WordPress Security Checker

Passive security scan for public WordPress sites. Checks HTTP security headers, HTTPS, WordPress exposure, and common information disclosure issues.

Only public websites are allowed. Private, local, and reserved network addresses are blocked.

Running safe passive checks…

Important: This tool performs only passive, non-intrusive checks. It does not attempt exploits, login attacks, or invasive probing. Scores are heuristic and do not guarantee security. Always obtain authorization before scanning sites you do not own.