Kontinua

Kontinua is a WordPress plugin by Host S.p.A. (Host.it). It identifies the current site and, if you choose, helps you register it in the Host.it console.

What this plugin does

After activation, open Settings → Kontinua. You can:

• See a stable site ID created on this installation.
• Review a site passport: home URL, site URL, paths, table prefix, WordPress/PHP/MySQL versions, plus the active theme and active plugins (also included in the JSON download).
• Review a readiness checklist (whether wp-config.php and ABSPATH are readable, the database connection works, and the uploads directory is writable). These checks are informational only.
• Download the passport as JSON. The file does not include database passwords or file contents.
• Optionally generate a pairing code (stored on this site, valid 15 minutes) or connect with an agency API key (claim code valid up to 1 hour). After Host.it accepts pairing, the console can request the site inventory and open wp-admin as the administrator you chose. Each admin entry is listed on this screen. Automatic admin entry is refused when two-factor authentication is detected for that user (official Two Factor plugin, WP 2FA helpers, or filters kontinua_user_has_two_factor / kontinua_allow_auto_login).

Installing or activating the plugin does not contact Host.it. The signing key is kept by Host.it. This site stores only the public key. Signed routes and pairing require HTTPS (local demos may set KONTINUA_ALLOW_HTTP).

What this plugin does not do

This plugin does not keep a long-lived copy of the backup on the site. When the site is paired, Host.it can request file slices and table rows over a signed call, or ask a short-lived on-site runtime to stream packets to the Host.it ingest host allowlist. Database passwords never leave the site in REST responses. Restore writes require an explicit restore session. Pairing still starts only after you act in the console (or submit an API key claim).

Third-party service (Host.it)

Optional registration uses Host.it. Choose the console environment under Settings → Kontinua (default while beta: staging https://app-staging.kontinua.host.it). Override with KONTINUA_CLOUD_URL in wp-config.php if needed.

• When: only after an administrator generates a pairing code / API key claim, or when a paired site answers signed backup/restore calls.
• What: site identity (UUID, URLs, paths, versions); after pairing, administrator logins/roles for auto-login choice; during backup, file bytes and table dumps for the site prefix; never the database password in the passport or session JSON.
• Service: https://www.host.it/
• Terms: https://www.host.it/
• Privacy: https://www.host.it/