Updates and security
WordPress, theme and plugin versions against their current releases, published advisories for those versions, abandoned plugins and the PHP version.
How is your WordPress site doing?
A free check of what your website shows every visitor: WordPress and plugin versions, published security advisories, SSL, speed on mobile, SEO basics, visibility in AI search, images and accessibility. Results in about 20 seconds, with a copy by email.
Checking
- Reading the homepage
- Comparing WordPress and plugin versions
- Looking up published advisories
- Checking the SSL certificate and redirects
- Reviewing SEO, images and accessibility
- Checking what AI crawlers can read
- Measuring speed on a simulated phone
Google’s speed test runs alongside the rest. If it needs longer, the report opens first and the speed result follows.
What we check
Six things you can see from the outside.
Everything here is public: what the site sends to every browser. It won’t find what only a login shows, but it catches the problems most sites have.
Connection
Whether the SSL certificate is valid and when it expires, and whether the plain http:// address sends visitors to the secure one.
Speed on mobile
Google’s PageSpeed test, and real-visitor data from Chrome where Google has enough of it.
SEO and sharing
Title and description, structured data (schema), the main heading, preview images for shared links, indexing and the mobile viewport.
AI search visibility
Whether ChatGPT, Perplexity, Google and other AI crawlers are let in, how much text they can read without JavaScript, and llms.txt.
Images and accessibility
Alt text, modern image formats and lazy loading, the page language, and links, buttons and form fields that screen readers can’t name.
About the check
Good to know.
Found something you’d like fixed, or want us to keep an eye on it every week?
Tell us about your siteIs this a security audit?
No. It reads only what your site shows every visitor and compares versions with public data. Advisories are matched by version number alone, so a match means “worth checking”, not “your site is hacked”. A real review looks at the site from the inside.
Why couldn’t you see my WordPress or plugin versions?
Many sites hide them, which is sensible. Premium plugins and custom code also can’t be compared from the outside. The report tells you what it couldn’t check instead of guessing.
What do you do with my email?
We send you a copy of the report and keep the request, with the report, for 90 days. If you tick the box, we may follow up about the report. Otherwise we only reply if you write to us. Details are in our privacy policy.
Can I check a site that isn’t mine?
You can check any public website, the same way a browser loads it. The check respects robots.txt: if a site asks automated tools not to read it, we don’t.
Does it work for sites that aren’t built with WordPress?
The connection, speed, SEO, image and accessibility checks work for any website. The version and plugin checks need WordPress.
Is it really free?
Yes. It’s how we introduce WPComfy. If you’d like us to look after the site, we’ll suggest a plan after a proper review.
Rather not check it yourself every month?
We keep WordPress, plugins and backups in order on a schedule, and tell you what we did in a monthly report.
Compare care plans