Scan your WordPress site for vulnerabilities directly from the WP admin dashboard.
What the plugin does
One-click scanning - trigger a full Shieldome scan from WP admin
Security grade widget - grade A-F shown in "At a Glance" dashboard widget
OWASP Top 10 - SSL, headers, injection, access control, and more
Every installed plugin checked - sends the list of installed plugins and themes (names and versions only, can be turned off) so each one, active or inactive, is matched against 40,000+ published vulnerabilities (Wordfence Intelligence), not only those visible from outside
Alerts between scans - the list is also sent once a day, so you hear about a newly published vulnerability in an installed plugin the day it appears (Pro and Agency plans)
Direct report link - one click to the full Shieldome scan report