Site Security Scanner

Free security scanner for your WordPress site. Checks SSL, security headers, and vulnerabilities with instant visual reports.

Description

Site Security Scanner provides instant security analysis for your WordPress site. Get a clear score (0-100) and letter grade showing your site's protection level.

Features:

• SSL Certificate Check - Verify your site uses HTTPS encryption
• Security Headers Analysis - Check for 7 critical security headers including HSTS, CSP, X-Frame-Options
• Vulnerability Detection - Identify common security misconfigurations
• Performance Measurement - Track response times and server health
• Visual Dashboard - Beautiful, easy-to-understand results in your WordPress admin
• Automatic Weekly Scans - Stay informed about your security status
• Email Alerts - Get notified when issues are detected

Free Plan Includes:

• 3 scans per hour
• All basic security checks
• Weekly automated scans
• Email alerts for issues
• Full dashboard access

Upgrade for More:

Need unlimited scans, continuous monitoring, or API access? Visit api.rftmedia.com for professional plans starting at $9/month.

Installation

1. Upload the plugin files to /wp-content/plugins/rft-site-security/ or install via WordPress plugins screen
2. Activate the plugin through the 'Plugins' screen
3. Navigate to 'Site Security' in your admin menu
4. Click 'Scan Your Site' to run your first security check

Frequently Asked Questions

Is this plugin free?

Yes! The free version includes 3 scans per hour, weekly automatic scans, and email alerts. Paid plans are available for users who need more scans or advanced features.

What security headers does it check?

We check for: Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy.

How do I get unlimited scans?

Visit api.rftmedia.com/pricing to get an API key. Enter your key in Settings to unlock unlimited scans.

Does this plugin slow down my site?

No. Scans are performed on-demand or weekly in the background. The plugin adds no frontend overhead to your visitors.

Is my data secure?

We only analyze publicly accessible information about your site (SSL certificate, HTTP headers, response times). No private data is transmitted or stored.

Screenshots

1. Dashboard showing security score and grade
2. Detailed security header analysis
3. Vulnerability detection results
4. Settings page with API key configuration

Changelog

1.0.0

• Initial release
• SSL certificate validation
• Security headers analysis (7 headers)
• Vulnerability detection
• Performance measurement
• Weekly auto-scan with email alerts
• WordPress admin dashboard integration

Upgrade Notice

1.0.0

Initial release - Start scanning your site security today!