Check your WordPress site from the outside, the way an attacker sees it, without installing a plugin. WebGuard AI detects the WordPress version, known vulnerabilities and the files that should never be public.
The scanner detects WordPress and the version it exposes, then matches it, along with PHP, the web server and jQuery, against known CVEs and end-of-life releases.
A wp-config.php served as plain text, a .env file or a downloadable SQL dump or backup archive can leak database passwords. WebGuard AI checks the paths attackers try first.
Most WordPress attacks succeed because of configuration, not code. Each scan also reviews SSL, security headers, cookie flags and email (SPF, DMARC) protection.
No. The scan runs from outside, like an attacker, so it works on any WordPress site without access to the admin area or the server.
No. WebGuard AI focuses on vulnerabilities and misconfigurations: outdated versions, exposed files, weak headers and SSL. For an infected site, use a dedicated malware cleanup service.
After every update or plugin change, and at least once a month. New vulnerabilities in WordPress, PHP and plugins are published every week.