Tool
See your site through the eyes of a bot
We read what the site publicly sends out — version, plugins, headers — and show you what it exposes. Without testing anything.
We read whatever the site sends publicly — a few seconds.
How it works
Whatever we see, anyone can see
A site constantly broadcasts information it doesn’t need to: which WordPress version is running, which PHP, which plugins, whether the readme is open. None of this is hidden — it’s visible to anyone who opens the page source.
And precisely because it’s visible, automated programs read it first. A bot looking for victims doesn’t choose you — it reads what you expose and decides whether it’s worth the effort. That’s exactly what we read here too.
What this tool does NOT do
It doesn’t try exploits, doesn’t look for admin pages, doesn’t guess passwords. It only reads what the server publicly sends, like any browser.
That’s why we say “outdated”, never “vulnerable”. Saying with certainty that something is vulnerable requires testing it — and testing someone else’s site is exactly what we don’t do. An old version isn’t guaranteed to be broken; but it’s the first thing anyone searching looks at.
After the check
What we do with what we find
Most exposures are closed on the hosting and maintenance side — updates, headers, server settings.
Saw something you don’t understand?
Send us your site and we’ll explain what it means, free of charge.