Deskmode Pro Suite – Customize & Secure Your WordPress Admin
A WordPress admin plugin to Customize and secure your WordPress dashboard
deskmode pro suite external services
Which external services Deskmode contacts
The plugin does not contact any server on its own. Every request listed here follows an action you took, or a feature you deliberately switched on. There is no telemetry, we collect no usage statistics, and the plugin sends us nothing about your site.
Network tools
These run only when you type an address or a domain into the Network Info screen and start a lookup. What is sent is what you typed, and nothing else.
| Service | What it provides |
|---|---|
| ip-api.com | Country, ISP and AS number for an IP address |
| api.bgpview.io | Autonomous system data |
| stat.ripe.net | Autonomous system data, as a fallback |
| api.hackertarget.com | How many domains share the same address |
| rdap.org and registry WHOIS servers | Domain registration data, over port 43 |
| openstreetmap.org | The map shown beside a lookup result |
Country lookup in the activity log optional
Off by default. When enabled, the IP addresses recorded in the log are sent to ip-api.com to look up their country, and the result is cached. Leave it off if you would rather not share your visitors' addresses with a third party.
Vulnerability scan optional
Runs only when you press the button on the Site Health screen. The slugs of your active plugins — not their contents — are sent to api.wordpress.org to check whether they are still maintained. If you enter a WPScan key in the settings, the same slugs also go to wpscan.com to check for known vulnerabilities.
Shared IP reputation optional
Off by default. When enabled, once a day the plugin sends api.deskmode.app the IP addresses your site has blocked, and receives the ones reported by other sites. Only the addresses leave: no content, no visitor data, no usernames. Your site is identified by a one-way hash rather than by its address.
Licence and updates
On activation and once a day, the plugin asks deskmode.app whether the licence is valid, sending the key and the site address. It is the same request that enables automatic updates.
For your client. If you look after sites for other people, this page is meant to be handed over: it lists who is contacted, with what data and under which circumstances, which is what a complete privacy notice needs.