BruteBank

// Free WordPress security scanner

Find the gaps.
Plan your defense.

Check your WordPress website for publicly visible security risks and get practical recommendations. No installation. No password sharing. No credit card.

Public signals.
Practical next steps.
No installation required.

  1. 01 — Tell us about your site.
    Enter your name, website, and email, and agree to receive BruteBank emails.
  2. 02 — Confirm your email.
    Use our secure email link to sign in to the scanner.
  3. 03 — Scan and take action.
    Review the findings and how to address them.
HTTPS & headers
Core version signals
Public user endpoints
XML-RPC & file listings

Scan reports are automatically deleted after 30 days. You can delete them sooner from Recent scans. This does not delete your account or change your email preferences.

// Your first step

Unlock your free scan.

We’ll send a verification link. Confirm it before you can run a scan.

Get two free scans per email address. Active paid subscribers have unlimited scans.

We store your details, consent record, and scan results to provide this service. See our Privacy Policy. Confirmation creates a scanner-only login, not a paid subscription.

Have a BruteBank account? Use the scanner or log in.