Observed arrival · 2026-11-12
SecureCrawl audits WordPress from inside the server
SecureCrawl says it connects to WordPress hosting over SSH, compares core and plugin files with official releases, and checks the database for unexpected content.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- WordPress site owners and agencies
- Worth noticing
- Its sample report flags hidden plugin files, encoded code, unexpected database content, and tables left by removed plugins.
Field notes
The setup described on the page uses an SSH key added through the hosting panel; it says the connection is read-only and the key can be removed. The audit covers more than files: it also checks server rules, uploads, database content, and tables left by removed plugins. The sample report is labeled for example.org, so its counts and findings illustrate the interface rather than establish results for a real customer.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
⊠LoginAccess appeared gated
$PaidCommerce or pricing visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue