Everything is sourced from the public WordPress.org plugin directory and its search results — the same numbers anyone can see on your plugin page. We record them on a schedule so you get a history instead of a snapshot. Vulnerability records are mirrored from the Wordfence Intelligence feed.

Tracked plugins and their keyword ranks refresh on a daily sync, and alerts are evaluated at the end of that same run. The vulnerability feed refreshes every four hours.

No. WPInsight reads public directory data by slug, so there is nothing to install, no plugin to ship, and no code touching your users' sites.

Yes, and it doesn't need a card. You get one tracked plugin with five keywords, plus the full dashboard, rankings, downloads, reviews and alerts.

Adding beyond your limit is blocked with a message telling you the cap and what you're using. Nothing already tracked is deleted or paused — you just can't add more until you upgrade.

Paid plans are billed once yearly through Stripe Checkout. The listed price is monthly for comparison; the charge is that figure times twelve, minus any discount shown on the pricing page. An invoice is emailed on every purchase.

Yes. Upgrading applies straight away. If a subscription is cancelled or refunded, the workspace returns to the free tier and keeps its data — only the limits and paid features change.

Yes, on any plan that allows more than one user. There are four roles — owner, admin, editor and viewer — plus per-resource permissions if you need something more specific.