Free · no account
WordPress check
Paste an address and we detect WordPress from the outside, read its version and theme, and check a handful of common exposures.
We only fetch public URLs, like any visitor. Nothing is stored, no account required.
What the check shows
Everything is fetched from the outside – no plugin, no login to the site.
Version & theme
Whether it is WordPress, which version is running and the active theme.
Common exposures
readme, XML-RPC, user enumeration via REST and a public debug log.
Without touching the site
We only read public URLs – the same ones any visitor can reach.
More free tools
Test more on your site
Standalone, free tools — no account needed.
Website test
Full outside-in scan: platform, hosting, SSL, domain and tags at once.
SSL & certificate check
Issuer, expiry and days left for any site's certificate.
Tracking tag check
Which analytics and ad tags are installed, with their IDs.
Security headers check
HSTS, CSP, X-Frame-Options and more — graded.
See inside your WordPress, not just the outside
Ravnsight Detective catches errors and changes from within the site – and flags risky exposures.