Scope
Evidence-oriented checks against what the public site exposes. No credentialed scans, no exploit attempts, no “score” theater.
WordPress Security Checker
Passive, public signals about a WordPress site — without active vulnerability probing.
A restricted public request may be sent for a normalized URL only. Cookies and credentials are never submitted. Loading tool…
Need a deeper WordPress or origin hardening review?
Public checkers are a start. Production reviews cover plugins, access paths, and CDN origin controls.