Free tool
What is your website giving away?
Enter your address and we'll work out what your site is built on, then tell you what it's exposing. On WordPress that means your version, your plugin versions against their current releases, and whether your login names are being published. On Wix, Squarespace or Shopify it means something different — and we'll be straight with you about that.
No sign-up. We only read pages your site already publishes — no logins attempted, no vulnerability testing.
Why the report is longer for some sites than others
Because the risk genuinely is. WordPress gives you complete control of your site, and the price of that control is that every update is yours to run. A site with twelve plugins has twelve separate pieces of software that each need maintaining, written by twelve different authors of varying diligence. That is, by a wide margin, the most common way small business websites get compromised — not clever hacking, just a contact-form plugin nobody updated since 2021.
Wix, Squarespace and Shopify take that away from you. They patch their own software continuously and you have no version to fall behind on. So the report for those sites is short, and it should be — we'd rather say "there's less to check here" than pad it out with findings that don't matter to make it look thorough.
What replaces it is the part nobody tells hosted-platform owners: sites like yours almost never get broken into through the software. They get broken into through the login. A reused password, a convincing phishing email, or the agency account from three years ago that's still an administrator. No scanner can see any of that, which is exactly why it goes unaddressed.
What we don't do
This check is entirely passive. It reads pages your site publishes to anyone by default — the same things your browser downloads when you visit. It does not attempt to log in, guess file paths, or test whether anything is exploitable. We also don't publish vulnerability identifiers for the versions we find: knowing you're three releases behind tells you everything you need to fix it, without turning a free tool into a convenient way for someone else to go shopping.
Our other free tools
The email spoofing check tells you whether someone can send email pretending to be your business — worth running whatever platform your site is on, because it sits outside all of them. The SEO analysis covers why you may not be showing up in Google.