Website security scanner
Check a public website for malware signals, outdated WordPress core, plugins, and themes, known CVEs, and reachable misconfigurations. Matches draw on Wordfence, WPVulnerability, CISA KEV, Retire.js, OSV, and CIRCL.
Site map
Two public checks: a website security scanner and a performance checker that also scores on-page SEO. Search engines can read the XML index at sitemap.xml.
Check a public website for malware signals, outdated WordPress core, plugins, and themes, known CVEs, and reachable misconfigurations. Matches draw on Wordfence, WPVulnerability, CISA KEV, Retire.js, OSV, and CIRCL.
Fetch a public page and measure time to first byte, transfer size, and render-blocking scripts and stylesheets. Scores cover performance, accessibility, best practices, and SEO.