Craft CMS site care
Every Craft CMS site,
kept current.
Uptime from several regions, SSL and domain expiry, advisories across Craft, its plugins and your Composer packages, and support dates for Craft and PHP. One screen for every Craft site you look after, with updates as pull requests.
01 · What Porro checks
Checks from the outside.
Facts from the inside.
Every site gets outside checks the moment you add it. Add the connector and you also get what only the site knows: versions, advisories in composer.lock and package-lock, schedulers, queues and backups.
porro/craft-connector
Craft CMS connector adds
read-only · open source02 · In the control panel
Free in the control panel.
The plugin adds Site Health and Blocking to Craft’s control panel. It works on its own, and keeps what it sees on the site.
- +Advisories, support dates, failed jobs and the scheduler
- +Scanner probes, failed logins and fake Googlebots, ranked by IP
- +Block in the app, at Cloudflare or in nginx, with each block confirmed first
03 · Updates
Updates you can merge,
not just a list.
Porro checks craftcms/cms, every plugin and every Composer package, and opens a pull request for the patch and minor updates you pick. A major upgrade, like Craft 4 to 5, is flagged with the upgrade guide and never bundled in.
Updates · harbour-arts.org
4 waitingPull request
opened by Porro04 · Advisories
83 advisories for Craft and its plugins in the last year.
Porro matches every advisory for craftcms/cms, your plugins and the rest of your Composer packages against each site’s composer.lock within the hour it’s published, and the fix arrives as a pull request. The latest:
05 · Support dates
Craft CMS 4 is out of security fixes.
Porro tracks support dates for Craft CMS and PHP, and flags every site on a version that’s running out, weeks ahead. The same data powers our free end-of-life pages.
Cycle
Status
Released
Active until
Security until
Latest
Questions
Something else? Email [email protected]. It goes straight to the people building it.
Which Craft versions does it support?
Craft 4 and 5, on PHP 8.2 to 8.5. Outside checks (uptime, SSL, domain) work on any site, with or without the plugin.
Does the connector change my site?
No. It’s read-only. It sends one signed report on a schedule and after each deploy, and never accepts commands: Porro never connects in. Every line is open source on GitHub.
Do I need a Porro account for the control panel pages?
No. Site Health, suspicious activity and blocking work on their own in the control panel, and keep what they see on the site. Connect Porro to add uptime, SSL, domain and server checks alongside every other site you look after.
Will Porro upgrade Craft 4 to 5 for me?
No. Porro opens pull requests for the patch and minor updates you choose. A major upgrade like Craft 4 to 5 changes more than composer.json, so Porro flags it with the upgrade guide and leaves the upgrade to you.
Are plugins checked too?
Yes. Every plugin in composer.lock is checked against Packagist’s security advisories and for newer releases, along with Craft itself and every other Composer package.
Do the connectors cost extra?
No. The connectors are free and MIT-licensed, and their pages work without a Porro account. Porro’s plans are priced by sites, not seats.
Also looking after other stacks?
See your Craft CMS sites in one place.
Start a free trial and add your first sites in minutes. Outside checks need nothing installed; the connector takes two commands.