Free, no access needed

What does your WordPress site look like from the outside?

We check your site the way an automated scanner checks it: from the outside, without credentials, without touching anything on your site. You get a short overview with a traffic light and an assessment of what matters for you and what does not.

What we check

  • Which WordPress version is served and whether it is current.
  • Which plugin versions are visible from the outside.
  • Whether /wp-admin and xmlrpc.php are openly reachable.
  • Whether readme.html and other default files are served.
  • TLS configuration and security headers.
  • Load time of the home page.
  • Whether AI crawlers find usable HTML on your site.

One question up front, and it decides the answer

Does your site capture customer data, meaning a contact form, an upload or a login?

No, the site shows who we are.Then the check is still useful, but the honest answer is usually this: the cheapest fix is the right one. A maintenance contract with your provider is enough, and we will say so rather than selling you a migration.

Yes, data or revenue runs through it.Then the arithmetic changes. A compromised form holding client data, an outage in a booking process, or a login that is part of a larger system costs more than any measure. In that case we put the findings in context and show you what maintenance can solve and what only disappears with a different build.

How to get the check

Send us the address of your site and your answer to the question above. We come back with the overview, usually within two working days. No account, no newsletter, no sharing with third parties.

Does the site capture customer data, meaning a contact form, an upload or a login?

We come back with the overview, usually within two working days. No account, no newsletter, no sharing with third parties.

What the check is not

The check looks at how your site is built, from the outside. It is not a standards-based security review, not a risk assessment and not a penetration test, and it replaces none of them. If you need an assessment with formal evidence, we say so and point you on.

Have my site checked →Rather talk for 30 minutes →

Background: What the Swiss authorities warn about WordPress →