# Relvato

> Continuous website verification. Relvato re-checks the pages and flows that matter — sign-ups, logins, checkout, payments, page speed — in a real browser every time your site changes, and alerts you the second one breaks. Works on any site; goes deepest on WordPress & WooCommerce.

Relvato is for store owners, agencies and developers who can't afford silent breakage after a deploy, a plugin update, or a theme change. Checks run in real Chrome (not a ping), are event-driven (re-run on every change, not on a fixed schedule), and come with one-click fixes for common WordPress issues plus AI-assisted root-cause suggestions. Available in English, Español, Deutsch and Français.

The full text of every product, monitoring, docs and guides page, in one file: https://www.relvato.com/llms-full.txt

## Core pages
- [Homepage](https://www.relvato.com/): What Relvato is, how it works, and what it monitors.
- [What we monitor](https://www.relvato.com/monitoring): Hub of every monitoring journey, grouped into topic clusters.
- [WordPress & WooCommerce](https://www.relvato.com/platforms/wordpress): Why AI-driven vulnerability discovery means more frequent WordPress/plugin/theme updates, more chances for your site to break, and how Relvato stays on top of it.
- [Monitoring for AI-built apps](https://www.relvato.com/ai-built-apps): Catch what your AI edit quietly broke — visual regression, structure drift, broken flows — on apps built with Lovable, Bolt, v0 or Replit. No install; verify a meta tag.
- [Custom journeys](https://www.relvato.com/custom-journeys): Build a monitoring journey for any funnel, flow or data path — checkout, booking, sign-up, lead form, or an integration webhook. Includes examples of journeys, funnels and data flows Relvato can watch.
- [Relvato AI](https://www.relvato.com/relvato-ai): Turns a failing check into a plain-English root cause, a concrete fix, and — for a closed whitelist of safe actions — a one-click fix: settings with undo, rolling back a plugin update that broke a check (holding the bad version back), and updating a vulnerable plugin with automatic rollback if a check breaks. AI authors checks; a deterministic engine decides pass or fail.
- [Safe auto-updates](https://www.relvato.com/safe-auto-updates): Scheduled WordPress plugin updates in a weekly window, one at a time; after each, every monitor that was passing runs again, and an update that breaks one is rolled back and its version held. Optional recent-backup requirement; a report email after each window. Plugins only (not themes or core). Business and Agency plans.
- [For agencies](https://www.relvato.com/agencies): White-label monthly client reports (agency name, logo and colour; uptime, monitor runs, plugin updates, vulnerabilities, last backup, real-user speed) emailed on the 1st with a private link, and public client status pages with 90 days of uptime from two-region probes, response times, and incident updates visitors can subscribe to by email (double opt-in, one-click unsubscribe). Reports on Agency; status pages on Business and Agency.
- [Compliance](https://www.relvato.com/compliance): The laws and standards a website has to meet — the European Accessibility Act, the ADA, cookie consent law, the pages a website must publish — what each asks, and how Relvato keeps an update from quietly breaking them.
- [Pricing](https://www.relvato.com/pricing): Free, Pro, Business and Agency plans. Start free.
- [Trust, hosting & sub-processors](https://www.relvato.com/trust): Compute runs in the EU (Vercel Frankfurt/fra1 for app/API; Railway Amsterdam for the worker); the database is in the US (Neon PostgreSQL, AWS us-east-2, Ohio). Real-user Web Vitals (RUM) data is anonymous, cookieless, stores no IP — processed in the EU, stored in the US. Full sub-processor list.

## Sales & checkout
- [Checkout monitoring](https://www.relvato.com/monitoring/ecommerce/checkout-monitoring): A test order runs end-to-end through your real checkout.
- [Logged-in checkout monitoring](https://www.relvato.com/monitoring/ecommerce/logged-in-checkout-monitoring): Checkout as a signed-in customer, with account pricing and saved details.
- [Payment monitoring](https://www.relvato.com/monitoring/ecommerce/payment-monitoring): Every payment method you offer stays available at checkout.
- [Storefront monitoring](https://www.relvato.com/monitoring/ecommerce/storefront-monitoring): The shop/catalog page loads and lists real, shoppable products.
- [Price & stock monitoring](https://www.relvato.com/monitoring/ecommerce/price-stock-monitoring): Prices show and add-to-cart works — no missing prices or broken buttons.
- [Order anomaly monitoring](https://www.relvato.com/monitoring/ecommerce/order-anomaly-monitoring): Catches a silent drop in orders before a "zero orders" alarm would.

## Accounts & email
- [Login monitoring](https://www.relvato.com/monitoring/accounts/login-monitoring): Sign-in works, all the way into the account area.
- [Password-reset monitoring](https://www.relvato.com/monitoring/accounts/password-reset-monitoring): The reset email is actually sent and delivered.
- [Email-delivery monitoring](https://www.relvato.com/monitoring/accounts/email-delivery-monitoring): Your site can still send order/account email — before customers notice it can't.

