From the outside it identifies whether a site runs WordPress, the version and theme where exposed, and common misconfigurations that are publicly visible.
Free · no account
WordPress check
Paste an address and we detect WordPress from the outside, read its version and theme, and check a handful of common exposures.
We only fetch public URLs, like any visitor. Nothing is stored, no account required.
What the check shows
Everything is fetched from the outside – no plugin, no login to the site.
Version & theme
Whether it is WordPress, which version is running and the active theme.
Common exposures
readme, XML-RPC, user enumeration via REST and a public debug log.
Without touching the site
We only read public URLs – the same ones any visitor can reach.
More free tools
Test more on your site
Standalone, free tools — no account needed.
WordPress checker — questions
No. It only reads what is publicly available, no credentials, no plugin, no account.
Many sites hide the version, which is good practice. The checker reports only what is publicly exposed.
Two layers. From the outside, the free Ravnsight plan watches uptime, the certificate and the domain with no install, and alerts you by e-mail. To see inside WordPress — PHP errors, plugin and theme changes, failed updates — in Ravnsight, you need Pro: Pro connects the Ravnsight Detective plugin to your account, so those internal errors flow straight into Ravnsight, lined up with the outage that explains them. (The free Detective plugin also runs standalone inside wp-admin, but that view stays local — Pro is what brings it into Ravnsight.)
See inside your WordPress, not just the outside
Ravnsight Detective catches errors and changes from within the site – and flags risky exposures.