A free audit of one site, read from inside.
For one WordPress, Joomla, Drupal or PrestaShop site. You install our plugin, we read the site for at most 24 hours, then the connection ends and you get a private report. No card, nothing renews.
What the audit checks
- Versions of the CMS, plugins, themes, modules and extensions, compared with our database of known vulnerabilities.
- The code files of the site (PHP, JavaScript, templates, .htaccess and similar) against our malware signatures, including those that were already there before the audit.
- PHP and other executable files in the upload folders.
- Core files compared with the official release, where we have its reference.
- The automatic configuration checks we run for that CMS.
- From outside: SSL certificate, DNS records, domain expiry, robots.txt, sitemap and blacklists.
What it does not do
- It does not change the files or the settings of the site. Installing the plugin writes only the plugin's own settings and a data folder.
- The connection cannot log in, update, install or edit anything: the plugin itself refuses those requests.
- No recurring monitoring and no AI analysis.
- A report without problems does not prove the site is safe: the audit looks for known problems and signatures.
How it works
You prove the site is yours by installing the plugin on it: nobody can audit a site they do not manage.
- 1. Ask for the audit
- Your email, the address of the site and its CMS. We send a link to confirm the email.
- 2. Create the account
- Name and password. The account sees its audit and nothing else.
- 3. Connect the site
- Install the plugin and paste the one-time code. The plugin settings say it is an audit connection and when it ends.
- 4. Read the report
- Problems by severity, with what we saw and what to do, and what could not be checked. Then the connection ends.
- 5. Continue with the trial, if you like
- From the report one click starts the 30-day free trial on the same account, with no card. The site and the report stay; you connect the plugin again with a new code.
What a report looks like
An example with made-up data. Each problem says what we saw and the next step; what could not be checked is listed apart from what passed.
| Plugin with a known vulnerability contact-form-x 5.1.2, fixed in 5.1.3 | Critical |
| PHP file in the uploads folder wp-content/uploads/2026/10/cache.php | Critical |
| File editor active in the admin area DISALLOW_FILE_EDIT is not set | Warning |
| Domain expires in 40 days shop.example | Info |
| Core files match the official release 1,947 files compared | Checked |
Limits
- One audit per site and per email address every 180 days. The www and bare domain count as the same site.
- The site must answer on HTTPS. Supported: WordPress 5.0 onward, Joomla 3.9 onward, Drupal 7 and 8.9 onward, PrestaShop 1.7.6 onward.
- If the audit runs out of time, the report is marked as partial and says which phases did not finish.
- The report stays in your account for 30 days, then everything we collected from the site is deleted.
Questions about the free audit
Does the audit change my site?
No. The plugin writes its own settings and a data folder, and the audit only reads. The plugin refuses logins, updates, installs and file changes during the audit connection, even if a request carried a valid signature.
What happens to the plugin afterwards?
The connection ends when the report is ready, and in any case 24 hours after you connect. If you start the trial, the plugin stays and connects again with a new code; otherwise the report explains how to remove it.
Who sees the report?
Only your account, after login. The email we send has the number of problems, not the file paths or the details.
Do I have to buy something afterwards?
No. Nothing in the report is hidden behind a payment. If you want the same checks every day with alerts, the report starts the 30-day free trial on the same account. The 30 days start from that click, not from the audit.
Try SitePing on your client sites.
Connect your first sites today and see what SitePing finds on them.
- Every Complete feature except backups
- Up to 10 sites
- No credit card needed to start
- At the end you choose a plan or move to Free, and nothing is charged
Already have an account? Log in. Prefer to look at one site first? Free read-only audit.