## Uptime & availability
- [Uptime monitoring](https://www.relvato.com/monitoring/availability/uptime-monitoring): Probes from Europe and the US every 30 s (Agency) to 5 min (Free); down only when both regions agree, instant down and back-up alerts, accepted status codes, required / forbidden text, API endpoints with JSON rules, TCP port monitors on your own domain, maintenance windows, and an Uptime tab with uptime %, response times and outages. No plugin needed.
- [Cron job monitoring](https://www.relvato.com/monitoring/availability/cron-job-monitoring): Heartbeats for cron jobs, backups and scheduled tasks — the job requests a secret URL when it finishes; a missed or failed check-in (period + grace, or the job's cron expression in its time zone) alerts at once.

## Domain & DNS
- [SSL monitoring](https://www.relvato.com/monitoring/domain/ssl-monitoring): The HTTPS certificate is valid and not about to expire.

## Speed & Web Vitals
- [Core Web Vitals monitoring](https://www.relvato.com/monitoring/speed/core-web-vitals-monitoring): LCP, INP and CLS within Google's thresholds.
- [Real-user Web Vitals monitoring](https://www.relvato.com/monitoring/speed/real-user-monitoring): LCP/INP/CLS from actual visitors, p75 per template.

## Design & content integrity
- [Visual regression monitoring](https://www.relvato.com/monitoring/design/visual-regression-monitoring): Surprise layout changes, caught pixel-for-pixel against an approved baseline.
- [Structure drift monitoring](https://www.relvato.com/monitoring/design/structure-drift-monitoring): Vanished buttons, fields and sections, flagged — regardless of styling.
- [Broken-link monitoring](https://www.relvato.com/monitoring/design/broken-link-monitoring): No 404s or missing images on your key pages.
- [Error monitoring](https://www.relvato.com/monitoring/design/error-monitoring): No PHP/WordPress errors or raw, unrendered code shown to visitors.
- [Maintenance-mode monitoring](https://www.relvato.com/monitoring/design/maintenance-mode-monitoring): No "coming soon" wall accidentally hiding your live site.

## Search & AI visibility
- [SEO monitoring](https://www.relvato.com/monitoring/search/seo-monitoring): No accidental noindex; robots and canonical stay sane.
- [AEO readiness monitoring](https://www.relvato.com/monitoring/search/aeo-monitoring): Found and cited by ChatGPT, Perplexity and AI Overviews — llms.txt, AI-crawler access, structured data.
- [Multilingual (hreflang) monitoring](https://www.relvato.com/monitoring/search/hreflang-monitoring): The hreflang cluster is valid and every locale variant is indexable.

## Security & integrity
- [Vulnerability monitoring](https://www.relvato.com/monitoring/security/vulnerability-monitoring): Risky, closed or abandoned plugins, flagged, plus plugins with an update waiting — and on WordPress, a vulnerable or outdated plugin (paid and vendor plugins included, backed up first) can be updated, with Relvato re-running every check and rolling back automatically if one breaks.
- [Exposure scan](https://www.relvato.com/monitoring/security/exposure-scan-monitoring): Exposed files, open endpoints and weak headers, found from outside and (with the plugin) from inside — with one-click hardening fixes and undo for nine common findings on WordPress.
- [File-integrity monitoring](https://www.relvato.com/monitoring/security/file-integrity-monitoring): Core and plugin files match their official checksums — a supply-chain tripwire.
- [Mixed-content monitoring](https://www.relvato.com/monitoring/security/mixed-content-monitoring): No insecure http:// resources triggering a "Not secure" padlock.
- [Background-job monitoring](https://www.relvato.com/monitoring/security/background-job-monitoring): Scheduled tasks and async jobs keep running.

