Getting started

Set up Assure on WordPress

by ncdLabs

Assure runs inside wp-admin. The free plugin includes built-in GDPR (59), OWASP Top 10 2025 (35), and NIST CSF 2.0 (15) technical control catalogs. Optional encrypted compliance packs (HIPAA, SOC 2, CCPA, PCI DSS, and more) are sold as yearly subscriptions and imported after purchase.

Requirements

WordPress 6.6 or newer
PHP 8.1 or newer
A site where you can install plugins (Administrator access)

Install the plugin

Install AssureUpload the plugin to /wp-content/plugins/ncdlabs-assure/ or install from the WordPress Plugins screen when available on WordPress.org.
ActivateOpen Plugins and activate ncdLabs Assure.
Complete setupOn first activation, follow the setup wizard to confirm site basics and monitoring preferences.
Run your first auditOpen ncdLabs Assure → Audits and click Run audit to generate a GDPR, OWASP Top 10, or NIST CSF 2.0 technical readiness snapshot.

Development clone: run composer install and npm install && npm run build so build/ assets exist before activating.

Configure consent and enforcement

Consent bannerGo to Manage → Consent to design your banner, set categories, and preview visitor experience. Assure defers to an active third-party CMP when one is detected.
Analytics enforcementUnder Manage → Integrations, configure Google Analytics / Tag Manager detection, Consent Mode defaults, and optional script blocking.
YouTube gatingEnable External Media gating so YouTube embeds activate only after consent.

Built-in frameworks

GDPR (59), OWASP Top 10 2025 (35), and NIST CSF 2.0 (15) are included with the free plugin — no purchase or import required. Open Assure → Manage → Controls to review, enable, or disable individual controls, set applicability, and attach manual evidence.

Optional compliance packs

Paid framework packs are yearly subscriptions and are not bundled with the free plugin.

PurchaseBuy a yearly framework pack subscription at the Assure store (HIPAA, SOC 2, CCPA, PCI DSS, ISO 27001, WCAG, and more — NIST CSF is free/builtin).
DownloadAfter Stripe checkout, download the encrypted .assure-pack file from your confirmation email or success page.
ImportIn WordPress, open Assure → Manage → Controls → Install New Framework, upload the pack, and enter your unlock key.
ActivatePreview controls, then import. Activation binds the pack license to your site URL.

Licensing API documentation

Monitor and report

Scheduled monitoring

Enable daily, weekly, or monthly drift detection under Monitor settings to catch configuration regressions.

Public status page

Optionally publish a read-only compliance status page at /compliance-status/ for stakeholders.

Evidence export

Export audit history and evidence as JSON, CSV, or PDF from Assure → Evidence.

Remediation

Apply supported one-click fixes from findings, then re-run audits to verify controls.

Assure documents technical observations on your WordPress site. It does not provide legal advice and does not certify legal compliance with GDPR, OWASP Top 10, HIPAA, SOC 2, or any other framework.

Need help?

Email Assure support and include your WordPress version, PHP version, active theme, and a short description of the issue. Do not email pack unlock keys or OAuth tokens.