BlogSafe.org
Site Scanner
Check any WordPress site for public exposure, outdated components, and common security gaps.
Basic check for
Grading once every check has finished…
WordPress
Plugins & themes
Server & security headers
HTTPS
Login exposure
Links
Domain & hosting
Want the advanced check?
The advanced check looks for things an attacker would love to find: exposed backups, configuration copies, database dumps, debug and error logs, version-control data, and open directory listings. Because those results are sensitive, we only run it for the site's owner.
It takes about two minutes: you place a one-time code in your site's tagline, we confirm it, and we email you the report.
Prove you own
Your one-time code
- Sign in to your WordPress admin and open Settings → General.
- Paste the code into the Tagline field (anywhere in it is fine) and click Save Changes.
- Come back here and press Check for my code.
Keep this page open, or come back in this same browser tab. Your code is valid for 48 hours. Once we have checked it you can put your old tagline back.
Verified. Where should we send your report?
We confirmed you control . Enter your email and we will run the advanced check and send you the full report.
We use your email to send this report and, only if you tick the box, our updates. See our Privacy Policy.