## Legal compliance
- [Legal pages monitoring](https://www.relvato.com/monitoring/compliance/legal-pages-monitoring): Finds the privacy policy, terms, imprint (Impressum), cookie policy, accessibility statement and contact page linked from the key pages, opens each one, and flags a page the site needs that's missing, broken or empty — plus a leftover link to the EU ODR platform (closed 20 July 2025).
- [Cookie consent monitoring](https://www.relvato.com/monitoring/compliance/cookie-consent-monitoring): Visits as a first-time visitor from the EU and flags advertising and analytics trackers that run before any choice on the consent banner, or after Reject.
- [Accessibility monitoring](https://www.relvato.com/monitoring/compliance/accessibility-monitoring): Automated WCAG 2.0–2.2 A/AA tests (axe-core) on the key pages after every update; flags an issue that wasn't in the approved baseline.
- [Website legal requirements](https://www.relvato.com/website-legal-requirements): What a website must publish in the EU, Germany/Austria/Switzerland, the UK and the US — privacy notice, imprint, terms, withdrawal information — and why the EU ODR link must go.
- [Cookie consent law](https://www.relvato.com/cookie-consent-law): ePrivacy and the GDPR consent standard, the EDPB and CNIL on reject buttons, Germany's § 25 TDDDG, the UK's 2026 changes and recent fines.
- [European Accessibility Act](https://www.relvato.com/european-accessibility-act): Applies since 28 June 2025 — who it covers, what it asks of a website, how it's enforced.
- [Legal pages checker](https://www.relvato.com/tools/legal-pages-checker): Free, no account: tests one page for links to its privacy policy, terms, imprint and other legal pages, opens each one, and flags a missing, broken or empty page or a leftover EU ODR link. Up to 5 tests per 10 minutes.
- [Cookie consent checker](https://www.relvato.com/tools/cookie-consent-checker): Free, no account: visits one page as a first-time EU visitor and lists the trackers that run before any choice on the consent banner, and after Reject.
- [Accessibility checker](https://www.relvato.com/tools/accessibility-checker): Free, no account: runs axe-core's WCAG 2.0–2.2 Level A and AA rules on one page and lists every issue with its WCAG criterion.
- [ADA website compliance](https://www.relvato.com/ada-website-compliance): ADA Title III and the courts, the DOJ Title II rule (WCAG 2.1 AA, now due April 2027/2028), Section 508, state law.

## Docs
- [WordPress Abilities API: Relvato's abilities, and a look at everyone else's](https://www.relvato.com/docs/wordpress-abilities-api): The four abilities the Relvato plugin (1.42.0+, WordPress 6.9+) registers for AI assistants (relvato/get-site-status, list-monitors, get-fix-brief, run-monitors; administrators only, none destructive), and the exposure scan's inventory of every other plugin's abilities (1.43.0+): ones anyone can run, destructive ones offered to AI assistants, new ones after an update. Also in the MCP connector's site_overview.
- [Alert severity levels: how Relvato decides what's critical](https://www.relvato.com/docs/alert-severity-levels): Five fixed levels (Critical, High, Medium, Low, Warning) set by what stopped working — checkout/payment Critical; security, sign-in, uptime, SSL and the domain High; other failures Medium; never by AI. What never counts as a failure (couldn't run, retries, flaky pause), when alerts fire, and the Alert me on threshold.
- [Lovable monitoring: re-check your app's speed from the Lovable chat](https://www.relvato.com/docs/lovable-monitoring): Add Relvato as a custom MCP server in Lovable (Connectors → + → MCP server, API key), add the site and its verification tag from the chat, run the Core Web Vitals monitor after each Publish, and let Lovable fix what got slower from the run's diagnostics.
- [Bolt.new performance: a speed budget Bolt checks against a real browser](https://www.relvato.com/docs/bolt-new-performance): Add Relvato as a custom MCP connector in Bolt (Connectors → Manage connectors → Custom MCP server, HTTP, API key), keep six tools on, put Core Web Vitals thresholds in the prompt and map LCP element, layout shifts, blocking scripts and unused JavaScript to fixes.
- [Update a vulnerable WordPress plugin safely](https://www.relvato.com/docs/update-vulnerable-plugins): Update to the fixed version, re-run every check that passed, roll back automatically if one breaks — or deactivate and verify.
- [Roll back a WordPress plugin update that broke your site](https://www.relvato.com/docs/roll-back-a-plugin-update): Reinstall the previous version from wordpress.org and hold the bad one back so WordPress doesn't reinstall it.
- [WordPress security hardening in one click](https://www.relvato.com/docs/wordpress-security-hardening): Nine one-click fixes for exposure-scan findings — XML-RPC, user enumeration, version leaks, file editor, safe headers — each with undo.
- [Send Relvato alerts to Slack](https://www.relvato.com/docs/send-alerts-to-slack): Get a Slack alert when a check fails or finds a problem — a failed checkout, a performance regression, a vulnerability.
- [Verify site ownership](https://www.relvato.com/docs/verify-site-ownership): Prove you own a site with the plugin or a DNS/meta record before monitors are scheduled; until then, run its public monitors by hand 3 times a day (real runs on the live site).
- [Firewall allowlist](https://www.relvato.com/docs/firewall-allowlist): Let Relvato through Cloudflare, Sucuri, Wordfence or a host WAF with one header rule.
- [All docs](https://www.relvato.com/docs): Product how-tos.

## Platforms
- WordPress & WooCommerce: lightweight plugin, event-driven re-checks, authenticated flows (logged-in checkout, payments, login, emails, file integrity).
- Any website: verify your domain, no install — public-page checks on any stack.
- Shopify: coming soon.

## Contact
https://www.relvato.com