordPress database. It does not create a PressPatrol account or send telemetry to PressPatrol. The plugin adds suggested disclosure text to the WordPress Privacy Policy Guide and documents its WordPress.org requests in the External WordPress.org services section above.

PressPatrol privacy information: https://presspatrol.app/privacy/

== Changelog ==

= 0.9.11 =
* Prepared the first WordPress.org submission candidate.
* Made the first patrol explicitly user-initiated.
* Added Privacy Policy Guide text and deletion cleanup.
* Documented external WordPress.org services, limitations, installation, and support information.
* Aligned release metadata with the permanent `presspatrol` directory slug.

= 0.9.10 =
* Added support for official checksum manifests that provide more than one acceptable hash for a file.

= 0.9.9 =
* Completed WordPress.org release metadata and automated Plugin Check compatibility.

= 0.9.8 =
* Added a semantic page heading for assistive technology on the PressPatrol report screen.

= 0.9.7 =
* Preserved the current report and baseline when the plugin is reactivated.

= 0.9.6 =
* Added the WordPress Dashboard widget and opt-in weekly email summaries.

== Trademark ==

The GPL license covers the plugin source code. It does not grant permission to use the PressPatrol name, logo, or product branding for a fork or derivative distribution. See `trademarks.txt`.
