Security

WP Security Audit Playbook.

A read-only security grade from A to F. It covers configuration and exposure, vulnerable plugins and themes, and a code review, with a ranked fix list and any coverage gaps.

Super Agent
Security
Effect
Only reads
Steps
8
Connector
No connector needed

What you get

A written Markdown report with an A to F security grade, a ranked fix list and a note of anything it could not cover.

What it looks at

  • Exposed files, headers and account settings
  • Known vulnerabilities in plugins, themes and WordPress
  • Plugin and theme code, including inactive ones
8 steps

The Steps In Order.

  1. Step 01

    Recon & FACTS

    Records the facts about your site once, such as paths, plugins and settings, so later steps do not repeat the work.

  2. Step 02

    Config & Exposure Audit

    Checks what an outside visitor could reach or learn, such as exposed files, user lists, headers and HTTPS.

  3. Step 03

    Vulnerable Components Audit

    Checks WordPress, plugins and themes against known vulnerabilities and flags closed, outdated or abandoned ones.

  4. Step 04

    Security Scan - Access Control

    Scans all plugin and theme code, including inactive ones, for open routes and actions with no permission or request check.

  5. Step 05

    Security Scan - Injection, Execution & Supply Chain

    Scans all plugin and theme code for injection, file upload, redirect and hidden malicious code patterns.

  6. Step 06

    Verify & Triage Findings

    Reads the code around the highest-risk hits and sorts findings into confirmed, needs review or dismissed. Hits it could not read are left as needs review.

  7. Step 07

    Posture Score (A-F)

    Works out an A to F grade from confirmed findings and measured results. The grade is marked with * and a reason if a check could not run or a cap applied.

  8. Step 08

    Report

    Writes one plain report with the grade, a ranked fix list and a note of anything it could not cover.

Free Site Audit

Which Of Your Sites Needs Looking At?

The free audit looks at the site from the outside, from the address alone. Connect the site afterwards to let playbooks run.

We suggest connecting a staging copy of your site first, before your live site.

85 Site ChecksNo Credit Card100% Free