Free WordPress security scanner
Check the public security signals on your WordPress site.
Start with an automated review of publicly visible website signals. Use the report to identify items that deserve a closer look and plan the next maintenance tasks.
No account required. Scan a website you own or have permission to assess.
Run the scanner
Enter your WordPress website URL.
Use the full public address, for example https://example.com.
Public checks are a starting point. They cannot confirm whether a site is free of malware or replace an authenticated security review.
Use the result to decide the next action
A score is useful when you understand the findings.
Review each finding
Read the explanation alongside the score. Identify which configuration or publicly visible signal the tool is reporting before changing the website.
Check the context
Hosting, plugins, security tools and content-delivery services can affect what is visible externally. A manual review may be needed to confirm a finding.
Plan the fixes
Take a backup and agree the changes before implementation. If you need help, share the report and website with our WordPress team.
About the tool
Before you act on a scan result.
Does a good score mean my website is completely secure?
No. The scanner reviews externally visible signals. It does not establish that the website, hosting account or plugins are free of vulnerabilities or compromise.
Do I need to provide a password?
No password is needed for this public scan. For any later authenticated work, agree the access and scope with the team first.
Can Ninja Softs help with the findings?
You can discuss WordPress development work or review our website care service. The required changes and any recovery work are scoped separately.
Need help reviewing the findings?
Send the website and the items you want reviewed. We can agree the investigation or implementation work in writing.