01
Transport and headers
HTTPS, TLS status, mixed content, security headers, and a visible WordPress version when the page exposes it.
Website health for people who have a business to run
See what your WordPress site is quietly telling visitors.
A focused audit of public security, SEO, content, crawlability, and performance signals. Written in plain language. Built to avoid aggressive scanning.
northline.examplePublic page
78Healthy foundation
Priority 01
Add a site-specific Content Security Policy after validating required scripts and services.
Explainable checks Bounded requests SSRF-protected backend PDF and JSON reports
A useful first pass
Three disciplines, one business-readable report.
The dashboard avoids pretending that one score can prove a site is secure. It shows the evidence, the limits, and the next action.
02
Search and content
Titles, descriptions, headings, image alternatives, robots.txt, XML sitemaps, and a bounded broken-link sample.
03
Delivery basics
HTML response timing, document weight, resource clues, image size signals, and mobile viewport checks.
One page. Bounded requests. Useful answers.
Start with the URL a customer would visit.
SiteGuard reads public signals only. It does not log in, submit forms, test passwords, run exploits, or crawl an entire site.
Non-invasive No credentials or exploit probes
Explainable Every finding includes evidence and a next step
04
Responsible by default
The most important feature is what the tool refuses to do.
SiteGuard Lite does not test passwords, submit login forms, enumerate accounts, fire exploit payloads, scan private networks, or claim to certify security.
It makes a small number of public requests, records observable evidence, and explains where a browser test or professional review is still needed.