Free · done by a person

A real audit of your WordPress site,
at no cost.

Not an automated scan that guesses from the outside. Someone goes through your site properly, including the parts that only show up with access, and writes up what they actually found.

  • No cost, and no obligation to buy anything afterwards
  • You get the findings in writing, whether or not you use us
  • We tell you what is fine as plainly as what is not
  • If your site is in good shape, we will say so

Request your audit

Tell us where your site is.
We will reply with what we need.

Read-only access

When we reply, we will ask for a read-only WordPress account created for us, which you can remove the moment we are done.

No passwords by email

We will never ask you to email us a password. Anyone who does is teaching you a habit that will eventually cost you the site.

Written findings

You get the results in writing, whether or not you use us - including the parts that are fine.

What we look at

Some of this is visible from outside.
The part that actually matters is not.

Which is why we ask for access rather than guessing.

From the outside

  • Page speed and how long your server takes to respond
  • Certificate validity, and whether insecure visits are redirected
  • Whether your usernames or files are exposed publicly
  • Whether your email can be verified, or anyone can forge it
  • Titles, descriptions and whether search engines can read your pages

Only with access

  • Whether your backups exist, and whether a restore actually works
  • Your exact plugin and theme versions, against published vulnerabilities
  • Whether your paid plugin licences are active, and still receiving security updates
  • Database size, old revisions, and what is slowing queries down
  • PHP version, error logs, and what is failing quietly
  • Admin accounts, their permissions, and which should no longer exist
  • Malware sitting in files rather than in the pages we can load

How we handle access

You do not send us anything through this form
except your address and where your site is.

When we reply, we will ask for a read-only WordPress account created for us, which you can remove the moment we are done.

We will never ask you to email us a password. Anyone who does is teaching you a habit that will eventually cost you the site. If you would rather start with the parts that need no access at all, say so and we will do that first.

One thing we always check

Whether your backups
actually restore.

Almost everyone sells backups. Far fewer have ever proved that the file they are keeping can be turned back into a working site, and the moment you find out is the worst possible moment to find out.

It is the first thing we look at, and it is the one finding people are most often surprised by.

Why this is free

Because most owners have no way to find out
where their site stands without paying someone who benefits.

We would rather show you the work and let you decide, than sell you a plan against problems you cannot verify.

If the audit says your site is well looked after, that is the report you get. It is a slower way to earn a customer and a considerably better one.

Request my audit