WordPress Security Scanner
SecurityScan WordPress sites for security issues: exposed files, user enumeration, XML-RPC, debug logs.
Scan WordPress sites for security issues: exposed files, user enumeration, XML-RPC, debug logs.
Get access to all 150+ tools with higher limits. Start with 100 free credits — no credit card required.
curl -X POST "https://krawly.io/api/v1/tools/wordpress-scanner/" \
-H "Content-Type: application/json" \
-H "Authorization: Bearer YOUR_API_KEY" \
-d '{"url": "https://example.com"}'WordPress Security Scanner checks 10+ common WordPress security indicators including exposed admin panel, XML-RPC, user enumeration, debug logs, and config backups.
Check DMARC, SPF, and DKIM DNS records for any domain to assess email authentication and prevent spoofing.
Find HTTP resources loaded on HTTPS pages. Detect active and passive mixed content issues.
Analyze Content Security Policy headers. Check for unsafe-inline, unsafe-eval, and wildcards.
Analyze cookies set by a website. Check Secure, HttpOnly, SameSite flags and compliance issues.