BlogSafe.org

About BlogSafe

The history, purpose, and current direction of BlogSafe.org.

Security tools and data for WordPress site owners

BlogSafe builds WordPress security tools and publishes the vulnerability data behind them, so site owners, developers and agencies can find problems early and keep their sites maintainable.

We do this in the open: the data we use is published here for anyone to search, and our plugins are built to keep your information on your own site.

What we offer today

Debug 360

Captures PHP errors in your WordPress database instead of a public debug.log, with a readable log, ignore rules and email alerts. Free, with a Pro edition for grouped errors, stack traces and team alerts, backed by a 30-day money-back guarantee.

Meet Debug 360

Vulnerability databases

Searchable records of vulnerabilities affecting WordPress plugins and themes, and the PHP language itself, with a check for which PHP versions are affected.

WordPress CVEs   PHP CVEs

Homeless & Abandoned

A tracker for WordPress plugins and themes that have left the official directory or stopped receiving updates, so you know what you're running.

Browse the database

How we work

Your data stays yours

Our free plugins send nothing off your site. Paid plugins contact us only to check licenses and deliver updates.

Security first

Our own code is held to the standard we promote: escaped output, tested against hostile input, and fixed promptly when someone reports a problem.

Evidence, not claims

Vulnerability data comes from public sources and is published so you can check it yourself.

Research-led

We study real attacks on WordPress sites, and what we learn shapes the tools we build.