ScalingWeb Digital Services

Stop guessing. Start knowing. SW Site Doctor scans your WordPress site for hidden security risks, performance bottlenecks, and migration blockers – then tells you exactly how to fix them in plain English.
<h3>Finally, a Site Health Plugin That Speaks Your Language</h3>
Most site health plugins overwhelm you with technical jargon. SW Site Doctor is different. Every issue comes with a clear explanation and step-by-step fix – no developer required.
<h3>100% FREE – No Premium Tier, No Upsells</h3>
Every feature is included. No paid upgrades. No locked features. Just a complete site health toolkit at zero cost.
<h3>What SW Site Doctor Checks</h3>
Security Audit (40% of Score) 
Protect your site from hackers with 12 essential security checks:
<ul>
<li>SSL/HTTPS configuration and certificate status</li>
<li>PHP and WordPress version vulnerabilities</li>
<li>Debug mode exposure (WP_DEBUG leaks)</li>
<li>File permissions (wp-config.php, .htaccess)</li>
<li>Database prefix security</li>
<li>Admin username vulnerabilities</li>
<li>File editor status</li>
<li>Login URL exposure</li>
<li>XML-RPC attack vectors</li>
<li>Security headers (X-Frame-Options, CSP, etc.)</li>
<li>Pending plugin/theme/core updates</li>
</ul>
Speed Optimization (35% of Score) 
Find what’s slowing down your site with 12 performance checks:
<ul>
<li>Page caching detection</li>
<li>Object caching status</li>
<li>GZIP/Brotli compression</li>
<li>Image optimization opportunities</li>
<li>Lazy loading implementation</li>
<li>Database bloat and overhead</li>
<li>Autoloaded options size</li>
<li>Post revision cleanup</li>
<li>PHP memory limits</li>
<li>Cron job health</li>
<li>External HTTP requests</li>
<li>Heartbeat API optimization</li>
</ul>
Migration Readiness (25% of Score) 
Prepare for hassle-free migrations with 8 compatibility checks:
<ul>
<li>Hardcoded URL detection</li>
<li>Serialized data warnings</li>
<li>Database size assessment</li>
<li>Media library size</li>
<li>Plugin compatibility review</li>
<li>Custom database tables</li>
<li>Must-use plugins inventory</li>
<li>Migration complexity score</li>
</ul>
<h3>Google PageSpeed Insights Integration</h3>
Test any page on your site with Google’s official PageSpeed API:
<ul>
<li>Performance Score – How fast your page loads</li>
<li>Accessibility Score – WCAG compliance check</li>
<li>Best Practices Score – Modern web standards</li>
<li>SEO Score – Search engine optimization</li>
<li>Core Web Vitals – LCP, FID, CLS, TTFB metrics</li>
<li>Mobile & Desktop – Test both device types</li>
<li>Fresh Results – Option to bypass cache</li>
</ul>
<h3>Powerful Features Included Free</h3>
Scan History & Trends 
* Unlimited scan history 
* Visual trend charts (30 days) 
* Track improvements over time 
* Compare before/after changes
Scheduled Scans 
* Daily, weekly, or monthly automation 
* Set it and forget it 
* Never miss a security issue
Email Reports 
* Get results in your inbox 
* Custom email recipients 
* Automatic delivery after scans
Modern Dashboard 
* Clean, intuitive interface 
* Color-coded score gauges 
* Expandable category details 
* Mobile-responsive design
<h3>Why Choose SW Site Doctor?</h3>
<ul>
<li>100% Free Forever – All features, no paywalls</li>
<li>Plain English – No confusing technical jargon</li>
<li>Privacy First – Scans run locally, data stays on your server</li>
<li>Zero Frontend Impact – No scripts added to your public site</li>
<li>Works Everywhere – Compatible with any theme or page builder</li>
<li>Caching Friendly – Works with WP Rocket, LiteSpeed, W3TC, and more</li>
</ul>
<h3>Perfect For</h3>
<ul>
<li>Site Owners – Know your site is secure and fast</li>
<li>Developers – Quick pre-launch audits for client sites</li>
<li>Agencies – Standardized health checks across projects</li>
<li>Freelancers – Professional reports for clients</li>
</ul>
<h3>External Services</h3>
This plugin connects to external services in the following cases:
<h4>ScalingWeb PageSpeed API</h4>
When you run a PageSpeed test, this plugin sends requests to our API proxy service at <code>gapi.scalingdns.com</code>. This service forwards your request to Google’s PageSpeed Insights API and returns the results.
Data sent: 
* Your website’s domain name 
* The URL of the page being tested 
* Test strategy (mobile or desktop)
When data is sent: 
* Only when you manually click “Run PageSpeed Test” or “Quick Test” 
* Only when scheduled PageSpeed tests are enabled
This service is provided by ScalingWeb. 
* <a href="https://scalingweb.com/terms/" rel="nofollow ugc">Terms of Service</a> 
* <a href="https://scalingweb.com/privacy/" rel="nofollow ugc">Privacy Policy</a>

