View and manage sites from My Page (web)
See the status of connected sites (PHP, known vulnerabilities, updates) on My Page and ask them to draft an article or run a check, without opening the WordPress dashboard
See your sites and make requests from My Page
With Pro and Cloud, "Site status (web)" on My Page shows the following for each connected site. You can check many sites at once without opening each WordPress dashboard.
- When the site last checked in
- Sorabun, WordPress and PHP versions, and the PHP verdict (OK, update needed, end of life)
- Counts of known vulnerabilities, urgent updates, core file changes and suspicious files
- Names and versions of plugins and themes with known vulnerabilities, and the fixed version
From there you can make two kinds of requests.
| Request | What it does |
|---|---|
| Draft an article | Writes an article as a draft from a keyword (up to 100 characters) and a length (let the AI decide, 3000, 5000 or 8000). Nothing is published. When it's ready, a link to open the draft appears |
| Check now | Runs the same check as "Check now" on the security screen (updates, known vulnerabilities, core files). When it finishes, the counts appear |
Requests start the next time the site checks in (about 5 minutes). Articles are written the same way as from the dashboard (same settings, same AI).
How to connect
- In WordPress, turn on "Connect to My Page (web)" under Sorabun > Settings > REST API / MCP Integration and save
- After about 5 minutes, "Last contact" appears in the same section
- On My Page, open "View site status"
Only sites activated with your license can connect. It is off by default.
What is sent and what isn't
| Sent | Not sent |
|---|---|
| Sorabun, WordPress and PHP versions, and the PHP verdict | Usernames and email addresses |
| Counts of known vulnerabilities, urgent updates, suspicious files and urgent notices | Visitor or administrator IP addresses |
| Names and versions of plugins and themes with known vulnerabilities (with the data source's copyright notices) | File locations or contents |
| Results of requested articles (title and a link to open the draft) | Article text, settings or API keys |
Status is sent every hour (right away after a check). The site looks for requests every 5 minutes.
How it stays safe
- Connections only go out from your site. My Page never connects to your site. No new entry point is added, and it works even with an "overseas access restriction" turned on (a setting at hosts such as Xserver and ConoHa WING that blocks the REST API from overseas and major overseas clouds)
- Only the two requests above are possible. Nothing can be published, changed, deleted, and no plugins can be touched. Articles are always drafts
- The same request never runs twice. Each site can have up to 10 unfinished requests, and a check can't be requested again until the previous one finishes
- From My Page you can only make requests for sites registered to your own license
Troubleshooting
- "Last contact" never appears or stops updating: WordPress scheduled tasks (WP-Cron) run when someone visits the site, so quiet sites may check in late. Calling wp-cron.php from your server's cron every 5 minutes makes it reliable (you can set this up in your host's control panel)
- "Could not connect (sorabun_site_not_registered)": This site isn't registered to your license. Activate it again in the License activation section at the bottom of Sorabun > Settings
- "The full-feature period has ended": Single-article and pack keys can't use this after their full-feature period ends