CloudAware

This plugin adds auditing functionality to WordPress. It does this by adding extra 
REST API endpoints. Using these endpoints it is possible to: 
– see the version of core 
– see whether there is an update available for core 
– see what plugins are installed 
– see whether these plugins have been actived 
– see whether these plugins have autoupdate enabled 
– see whether these plugins have updates 
– see a list of vulnerabilities for these plugins 
– see what themes are installed 
– check if 2FA is enabled 
– see MD5 hashes of all theme and plugin folders
For installations where the RESTAPI is disabled, the plugin can also push this information to an endpoint. 
This will work for installations that are behind a geoblock or have no RESTAPI. To disable this, remove the 
cronjob.
<h3>Dependancies</h3>
For getting vulnerabilities of WordPress components this plugin can use the WPVulnerability plugin 
(https://wordpress.org/plugins/wpvulnerability/). If this plugin is installed, it will be used, otherwise this plugin 
will work without the information from WPVulnerabilty plugin. 
Without installing this dependancy no data is transferred to WPVulnerability. Please see https://www.wpvulnerability.com/privacy/ 
for more information.
<h3>External services</h3>
In order to determine the latest version of installed software components this plugin uses the following 
external services: 
GitHub 
Terms of Service: https://docs.github.com/en/site-policy/github-terms/github-terms-of-service 
Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement 
– Releases list from ImageMagick github repository (https://api.github.com/repos/ImageMagick/ImageMagick/releases) 
– Releases list from curl github repository (https://api.github.com/repos/curl/curl/releases) 
Slider Revolution 
Terms of Service: https://www.sliderrevolution.com/terms/ 
Privacy Statement: https://www.sliderrevolution.com/terms/privacy/ 
– Changelog documentation from Slider Revolution website (https://www.sliderrevolution.com/documentation/changelog/)
Apart from the usual headers (ip-address, UserAgent) used in a GET request no other information is send to these services. 
Specifically no version information is transmitted to external services.
If you fill out an external url in the callback URL field in the settings, a WordPress cronjob will send a POST request 
with the audit data to this URL daily.

CloudAware Security Audit

This plugin adds auditing functionality to Wordpress.

Kristoffer Pihlfelt

Technical Site Auditor is a powerful WordPress plugin that performs comprehensive technical audits of your website. It identifies issues across multiple categories and provides actionable recommendations to improve your site’s SEO, performance, security, and overall health.
<h4>Key Features</h4>
Content Analysis 
* Thin content detection 
* Duplicate title and description checks 
* Heading structure validation 
* Keyword consistency analysis
SEO Checks 
* Meta title and description optimization 
* Open Graph and Twitter Card validation 
* Schema.org markup verification 
* Robots.txt and XML sitemap analysis
Performance Optimization 
* Image optimization recommendations 
* Asset loading analysis (CSS/JS) 
* Database cleanup suggestions 
* Server configuration checks
Security Audits 
* SSL/HTTPS verification 
* Security header checks 
* XML-RPC exposure detection 
* File permission reviews
Link Analysis 
* Broken link detection 
* Redirect chain analysis 
* External link verification 
* Orphan page detection
Database Health 
* Autoload option monitoring 
* Post revision cleanup 
* Transient management 
* Spam comment detection
<h4>Free vs Premium</h4>
Free Version 
* Unlimited URL scanning 
* All 260+ checks included 
* Manual fixes with guidance 
* Export issues to CSV
Premium Version 
* One-click auto-fix for many issues 
* Safe .htaccess auto-fix (security headers, GZIP, caching) 
* Automatic backup and rollback for all fixes 
* Undo/revert for all fixes 
* Scheduled automated scans 
* Email notifications 
* Premium modules: 
 * Redirect Manager 
 * Meta Title/Description Manager 
 * Breadcrumbs Generator
<h4>Integrations</h4>
Technical Site Auditor detects and integrates with popular plugins:
<ul>
<li>Yoast SEO</li>
<li>Rank Math</li>
<li>All in One SEO</li>
<li>SEOPress</li>
<li>WooCommerce</li>
<li>Elementor</li>
<li>Divi Builder</li>
<li>Beaver Builder</li>
<li>WPBakery Page Builder</li>
<li>Oxygen Builder</li>
</ul>
<h3>External Services</h3>
This plugin connects to the following external services:
<h4>WordPress.org API</h4>
This plugin uses the official WordPress.org API to check for WordPress core updates and verify core file integrity.
What it does: 
* Checks if your WordPress installation is up to date 
* Verifies that core WordPress files have not been modified (security check)
Data sent: 
* Your WordPress version number 
* Your site locale (language setting)
When data is sent: 
* Only during a site audit scan, when the “WordPress Updates” or “Core File Integrity” checks are enabled
Service provider: WordPress.org (Automattic) 
* <a href="https://wordpress.org/about/domains/" rel="ugc">Terms of Service</a> 
* <a href="https://wordpress.org/about/privacy/" rel="ugc">Privacy Policy</a>
No personal user data is ever transmitted. The plugin only sends technical information about your WordPress installation to verify its status.

Technical Site Auditor

Comprehensive technical audit for WordPress. Identifies SEO, performance, database, and security issues.

CloudAware Security Audit vs Technical Site Auditor