Webhook Notifications for WordPress Security Events

AIO Login Pro enables Webhook Notifications for WordPress, allowing you to send real-time security events (like failed logins, lockouts, and user enumeration attempts) to any custom HTTPS endpoint via JSON POST requests. Webhook Notifications is a Pro feature and requires an active AIO Login Pro license.

This feature is ideal for integrating your WordPress site with automation tools, monitoring systems, and security dashboards such as Zapier, Make (Integromat), n8n, or your own custom API.

Overview

With WordPress security webhook integration, you can instantly push login activity and security events from AIO Login to external systems. This helps you build real-time alerting,
logging, and automation workflows without being tied to a single platform.

How to Set Up Webhook Notifications

Step 1: Navigate to Notifications

Navigates to WordPress Dashboard → AIO Login → Activity Log → Notifications

You will see available channels such as Slack and Webhook.

Step 2: Enable Webhook Integration

Toggle the Webhook option ON and click Configure to open settings.

Step 3: Add Custom Endpoint Webhook URL

Enter your custom webhook endpoint URL where events will be sent.

Examples:

• https://example.com/webhook
• https://hooks.zapier.com/hooks/catch/12345/abcdef/
• https://your-api.com/aio-login-events

Important: Only HTTPS endpoints are supported. HTTP URLs will be rejected for security reasons. Webhook requests have a 15-second timeout.

Step 4: Select Security Events

Choose which WordPress security events should trigger webhook notifications:

• Lockout Attempts (Always Enabled)
  Triggered when an IP address is blocked due to repeated failed logins.
• Failed Login Attempts (Optional)
  Triggered on every unsuccessful login attempt.
• User Enumeration Attempts (Optional)
  Triggered when username discovery or enumeration is detected.

Note: Lockout events are always active and cannot be disabled. JSON event delivery are sent in real-time as JSON POST requests.

Click Save Changes to activate webhook notifications.

Event Data Variations

• Lockout Events:
  ip_address, country, city, time, user_agent
• Failed Login Events:
  user_login, ip_address, country, city, time, user_agent
• User Enumeration Events:
  type, username, ip_address

Best Practice: If your endpoint processes heavy logic, use a queue system or async handler to avoid timeouts and missed events.

Need Help?

If you face any issues or have questions, feel free to contact our support team. We’re here to help you get the most out of AIO Login.