內容簡介
DigitalSpace Personal Data Scanner 是一款專為 WordPress 設計的外掛，能夠掃描網站中的個人數據，幫助用戶識別、管理和保護敏感資訊，確保符合隱私法規。
【主要功能】
• 掃描用戶資料及元資料
• 檢測電子郵件、電話號碼及 IP 地址
• 提供個人數據清單及信心評分
• 支援 WooCommerce 訂單及客戶資料
• 生成可列印的報告
• 提供 WP-CLI 指令操作
外掛標籤
開發者團隊
② 後台搜尋「DigitalSpace Personal Data Scanner」→ 直接安裝（推薦）
原文外掛簡介
Most WordPress sites hold far more personal data than their owners know: old form submissions, comment emails and IP addresses, IBANs pasted into order notes, drafts nobody deleted, options a plugin filled years ago. Personal Data Scanner finds it, tells you where it is, and links you straight to the record so you can act.
Run one scan and you have a personal data inventory: how many items, of which kinds, in which places.
What it scans (free)
Users and user meta (including WooCommerce billing and shipping fields)
Comments and comment meta, including spam, trash and WooCommerce order notes
Posts, pages, custom post types, revisions, drafts and post meta
WooCommerce orders and customers (HPOS and legacy storage)
Contact Form 7 submissions stored by Flamingo
WPForms entries (WPForms Pro stores entries; Lite does not)
The options table, including serialized and JSON values
What it detects
Email addresses
Phone numbers (international and common national formats)
IP addresses (v4 and v6)
IBANs, validated with the ISO 13616 checksum
Payment card numbers, validated with the Luhn check and issuer ranges
National ID numbers: German Steuer-ID, UK National Insurance number, US SSN, Georgian personal number, Italian codice fiscale, Spanish DNI/NIE, Dutch BSN
Dates of birth in labelled fields or next to a birth keyword
Names in labelled fields (first name, last name, billing name, comment author)
Addresses in labelled fields (address, billing/shipping address, street, and common non-English equivalents)
API keys and secrets: AWS, GitHub, Stripe, OpenAI, Anthropic, Google, Slack, JWTs, and PEM/SSH private keys
Health keywords and ICD-10 codes for the special-category angle (off by default)
Every finding carries a confidence score so you can focus on the sure things first.
Privacy by design
The plugin stores masked values only, for example j***@example.com or DE89**************3000. It never becomes a second copy of your personal data.
Nothing leaves your server. The scan runs entirely inside your WordPress install and the plugin makes no outbound requests. There is no telemetry.
Every action requires the manage_options capability and a nonce.
Working with findings
Filter by source, type, confidence and status; search labels and masked values
Open the record in its own edit screen with one click
Bulk Ignore, which stays in effect for future scans until you reopen it
Printable on-screen report with a source-by-type matrix and the records holding the most personal data
WP-CLI: wp pdscan scan, wp pdscan status, wp pdscan findings, wp pdscan info
Pro
Delete and anonymize findings (WooCommerce-aware), retention rules, scheduled scans with email summaries, data subject request lookup by email address, custom detectors and custom sources, CSV export. Pro buttons are visible in the free version; clicking one links to personaldatascanner.com/pricing/.
Developers
Add a data source: implement PDScan\Scan\SourceInterface and hook pdscan/sources
Add a detector: implement PDScan\Scan\DetectorInterface and hook pdscan/detectors
Add a national ID format in src/Scan/Detectors/national-ids.php or via pdscan/national_ids
Add a secret/API key format in src/Scan/Detectors/secret-keys.php or via pdscan/secret_keys
Filters: pdscan/is_pro, pdscan/batch_findings, pdscan/keep_scans, pdscan/health_keywords, pdscan/woocommerce/hpos, pdscan/posts/skip_types, pdscan/options/skip_names
The admin screens are a React app. Source is in assets/src/, shipped alongside the built assets/build/index.js it compiles to. Rebuild with npm install then npm run build (uses webpack.config.js and @wordpress/scripts); nothing outside WordPress core’s own bundled @wordpress/* packages is used.
