For WordPress sites: known CVEs in core, themes, and plugins, outdated or abandoned software, and common malware signatures. For any website: exposed ports, outdated server software, weak SSL/TLS configuration, and other common exploit paths attackers look for first.

Both cover the same checks — the difference is how fast you find out. Weekly is a solid baseline for most sites. Daily is built for stores, high-traffic sites, or anything where a same-day head start on a new vulnerability actually matters.

All three, together. Automated scanning covers known vulnerability databases and signatures at scale, specialized AI-assisted tooling helps us correlate findings and cut through false positives, and our team manually reviews anything flagged as significant before it reaches you — so you get a real assessment, not just a raw scanner dump.

This plan is scanning and reporting only. If we find something serious, we'll flag it right away — any actual fix work is billed separately through our security & malware removal service, or already included if you're on one of our monthly care plans.

Yes. WordPress is our specialty and where we go deepest — checking core, theme, and plugin-level CVEs specifically — but the underlying scanning and review process works for any website, regardless of platform.

No. Cancel anytime — no long-term commitment required.