SW Site Doctor

Scan your WordPress site for security risks, speed issues, and migration problems. Free with PageSpeed integration.

Guido Schad

Lockora Security Audit helps site owners and agencies review a WordPress site’s security posture from the admin area.
Current prototype features include:
<ul>
<li>Manual security scans.</li>
<li>Weighted security score out of 100.</li>
<li>WordPress core file integrity checks using official checksums.</li>
<li>WordPress authentication key and salt checks, with an explicit action to generate missing salts.</li>
<li>Must-use plugin directory presence checks.</li>
<li>PHP version status using WordPress.org Serve Happy data.</li>
<li>HTTPS and HTTP security header checks.</li>
<li>WordPress core, plugin, and theme update posture checks.</li>
<li>Administrator account posture checks for default usernames, excess admins, inactive admins, user ID 1 exposure, and an admin username/email inventory.</li>
<li>Optional known vulnerability matching with a configured Wordfence Intelligence API key.</li>
<li>Optional AI client reports on WordPress 7.0+ when the site’s AI Connector is configured.</li>
<li>Reversible hardening toggles for XML-RPC, REST user routes, generator tag output, and basic security headers.</li>
</ul>
<h3>External Services</h3>
Lockora Security Audit may connect to external services only when the administrator runs a scan or generates an AI client report.
WordPress.org APIs: 
* Used for WordPress core checksums, PHP version support status, and WordPress core/plugin/theme update data. 
* Data sent: the site’s WordPress version and locale for core checksums and PHP compatibility; WordPress itself may send installed plugin and theme slugs/versions to WordPress.org when update data is refreshed. 
* WordPress.org terms: https://wordpress.org/about/terms/ 
* WordPress.org privacy policy: https://wordpress.org/about/privacy/
Wordfence Intelligence: 
* Optional. 
* Used only when a Wordfence Intelligence API key is configured and an administrator runs a scan that includes vulnerability matching. 
* Used to retrieve vulnerability data and match it locally against installed WordPress core, plugin, and theme versions. 
* Data sent: the configured Wordfence Intelligence API key is sent in an Authorization header when requesting the vulnerability feed. Installed software details are not sent by this plugin to the Wordfence Intelligence endpoint; matching is performed locally after the feed is retrieved. 
* Wordfence Intelligence terms: https://www.wordfence.com/wordfence-intelligence-terms-and-conditions/ 
* Wordfence privacy policy: https://www.wordfence.com/privacy-policy/
WordPress AI Client / Connectors: 
* Optional. 
* Used only when the administrator clicks Generate Client Report. 
* Data sent: sanitized scan findings, score, counts, and recommendations needed to generate a client-facing report. The plugin is designed not to send passwords, salts, API keys, raw logs, full user lists, or file contents. 
* The configured AI provider is controlled by the site owner’s WordPress Connector settings. 
* Terms and privacy policy: these depend on the AI provider configured by the site owner in WordPress. Site owners should review the selected provider’s terms and privacy policy before enabling AI reports.

Lockora Security Audit

Lockora Security Audit checks WordPress security posture, hardening, core integrity, vulnerabilities, and optional AI reports.

SW Site Doctor vs Lockora Security Audit