How Vamao Payment Guard OS Works

Vamao Payment Guard OS has a local WooCommerce plugin and a hosted VamaoLabs reconciliation engine. The local plugin captures safe order, payment, and refund snapshots. The hosted engine validates the license, checks the signature, stores redacted evidence, and produces findings.

Local capture

The plugin watches WooCommerce order status changes, payment completion, and refunds. It stores only safe values: hashed references, statuses, totals, currencies, timestamps, and gateway names.

Signed hosted sync

Licensed sites receive a one-time site token during activation. Every sync is signed with timestamped HMAC headers so VamaoLabs rejects stale or forged telemetry.

Findings

The first rules focus on paid-but-pending orders, cancelled captured payments, refund mismatches, duplicate transaction references, missing transaction IDs, and gateway mode drift.