Install
This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.
Install straight from GitHub with WP-CLI:
wp plugin install https://github.com/stephen-psaradellis/mailwick-site-audit/archive/refs/heads/main.zipA WordPress plugin that checks the faults that quietly cost a small business website visitors, email and trust, and explains each one in plain English with short steps to fix it yourself.
It adds Tools > Mailwick Site Audit and puts its checks into Tools > Site Health.

The seven checks
- Email forgery (SPF and DMARC) - is DMARC missing or
p=none, so anyone can send mail that looks like it came from your domain? - Padlock and mixed content - https, a certificate that verifies, http redirecting to https, no insecure scripts or images on the front page.
- Out-of-date WordPress, plugins and themes - from the update data WordPress already stores (no extra update calls).
- Phone view - a viewport tag, so phones do not show a shrunken desktop page.
- Tap-to-call - phone numbers written as plain text instead of
tel:links. - Contact form deliverability - is a mail-sending plugin (WP Mail SMTP, FluentSMTP, Post SMTP...) active, or does form mail leave from the web server?
- Search snippet - a meta description on the front page.
Each result is Critical, Recommended or Good, with the evidence found and numbered fix steps.
Private by design
No account, no API key, no tracking. The plugin makes DNS lookups for your own domain and loads your own front page - nothing else leaves your site. No dashboard notices or ads; one "Prefer it done for you?" link appears on the plugin's own page, under a failing check only.
Install
Download mailwick-site-audit.zip from the
latest release,
then Plugins > Add New > Upload Plugin. Requires WordPress 5.8+ and PHP 7.4+;
tested up to 7.1.
Related
- No WordPress? The same SPF/DKIM/DMARC check runs in a browser: email-forgery-check (source).
- Worked examples of each fix, broken then fixed: stephen-psaradellis.github.io/demos.
Written with an AI system (Claude) under my direction; I review and maintain it. Issues and pull requests welcome.
License
GPLv2 or later, like WordPress itself. See LICENSE.