Get in touch
with us
Have a question, feature request, or need help with your security setup? Drop us a message and we’ll get back to you shortly.
FAQ
Frequently Asked Questions
Everything you need to know about our WordPress security scanner.
Our scanner performs 36 external security checks from the outside — exactly like an attacker would. It analyzes HTTP headers, SSL certificates, exposed files, WordPress configuration, plugins, DNS records, and more. No server access, plugins, or credentials are needed.
Absolutely. The scanner only sends standard HTTP requests — the same as a regular browser visit. It never modifies files, injects code, or writes to your database. It's 100% non-invasive and read-only.
No. The scan is entirely external. Just paste your URL and click scan. There's nothing to install on your server, no WordPress plugin required, and no credentials to share.
Your score (0–100) reflects the overall security posture of your site based on all 36 checks. Each issue is weighted by severity — critical findings like exposed debug logs or outdated WordPress versions have more impact than informational items.
The scanner is optimized for WordPress sites but many checks (SSL, headers, DNS, cookies) apply to any website. WordPress-specific checks will simply be skipped if the site isn't running WordPress.
We recommend scanning after every major update (WordPress core, plugins, themes) and at least once a week for production sites. Pro and Enterprise plans include uptime monitoring for continuous protection.
Yes! Free accounts can run up to 3 scans per day with full access to all 36 security checks. No credit card required. Upgrade to Pro or Enterprise for higher limits, bulk scanning, PDF & JSON reports, and API access.
We only store scan results (URLs, scores, findings) — never your credentials or site content. Scan data is encrypted at rest and in transit. You can delete your scan history at any time from your dashboard.
Yes! Pro and Enterprise plans include bulk scanning that lets you scan up to 20 sites simultaneously. Perfect for agencies and developers managing multiple WordPress sites.
Yes. Pro and Enterprise plans include REST API access with full documentation. Create and manage API keys from your dashboard, and integrate scans into your CI/CD pipeline or monitoring workflow.