Aepto Domain Expiry, SSL, DNS & PHP Security

WordPress Site Health watches PHP, cron, and plugins. It does not watch whether your domain is about to expire, whether DNS still points at this install, or whether SPF/DKIM/DMARC will dump order email into spam.

Domain Anchor (free, no Aepto account) watches that layer for this site only — and when a critical PHP RCE hits (starting with CVE-2026-109618 / CVE-2026-109619 — php2shell), it emails your contacts and gives you a copy-ready hosting support ticket.

Free — works the moment you activate

• Domain registration expiry — days left + registrar when the registry publishes it
• SSL / TLS certificate expiry — days left + issuer
• DNS snapshot — A / AAAA / NS (and change journal when records move)
• Tether check — confirms the public hostname still serves this WordPress (not “A record equals server IP”, which breaks behind Cloudflare)
• Email authentication grade — SPF, DKIM, DMARC, MX from public DNS
• PHP security — checks this server’s PHP version against critical advisories (starting with php2shell); admin notice + copy-ready support ticket for your host; repeat emails until patched
• Email alerts — choose up to 10 recipients; toggle domain / SSL / tether / DNS / Mail Pulse / PHP alerts; pick reminder days (30 / 14 / 7 / 1)
• Mail Pulse — weekly delivery probe with click-to-confirm; catches silent wp_mail failures; loud wp-admin warning when mail is dead
• Test email — Settings → Send test email to all recipients (if it fails, use an SMTP plugin — many hosts block PHP mail())
• Admin bar chip — quick Domain / SSL countdown (or PHP: critical when an advisory hits)
• Dashboard widget — at-a-glance risks
• Continuity report (PDF) — dense client-ready PDF (expiry, tether, DNS, email auth, Mail Pulse, PHP security); Connected adds outside uptime %, stability, latency, downtime history

No account. No API key. No front-end scripts on your public site.

Optional — Connect free with Aepto

Sign in with Aepto (OAuth, no pasted secrets) to protect this WordPress from the outside:

• Outside uptime board in Protection — live status, 24h/7d/30d/90d uptime %, stability, latency, downtime duration history (alerts even if WordPress cannot send mail)
• Add this site to your Aepto portfolio
• Domain Watch and Theft Guard
• Attention inbox in wp-admin
• Open the full Aepto dashboard for this domain

Paid Aepto plans (checkout on app.aepto.com)

• AI page monitoring — catch white screens, critical / database errors, and “uptime green but the page is broken”
• Alert webhooks — push incidents to Slack, tickets, Zapier, on-call tools

The free Domain Anchor stays fully usable forever. Connect and paid features are optional upgrades, not a crippled teaser.

Who this is for

• Site owners who renew domains once a year and forget
• WooCommerce / form sites that need mail to actually deliver
• Agencies who need a clean continuity report for clients
• Anyone who needs to push their host to patch critical PHP CVEs quickly
• Anyone who has been burned by DNS pointing somewhere else

External services

This plugin may contact third-party / external services as follows:

• Your site’s hostname — TLS certificate probe and tether self-check against the public hostname of this WordPress site. Data sent: HTTPS connection to your own host (no third-party account). Runs when you run Domain Anchor or on the scheduled cron.
• Public DNS resolvers (via PHP DNS functions / the server’s configured resolvers) — used to read A, AAAA, NS, MX, and TXT records for email authentication grading and DNS snapshots. Data sent: the domain name being queried. Runs during Domain Anchor checks.
• RDAP bootstrap (RDAP.org) — used to look up domain registration expiry / registrar data when available. Data sent: the domain name in an HTTPS RDAP query. Service info: https://about.rdap.org/ (includes privacy considerations). Terms / policy: https://about.rdap.org/
• Verisign RDAP — fallback / TLD RDAP lookup for supported zones (for example .com). Data sent: the domain name in an HTTPS RDAP query. Terms of use: https://www.verisign.com/legal-center/rdap-terms/ — Privacy: https://www.verisign.com/legal-center/privacy/
• Aepto (https://app.aepto.com) — only when you Connect, opt in to anonymous install stats, or load optional outside-uptime / Protection data. Data may include install id, site URL/host, OAuth tokens you authorize, and monitoring identifiers you enable. Privacy: https://aepto.com/privacy — Terms: https://aepto.com/terms

PHP security checks use the local PHP_VERSION only (no remote vulnerability API call).

No third-party ads or analytics scripts are injected on the public front end of your site.

Aepto is a product of Limitless Hosting. Learn more at aepto.com.