Title: WP Scanner – Performance and Security Author: A5hleyRich Published: မေ 1၊ 2016 Last modified: မေ 29၊ 2016 --- Search plugins ![](https://ps.w.org/wp-scanner/assets/banner-772x250.png?rev=1411919) This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://ps.w.org/wp-scanner/assets/icon-256x256.png?rev=1411919) # WP Scanner – Performance and Security By [A5hleyRich](https://profiles.wordpress.org/a5hleyrich/) [Download](https://downloads.wordpress.org/plugin/wp-scanner.1.0.2.zip) * [Details](https://mya.wordpress.org/plugins/wp-scanner/#description) * [Reviews](https://mya.wordpress.org/plugins/wp-scanner/#reviews) * [Installation](https://mya.wordpress.org/plugins/wp-scanner/#installation) * [Development](https://mya.wordpress.org/plugins/wp-scanner/#developers) [Support](https://wordpress.org/support/plugin/wp-scanner/) ## Description Monitor your site’s load time, performance and security using [WP Scanner](https://wpscanner.io). Gain an insight into how quickly your site loads for visitors over time and receive suggestions on how to improve performance. Ensure your site is secure by monitoring file changes, permissions, server headers and other security concerns. #### Metrics View important metrics about your WordPress install, including: * Load time * WordPress version * PHP version * Plugin updates * Content breakdown #### Performance The following performance rules are checked when scanning your site: * Use PHP 7 or HHVM * Enable object caching * Minimize HTTP Requests * Use a Content Delivery Network * Avoid empty src or href * Add an Expires or a Cache-Control Header * Gzip Components * Put StyleSheets at the Top * Put Scripts at the Bottom * Avoid CSS Expressions * Make JavaScript and CSS External * Reduce DNS Lookups * Minify JavaScript and CSS * Avoid Redirects * Remove Duplicate Scripts * Configure ETags * Make AJAX Cacheable * Use GET for AJAX Requests * Reduce the Number of DOM Elements * No 404s * Reduce Cookie Size * Use Cookie-Free Domains for Components * Avoid Filters * Do Not Scale Images in HTML * Make favicon.ico Small and Cacheable #### Security The following security rules are checked when scanning your site: * Verify WordPress Core Files * Verify Directory and File Permissions * Serve Site Over HTTPS * Keep Plugins Updated * Keep WordPress Updated * Keep PHP Updated * Disable Debug Display * Disable File Editing * Remove Accounts with “ Admin” Username * Change the Default Table Prefix * Configure Public-Key-Pins Header * Configure Content Security Policy Header * Configure X-Frame-Options Header * Configure X-Content-Type-Options Header * Configure X-Xss-Protection Header * Configure Strict-Transport-Security Header * Disable Server Header * Disable X-Powered-By Header ## Screenshots * [[ * Dashboard showing latest scan results for each site * [[ * Metrics showing load time, versions and content breakdown * [[ * Performance scores with recommendations on how to improve them * [[ * Security scores with recommendations on how to improve them * [[ * Headers returned when scanning the site ## Installation 1. Upload the plugin files to the `/wp-content/plugins/wp-scanner` directory, or install the plugin through the WordPress plugins screen directly. 2. Activate the WP Scanner through the ‘Plugins’ screen in WordPress. 3. Create a free account at [https://wpscanner.io](https://wpscanner.io) to generate your API keys. 4. Visit the Settings -> WP Scanner screen and enter your API keys. ## FAQ Why do I need to create an account at wpscanner.io? Scanning a site for performance and security issues is a resource intensive process, which can take time to complete. With a **free** [WP Scanner](https://wpscanner.io) account we offload the scanning process to our own servers, so as not to impact site performance. Doing so also allows us to detect additional performance and security issues, which we couldn’t from the plugin alone. Is WP Scanner free to use? Yes, WP Scanner is completely free to use for 1 site. If you need to scan additional sites, premium [plans](https://wpscanner.io/#pricing) are available. Is WP Scanner secure? Absolutely! No sensitive data is sent to our servers. Will this plugin impact the performance of my website? No, it will not. ## Reviews ![](https://secure.gravatar.com/avatar/85cd797876de53531b77ed37565fcf9fd5a7bae47d5139120cec9f63d17b706b? s=60&d=retro&r=g) ### 󠀁[Awesome site scanner](https://wordpress.org/support/topic/awesome-site-scanner/)󠁿 [Luke Cavanagh](https://profiles.wordpress.org/lukecavanagh/) စက်တင်ဘာ 3၊ 2016 Works very well and gives solid performance and security suggestions. ![](https://secure.gravatar.com/avatar/20011de485eeea26b5582c75daaab217937832762b5d5f551d34d07f74138bb0? s=60&d=retro&r=g) ### 󠀁[Awesome App](https://wordpress.org/support/topic/awesome-app-15/)󠁿 [Gilbert Pellegrom](https://profiles.wordpress.org/gilbitron/) စက်တင်ဘာ 3၊ 2016 Great service. Well worth the money! [ Read all 2 reviews ](https://wordpress.org/support/plugin/wp-scanner/reviews/) ## Contributors & Developers “WP Scanner – Performance and Security” is open source software. The following people have contributed to this plugin. Contributors * [ A5hleyRich ](https://profiles.wordpress.org/a5hleyrich/) [Translate “WP Scanner – Performance and Security” into your language.](https://translate.wordpress.org/projects/wp-plugins/wp-scanner) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wp-scanner/), check out the [SVN repository](https://plugins.svn.wordpress.org/wp-scanner/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wp-scanner/) by [RSS](https://plugins.trac.wordpress.org/log/wp-scanner/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### WP Scanner 1.0.2 * Bug fix: Unable to activate sites. #### WP Scanner 1.0.1 * Bug fix: Core files incorrectly showing as modified when using non-standard locale. #### WP Scanner 1.0 * Initial plugin release. ## Meta * Version **1.0.2** * Last updated **10 နှစ် ago** * Active installations **40+** * WordPress version ** 3.5 or higher ** * Tested up to **4.5.33** * Language * [English (US)](https://wordpress.org/plugins/wp-scanner/) * Tags * [performance](https://mya.wordpress.org/plugins/tags/performance/)[scan](https://mya.wordpress.org/plugins/tags/scan/) [scanner](https://mya.wordpress.org/plugins/tags/scanner/)[scanning](https://mya.wordpress.org/plugins/tags/scanning/) [security](https://mya.wordpress.org/plugins/tags/security/) * [Advanced View](https://mya.wordpress.org/plugins/wp-scanner/advanced/) ## Ratings 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/wp-scanner/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/wp-scanner/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/wp-scanner/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/wp-scanner/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/wp-scanner/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/wp-scanner/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wp-scanner/reviews/) ## Contributors * [ A5hleyRich ](https://profiles.wordpress.org/a5hleyrich/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wp-scanner/)