LEARN BY DOING
A clearer next step.
Practical guides for the moments that matter. Start small, follow the evidence and build a review you can repeat.
Observe.
Understand.
Decide.
Your first workspace
Install, set up and find your first record.
02 / FOLLOW THE EVIDENCEWho changed what?
Read the actor, subject and outcome.
03 / STAY IN CONTROLYour data, your choices
Collection, retention and erasure.
THE LIBRARY
Find your next step.
10 articles
Install Free and add Pro
Install the correct ZIPs, in the right order, on a supported staging host.
Free & ProSet up your first workspace
Choose your focus and display detail, then review any collection changes before applying them.
Free & ProFind who changed what
Narrow the activity list and inspect the difference between the acting user and the affected object.
Free & ProReview a request finding
Understand what WordPress observed before attributing a source or considering a response.
Free & ProPreview a temporary response safely
Review a narrowly scoped policy, keep recovery available and revoke it when no longer needed.
Free & ProChoose your fixed email alerts
Select important changes and recipients who already have access to the evidence.
Free & ProExport a useful slice of evidence
Choose a small streamed export or a larger background file without making it public.
Free & ProWork through an investigation case
Read the linked evidence, assign a reviewer and record a decision without confusing association with proof.
ProBuild an alert with a clear outcome
Prepare a destination, preview a rule and distinguish the saved state from an unsaved draft.
ProMake a useful review repeatable
Save a search, generate a private report and schedule a review you can inspect later.
ProDisplay detail and saving changes
Understand Essentials, Operator and Expert, and how a visible draft becomes saved configuration.
Free & ProCollection, attribution and coverage
Know which view you are reading and what an absent event, unfamiliar actor or summary count means.
Free & ProPrivacy, retention and erasure
Choose address privacy, review deletion effects and distinguish deactivation from uninstall.
Free & ProSite, network and permission boundaries
Use the workspace that owns the evidence and keep viewing, settings and deletion permissions distinct.
Free & ProTroubleshoot without losing context
Separate a collection gap, a queued job and a delivery problem, then prepare a minimized diagnostic record.
Free & ProUpdate the pair and resume a schema upgrade
Use the matched development pair and follow recorded upgrade state instead of uninstalling to start over.
Free & ProNo matching articles.
Try a different word, or return to the complete library.
We’re here to help.
Bring your question. Keep sensitive records on your site.