Free tool
Known vulnerabilities, HTTPS, security headers, speed, and email in one read-only scan. Plain words, and what to fix first.
example.com
MountDev Maintenance looks after this. How
No known vulnerabilities in this version.
MountDev Performance looks after this. How
Only 2 of 10 images weighed are WebP or AVIF.
How to fix: Convert images to WebP or AVIF.
Every check reads only what the site and its public DNS show. Nothing is signed in to, submitted, or attacked.
Yes. It only reads what any visitor can see: the home page, a few public files, and public DNS. It never signs in, submits a form, or tries an attack.
A scan from outside sees only what a site shows publicly. Plugins that load nothing on the home page, or hide their version, stay hidden. A scan from inside WordPress, which MountDev Maintenance runs every day, sees every version.
No. We measure from a server: how fast the site answers, how heavy the page and images are, and how well it caches. Core Web Vitals come from real visitors' browsers, so we do not claim them here.
Only for 10 minutes in a cache, so a shared link opens at once. We keep nothing about you, and the link holds only the domain.