wpscan.com
WPScan: WordPress Security Scanner
Last scanned Jul 27, 2026, 2:43 PM
Overall score
Excellent
Summary
WPScan is an enterprise vulnerability database for WordPress. This website uses WordPress hosted on AUTOMATTIC - Automattic, Inc, US. SEO is good (80/100) and accessibility is excellent (100/100). Security scores good (85/100) and performance excellent (100/100). Top issue: Multiple H1 headings found.
WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
- United States
- Hosted on AUTOMATTIC - Automattic, Inc, US
Top issues to fix
7 issues found · 1 high priority
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
1 cookie without Secure/HttpOnly flags
SecuritySet Secure and HttpOnly on session cookies so they can't leak over HTTP or be read by injected scripts.
Multiple H1 headings found
SEOKeep a single H1 per page and demote the others to H2/H3.
No structured data (JSON-LD) found
SEOAdd JSON-LD (Organization, Article, Product…) to become eligible for rich results.
sitemap.xml not found
SEOPublish an XML sitemap and reference it from robots.txt to speed up page discovery.
+1 more issue — details in the sections below.
SEO
3 issue(s) found
Performance
996 ms
Security
HTTPS & header checks
Accessibility
0 issue(s) found
Organization
Company details published in this site's own structured data.
WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
Contact
Email, phone, and address published on this site's own pages.
Meta tags
- Title
- WPScan: WordPress Security Scanner
- Description
- WPScan is an enterprise vulnerability database for WordPress. Be the first to know about vulnerabilities affecting your WordPress core, plugins & themes.
- Canonical
- https://wpscan.com/
- Language
- en
- Charset
- UTF-8
- Viewport
- width=device-width, initial-scale=1
- Robots meta
- max-image-preview:large
- Manifest
Technologies
Detected frameworks, languages, and tools.
Hosting & CDN
- Hosting provider
- AUTOMATTIC - Automattic, Inc, US
- CDN provider
- —
- IP address
- 192.0.78.24
- ASN
- AS2635 (AUTOMATTIC - Automattic, Inc, US)
DNS records
| Type | Value |
|---|---|
| A |
|
| AAAA | — |
| MX |
|
| TXT | — |
| NS |
|
| CAA | — |
| CNAME | — |
| IPv6 support | No |
TLS / SSL certificate
- Version
- TLS 1.3
- Issuer
- Google Trust Services
- Subject
- tls.automattic.com
- Valid from
- Jul 27, 2026
- Valid to
- Oct 25, 2026
- Days until expiry
- 89
- SAN domains
- tls.automattic.com, crescentmooneditorial.com, pseguide.com, sassystylist.com, whiskersandwine.club, winfreeworksmontana.com, wingafarms.com, wisskomm-kolleg.de, wordsbycoco.com, wordup.blog, wordy.blog, workingclassstudiesassociation.org, workplayeat.com, worte-wie-wald.blog, wotyproject.com, wpscan.com, writebrainleftbrain.com, writerbychance.com, wurtsboroairporthistory.com, www.crescentmooneditorial.com, www.pseguide.com, www.sassystylist.com, www.wbbblog.com, www.whiskersandwine.club, www.wordsbycoco.com, www.wordy.blog, www.workingclassstudiesassociation.org, www.workplayeat.com, www.workvacationrepeat.com, www.wotyproject.com, www.writeallnite.com, www.writebrainleftbrain.com, www.writerbychance.com, www.writingistranslation.net, www.zimbobaggins.com, www.zimssummerspot.com, zimbobaggins.com, zimssummerspot.com
Security headers
- Strict-Transport-SecurityEnabled
- Content-Security-PolicyMissing
- X-Frame-OptionsEnabled
- X-Content-Type-OptionsMissing
- Referrer-PolicyMissing
- Permissions-PolicyMissing
Compression: gzip · 1 cookie(s) observed
Content & assets
Headings
H1 2 · H2 3 · H3 4
Links
21 internal · 27 external · 1 broken
Images
24 total · 0 missing alt
Scripts / Styles
85 scripts · 11 stylesheets
JS / CSS size
247 KB · 264 KB
Page size
189 KB
Robots.txt & Sitemap
- robots.txt
- Found
- Disallow rules
- 10
- sitemap.xml
- Not found
- URLs in sitemap
- 0
SEO issues
- Multiple H1 headings found
- No structured data (JSON-LD) found
- sitemap.xml not found
Accessibility issues
No accessibility issues detected.
Scan details
- Requested URL
- https://wpscan.com
- Final URL
- https://wpscan.com
- HTTP status
- 200
- HTTP version
- HTTP/2
- Response time
- 993 ms
- HTML size
- 189 KB
- Redirect chain
- https://wpscan.com
See something wrong on this report? Request a correction
Related websites
Same technology stack
pnc.gob.gt
PNCdeGuatemala | Proteger y Servir
dayoneapp.com
Day One Journal App | Your Journal For Life
woocommerce.com
WooCommerce
woo.com
WooCommerce
malware.expert
Commercial ModSecurity WAF Rules and ClamAV Malware Signatures - Malware Expert
onecomm.bm
One Communications | Home Page
Same hosting provider
organon.com
Home | Organon
whitehouse.gov
The White House
mediavalet.com
Enterprise Digital Asset Management | The Best DAM Software
iccwbo.org
ICC | International Chamber of Commerce
montrealgazette.com
Montreal Gazette | Montreal News, Stories and Headlines
hpv.com
Learn About HPV Vaccination
Frequently asked questions
- What technology does wpscan.com use?
- wpscan.com is built with React, WordPress, WooCommerce, Nginx.
- Is wpscan.com secure (HTTPS)?
- Yes. wpscan.com uses TLS 1.3 with a certificate issued by Google Trust Services, valid until Oct 25, 2026.
- Who hosts wpscan.com?
- wpscan.com is hosted on AUTOMATTIC - Automattic, Inc, US.
- What is wpscan.com's SEO score?
- wpscan.com scored 80/100 for SEO in the latest analysis (great).
- What is wpscan.com's overall website score?
- wpscan.com has an overall SiteGraph score of 90/100, combining SEO, performance, security, and accessibility.
OpenGraph & Twitter Card
OpenGraph
Twitter Card