Alerts, digests and where they go

TrackWP looks through the day’s WordPress.org data every night and raises an alert when something worth knowing happens to your products or your rivals. Every alert lands on the Alerts page, and your plan decides which other channels it reaches.

What you’re alerted about

On every plan:

• Keyword moves of 3 or more places, and entering or leaving the top 10.
• Install band changes, and downloads spikes and drops against a typical day.
• Goals reached, or missed by their date.
• A plugin’s search score about to fall with age: 30 and 7 days before 180 days without a release, and the day it starts. Also a “Tested up to” that’s costing score.
• New vulnerability reports for your products, and closures on WordPress.org.
• New 1–2★ reviews of your plugins.

Boost and FullCharge add every new review, plus rival releases, rival listing changes and rival stumbles. FullCharge adds support deadlines, release health, break checks, AI answer changes, companies you follow, your portfolio’s products, and a diagnosis on keyword drops.

Where alerts go

• Alerts page, every plan: open Alerts in the sidebar, filter by type, and click Mark … as read to clear the count.
• Weekly digest, every plan: Mondays at 07:00 UTC, each product’s rank, downloads and keyword positions, plus the week’s alerts. On FullCharge it adds your action plan and portfolio.
• Monthly report, every plan: on the 1st, how each product moved last month, your goals and a count of alerts.
• Instant alerts by email, Boost and FullCharge: each alert as soon as it’s raised.
• Slack and Discord, FullCharge: every alert posted to a channel.
• Webhook, FullCharge: every alert sent to your endpoint as signed JSON.
• API, FullCharge: read alerts from /api/v1/alerts. See The REST API.

Choose your channels

1. Open Settings → Notifications.
2. Tick Weekly digest, Monthly report and Instant alerts. All three start on where your plan includes them. Emails go to your account’s email address.
3. For Slack, paste the incoming webhook URL Slack gives you. For Discord, paste the webhook URL from the channel’s settings.
4. For a webhook, enter the Endpoint URL. It has to be a public address, not a local or private network.
5. Click Save, then Test beside a saved URL to send a sample message.

Webhook signatures

Each request carries X-TrackWP-Timestamp and X-TrackWP-Signature. The signature is sha256= plus an HMAC-SHA256 of the timestamp, a dot and the body, keyed with the Signing secret shown under the URL. Rotate makes a new secret.

Good to know

• Most alerts come from the nightly check after the WordPress.org snapshot. Release health is checked hourly, and AI answers when they’re asked again each week.
• The first time TrackWP reads a plugin’s reviews or vulnerability records, it takes them as a starting point, so tracking a plugin doesn’t flood your inbox.
• Your support reply deadline is set under Support deadlines on the same page. See Answer support threads faster.