Security tools and data for WordPress site owners
BlogSafe builds WordPress security tools and publishes the vulnerability data behind them, so site owners, developers and agencies can find problems early and keep their sites maintainable.
We do this in the open: the data we use is published here for anyone to search, and our plugins are built to keep your information on your own site.
Debug 360
Captures PHP errors in your WordPress database instead of a public debug.log, with a readable log, ignore rules and email alerts. Free, with a Pro edition for grouped errors, stack traces and team alerts, backed by a 30-day money-back guarantee.
Meet Debug 360 →
Vulnerability databases
Searchable records of vulnerabilities affecting WordPress plugins and themes, and the PHP language itself, with a check for which PHP versions are affected.
WordPress CVEs → PHP CVEs →
Homeless & Abandoned
A tracker for WordPress plugins and themes that have left the official directory or stopped receiving updates, so you know what you're running.
Browse the database →
Your data stays yours
Our free plugins send nothing off your site. Paid plugins contact us only to check licenses and deliver updates.
Security first
Our own code is held to the standard we promote: escaped output, tested against hostile input, and fixed promptly when someone reports a problem.
Evidence, not claims
Vulnerability data comes from public sources and is published so you can check it yourself.
Research-led
We study real attacks on WordPress sites, and what we learn shapes the tools we build.