Technical Site Auditor is a powerful WordPress plugin that performs comprehensive technical audits of your website. It identifies issues across multiple categories and provides actionable recommendations to improve your site’s SEO, performance, security, and overall health.
The free version runs over 215 automated checks across 25 categories. The premium version adds WooCommerce auditing (45 store-specific checks), one-click auto-fixes with backups and undo, scheduled scans, and extra modules.
Key Features
Content Analysis
* Thin content detection (Unicode-aware word counting)
* Duplicate title and description checks
* Heading structure validation
* Link density and anchor text analysis
SEO Checks
* Meta title and description optimization
* Open Graph and Twitter Card validation
* Schema.org markup verification
* Robots.txt and XML sitemap analysis
* Canonical URL validation
Performance Optimization
* Image optimization recommendations (WebP/AVIF aware)
* Asset loading analysis (CSS/JS)
* Font loading checks (display parameter, preconnect)
* Database cleanup suggestions
* Server configuration checks (PHP version, compression, HTTP/2)
Security Audits
* SSL/HTTPS verification
* HTTP security header checks (verified via real requests)
* XML-RPC exposure detection
* REST API user enumeration probing
* debug.log exposure detection
* Open registration with elevated default roles
* PHP execution in the uploads directory
* wp-config.php file permissions
Plugin Hygiene
* Detects installed plugins that have been closed or removed from WordPress.org
* Flags plugins abandoned for years or untested with recent WordPress versions
* Reports pending updates and PHP/WordPress requirement conflicts
AI Visibility
* Shows which AI crawlers your robots.txt allows, blocks, or does not mention
* Optional llms.txt generator (see the FAQ for an honest note on this convention)
Email Deliverability
* SPF and DMARC DNS record checks for your domain
Link Analysis
* Broken internal link detection
* External link verification (with retry logic to avoid false positives)
* Redirect chain and loop analysis
* Accessibility checks (labels, alt text, skip links, iframes)
Database Health
* Autoload option monitoring (WordPress 6.6+ aware)
* Post revision cleanup suggestions
* Expired transient detection
* Spam and trash comment detection
Free vs Premium
Free Version
* Unlimited URL scanning
* Over 215 automated checks, including plugin hygiene and AI visibility
* Detailed fix guidance for every issue
* Export issues to CSV
Premium Version
* One-click auto-fix for many issues
* Safe .htaccess auto-fix (security headers, GZIP, caching) with automatic backup, health check and rollback
* One-click undo for file and settings fixes
* Database cleanups with row-level backups: deleted spam, revisions and other rows can be restored for 30 days
* Quick backup and full backup with safe, atomic restore
* Scheduled automated scans
* Email notifications
* WooCommerce auditing (45 store-specific checks, including REST API security)
* Premium modules:
* Redirect Manager
* Meta Title/Description Manager
* Breadcrumbs Generator
Integrations
Technical Site Auditor detects and integrates with popular plugins:
- Yoast SEO
- Rank Math
- All in One SEO
- SEOPress
- WooCommerce
- Elementor
- Divi Builder
- WPBakery Page Builder
External Services
This plugin connects to the following external services:
WordPress.org API
This plugin uses the official WordPress.org API to check for WordPress core updates and verify core file integrity.
What it does:
* Checks if your WordPress installation is up to date
* Verifies that core WordPress files have not been modified (security check)
Data sent:
* Your WordPress version number
* Your site locale (language setting)
When data is sent:
* Only during a site audit scan, when the “WordPress Updates” or “Core File Integrity” checks are enabled
Service provider: WordPress.org (Automattic)
* Terms of Service
* Privacy Policy
WordPress.org Plugin Directory API
When the Plugin Hygiene check is enabled, the plugin queries the official WordPress.org plugin information API (api.wordpress.org/plugins/info/1.2/) for each installed plugin.
What it does:
* Checks whether installed plugins are still listed in the WordPress.org directory or have been closed
* Checks when each plugin was last updated and which WordPress version it was tested with
* Checks each plugin’s declared minimum PHP and WordPress requirements
Data sent:
* The directory slug (folder name) of each installed plugin. No personal data, site URL, or license information is transmitted.
When data is sent:
* Only during a site audit scan when the Plugin Hygiene check is enabled. Responses are cached locally for up to 24 hours, and at most 30 lookups are performed per scan. Plugins that declare their own update source (Update URI header) are never sent to WordPress.org.
Service provider: WordPress.org (Automattic)
* Terms of Service
* Privacy Policy
Public DNS lookups
When the email deliverability check is enabled, the plugin performs DNS TXT lookups for your own site’s domain (and its _dmarc subdomain) to see whether SPF and DMARC records exist. These are standard public DNS queries made by your server; no data about your site is transmitted beyond the domain name being looked up. The check is skipped entirely for local and development domains.
Outbound link checks
During a scan, the plugin makes HTTP requests to your own site’s pages and, when the external link checker is enabled, to external URLs found in your content in order to verify they still work. No personal user data is ever transmitted.