wprecon.com
Reconnaissance & Security Testing for WordPress
WordPress Version
Detect WordPress Version, a simple measure of how well a site is maintained.
SSL Certificate
Does the site have SSL forced. If not why? There is no reason not to be using SSL on all sites.
Plugins / Themes
Discover plugins / themes in use without any invasive security scanning. Knowledge.
Threat Intel
Blacklist and Threat Intelligence Checks. Know when you have a problem.
Infrastructure
Which networks are hosting the sites resources. Open Source Intelligence and Simple Hosting Checks.
Malware
Fast Google & Virus Total Malware lookup, to check for sites having reputation or security problems.
“A lot of the early adoption of WordPress was actually from thousands and millions of individually hosted instances, so a lot of the people who ran WordPress were on their own.”
– Matt Mullenweg
Security Operations For Tech & Security Professionals.
Over at HackerTarget.com we built a security testing platform that keeps an eye on an organizations attack surface; including WordPress installations.
29% of Top 1M
All Sites
60’285
Plugins
22% of Top 1M Ecommerce
Woocommerce Powered