Description
Recap Site Auditor scans your WordPress site for the problems that quietly hurt it – insecure settings, risky configuration, outdated software, and weak account hygiene – then fixes them for you on confirm, with undo on everything it changes.
Detection and fixing are 100% deterministic: the plugin’s own validated code finds every issue and applies every fix. There is no AI in the loop, nothing is sent to a third party, and every change is reversible.
Free features
- “Scan now” across your site’s security, configuration, updates, and user hygiene, grouped into clear areas (Security, Platform, Users, Environment)
- A 0-100 Site Health score with a live trend across scans
- Fixes with full undo – make your site visible to search engines, disable XML-RPC, hide your WordPress version, block user enumeration, add security headers, disable the file editor, stop directory listing, and upgrade insecure (http) images to https
- “Revert all fixes” to undo everything Recap Site Auditor changed, in one step
- Detect-only checks for the things only you should change (debug mode in production, exposed install files that reveal your WordPress version, default admin usernames, too many administrators, EOL PHP, and available core / plugin / theme updates)
- Choose which areas to scan
- An activity log of what was scanned and fixed
- Clean uninstall: deleting the plugin reverts every fix it applied and removes all its data – deactivating keeps everything, so you can pause and resume
Upgrade to Pro
Upgrade at recapwp.com for the full auditor: live PHP-error monitoring, performance checks, stale-content detection, and WooCommerce checks; the deeper security suite (modified-core integrity, SSL-expiry monitoring, and a built-in brute-force login limiter); the broken-link crawler (find dead links and orphan pages and create 301 redirects); the redirect manager; the on-page Frontend Auditor that inspects each page live in your browser and flags SEO issues in context (missing meta descriptions, missing alt text, thin content) alongside accessibility and broken links; the “Ask Recap” AI assistant; an actor-attributed audit log; and automatic background updates.
Screenshots




Installation
- Upload the
recap-appfolder to/wp-content/plugins/, or install through Plugins > Add New > Upload. - Activate Recap Site Auditor through the Plugins screen.
- Open Recap > Audit and click “Scan now”.
- Review the findings and apply the fixes you want – every fix can be undone.
FAQ
-
Will fixes break my site?
-
Every Free fix is a reversible setting or file change, applied only when you confirm it, and each one has an Undo. “Revert all fixes” undoes everything at once. The higher-risk items are detect-only – Recap tells you what to change but doesn’t change them for you.
-
Does it use AI or send my data anywhere?
-
No. Detection and fixing are entirely deterministic and run on your own server. Nothing is sent to a third party. (The Pro “Ask Recap” assistant is optional and bring-your-own-key.)
-
What happens to my data if I deactivate or delete the plugin?
-
Deactivating changes nothing – your audit findings, fix history, logs, and settings are all kept, so you can reactivate anytime. Deleting the plugin is a clean uninstall: it first reverts every fix Recap applied (returning your site to its pre-fix state), then removes all Recap data. So deactivate to pause, delete to fully remove.
-
Does it check for broken links?
-
Broken-link crawling, orphan-page detection, and redirects are part of Recap Site Auditor Pro. The Free version covers security hardening basics, configuration, updates, and user-account hygiene.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Recap Site Auditor” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Recap Site Auditor” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
2.6.7
- First public release on WordPress.org.
- Deterministic site auditor across security hardening, configuration, updates, and user accounts.
- Fixes with full undo, plus “Revert all fixes”.
- Site Health score with a trend across scans, and an activity log.
- Clean uninstall: deleting the plugin reverts every fix it applied, then removes all its data.
Earlier
See https://www.recapwp.com for the full history.
