WordPress Security Checklist
Go through the checklist, tick what you already do, and get a score plus a to-do list of what is missing. Runs in your browser.
This tool runs in your browser. Nothing you type is uploaded.
Free tool made by Hridoy Ahmed. Found a bug or have a suggestion? Contact me. Need another free tool? Request it here.
How to use the WordPress Security Checklist
- Go through each group and tick the steps that are already in place.
- Watch your score update as you tick.
- Click Copy to-do list to get only the missing steps.
- Fix the high-impact items first: updates, two-factor login and backups.
Frequently asked questions
Is this a security scan?
No. It is a self-assessment. It cannot see your site, so it only reflects what you tick. Use a malware scanner for a technical check.
Does a high score mean my site is safe?
No. It means the common baseline steps are covered. No site is ever 100 percent secure.
What should I fix first?
Updates, strong unique passwords with two-factor login, and tested offsite backups. These cover the most common causes of hacked sites.
Can you help me fix it?
Yes, WordPress security and malware removal is one of my services. Use the contact button below.
Related tools
Worried about your website security?
Manual, white-hat SEO. No shortcuts. Send me your site and I will review it by hand.