WP Scanner – Performance and Security
Monitor your site’s load time, performance and security using WP Scanner. Gain an insight into how quickly your site loads for visitors over time and receive suggestions on how to improve performance. Ensure your site is secure by monitoring file changes, permissions, server headers and other security concerns.
Metrics
View important metrics about your WordPress install, including:
- Load time
- WordPress version
- PHP version
- Plugin updates
- Content breakdown
Performance
The following performance rules are checked when scanning your site:
- Use PHP 7 or HHVM
- Enable object caching
- Minimize HTTP Requests
- Use a Content Delivery Network
- Avoid empty src or href
- Add an Expires or a Cache-Control Header
- Gzip Components
- Put StyleSheets at the Top
- Put Scripts at the Bottom
- Avoid CSS Expressions
- Make JavaScript and CSS External
- Reduce DNS Lookups
- Minify JavaScript and CSS
- Avoid Redirects
- Remove Duplicate Scripts
- Configure ETags
- Make AJAX Cacheable
- Use GET for AJAX Requests
- Reduce the Number of DOM Elements
- No 404s
- Reduce Cookie Size
- Use Cookie-Free Domains for Components
- Avoid Filters
- Do Not Scale Images in HTML
- Make favicon.ico Small and Cacheable
Security
The following security rules are checked when scanning your site:
- Verify WordPress Core Files
- Verify Directory and File Permissions
- Serve Site Over HTTPS
- Keep Plugins Updated
- Keep WordPress Updated
- Keep PHP Updated
- Disable Debug Display
- Disable File Editing
- Remove Accounts with “Admin” Username
- Change the Default Table Prefix
- Configure Public-Key-Pins Header
- Configure Content Security Policy Header
- Configure X-Frame-Options Header
- Configure X-Content-Type-Options Header
- Configure X-Xss-Protection Header
- Configure Strict-Transport-Security Header
- Disable Server Header
- Disable X-Powered-By Header
Download & install the zip archive
The plugin package installer can be downloaded from the WP2E project tab called “code”.
1 – Select the version to download if this option is available otherwise the “latest” version of the main plugin will be used.
2 – After downloading the zip archive install the plugin package installer in you local environment and activate the script from the plugin list.
3 – Under the section “Plugins” of the admin dashboard you should see a new “Dependencies & Licenses” link. Follow the instructions from this panel to finalize the installation of the missing dependencies.
-
- Give a name to your project
-
- Download the Installer Package
-
- Install & activate the plugin locally
-
- Install the suggested dependencies
Tips: Use the WP2E panel to add/suggest new dependencies to the local installation. Press F5 in the list of dependencies if the changes are not displayed right away.