Guardfos Scanner

Guardfos Scanner is a free WordPress and WooCommerce security scanner that shows you exactly what your site exposes to the outside world - the same surface an attacker sees before they ever attempt anything.

It runs entirely externally: no plugin to install, no login, no access to your files. You enter your URL and, in under a minute, get a clear report covering the configuration and hardening signals that matter most: HTTPS/SSL setup and HTTP-to-HTTPS redirect enforcement, HSTS, security headers, XML-RPC exposure, WordPress version disclosure, accessible debug.log and readme.html files, login-page discoverability, user enumeration, web application firewall presence, mixed-content issues, and WordPress core update status.

The report is written for store owners, not just developers. For a WooCommerce store, a single exposed weakness can mean a compromised checkout, lost orders, and chargebacks - so spotting it early matters.

The scanner is guardfos's free starting point. The company itself offers fully managed WordPress and WooCommerce security - hardening, scheduled updates with monitoring, a web application firewall, off-site backups, and hands-on malware removal and incident response, handled for you at the infrastructure level rather than through another plugin. Plans are tiered, and every plan includes the guardfos trust badge for your store.

Run a free scan at guardfos.com/scanner, or see the managed plans at guardfos.com.