Enter a website address. Checks are passive: we only request pages any visitor can see, never log in or try passwords, and store nothing.

Check a WordPress site for common security weak spots: outdated core, plugins and themes, exposed files, XML-RPC, and usernames leaking through the REST API.
Provided by Dot Internet Solutions Inc.