Free plugin · no account needed
Find out what is wrong with your site in about 30 seconds.
Install Site Health Report, and it scans immediately. You get a score out of 100 and a list of findings, worst first, each one explained in plain English with instructions for fixing it yourself and roughly how long that takes.
Free and open source · nothing is modified · no signup wall
Three promises
It only reads
Never changes your files, database or settings. Every check is read-only.
No account
No signup, no API key, no email wall. Install it and it works.
No nagging
One notice when something is urgent. That is it.
What it checks that core WordPress does not.
WordPress has a built-in Site Health screen, but it is written for developers and it does not check for known vulnerabilities, abandoned plugins, missing backups or PHP end-of-life dates. This does, and it explains each one in language you can act on.
Read the checklist it runs- WordPress core, plugin and theme updates
- Known vulnerabilities in your installed plugins
- Plugins abandoned or removed from the directory
- PHP version and whether it still gets security fixes
- Whether any backup system is actually running
- HTTPS, predictable admin usernames, debug output
- World-writable folders and missing security headers
- Autoloaded database size, transients, object caching
Plus weekly re-scans with score history, a printable report, and an optional weekly email summary.
For plugin users
Do not want to fix it yourself?
Anyone who installs the plugin gets our care plan at $39 a month for the first 3 months instead of $79 — a saving of $120. Same service, same guarantees, just a better price for arriving through the plugin.
Questions people ask about it
Does it change anything on my site?
No. Every check is read-only. The only things it writes are the report itself and your settings.
Do I need an account?
No. No signup, no API key, no email required. It scans the moment you activate it.
Will it slow my site down?
No. Nothing runs on your public pages. Scans happen in the admin when you ask, or once a week in the background.
What data leaves my site?
Only plugin slugs and version numbers, sent to check for known vulnerabilities. No site address, no content, no personal data — and you can switch it off in settings.
Is it really free?
Yes, entirely, with no locked features. We also sell a maintenance service and there are links to it inside. You are under no obligation to use it.
Who is it for?
Site owners who want to know where they stand, and agencies who want a report they can send a client.