Free security check
How does your site look from the outside?
The first thing an attacker looks at is information anyone can see from outside. We use only that same information to give your site's defences a score. We don't put any load on your site, and we don't try anything on it.
What we check
- Whether your WordPress version is visible from outside
- Whether login usernames can be found from outside
- Whether old entry points such as XML-RPC are still open
- Whether files like readme.html that hint at your software are still there
- Whether folder contents can be listed
- Whether HTTPS, HSTS and other settings that protect the connection are in place
- Whether security headers (CSP and others) are set
- Whether any visible plugins or themes have reported vulnerabilities
The check tool is coming soon
For now, a member of our team checks the same items by hand and emails you the results. It's free, of course. Put your site's URL in the form and add a short note saying you'd like the free check.
FAQ
Is it really free?
Yes. And once we've sent the results, we won't keep chasing you with sales calls. If you need help, get in touch.
Will it affect my site?
No. We only look at public pages and information, the same as any ordinary visitor. We don't try to log in or send anything that resembles an attack.
Does it work for sites that aren't on WordPress?
Yes. If your site isn't on WordPress, we can still check the connection and configuration. If moving to WordPress looks like a good fit, we'll tell you that too.