Free Tool
WordPress Security Checker
Scan for common exposure risks — missing headers, leaked version info, exposed files, and mixed content — and get a plain-English risk level.
What this checks
- HTTPS & security headers
- WordPress version exposure
- Mixed content on HTTPS pages
- xmlrpc.php exposure
- Login page hardening signals
- Directory listing on uploads
- readme.html exposure
- Common backup file exposure
This is a risk scan based on what's publicly visible from outside your server — it isn't a full malware scan and can't see inside your files or database. Treat a clean result as a good sign, not a guarantee.