Free WordPress tools for agencies and developers.
The diagnostic checks we run on client sites every day, available for free on any WordPress site. Inspect security, performance, sitemaps, and code from the outside without installing any plugins.
Broken link checker
Checks every link and image on a page for 404s, broken images and redirect loops. Filter internal vs external and export to CSV.
Sitemap generator & validator
Crawls internal links, respects canonicals and noindex tags, and builds a clean, valid XML sitemap ready for Google Search Console.
Theme & plugin detector
Detects the active theme, version, page builder and plugins from public source, and flags known security CVEs.
Security & headers scanner
Audits HSTS, CSP, clickjacking protection, SSL and exposed XML-RPC or wp-login.php, graded A+ to F with copy-paste fixes.
Speed & TTFB diagnostic
Measures TTFB, page weight by JS, CSS and images, and Gzip/Brotli compression, with actionable speed fixes in order of impact.
Salt & secret key generator
Cryptographically secure secret keys and salts for wp-config.php, generated 100% in your browser. Copy or regenerate in one click.
All-In-One Health Check
Complete outside-in diagnostic: uptime, SSL certificate, security headers, plugin discovery, broken links, and performance in seconds.
Free tools check one site, once. SITEOPS guards your entire agency portfolio 24/7.
Connect your client sites to SITEOPS to run automated visual regression updates, 5-minute uptime checks, malware scans, and white-label client PDF reports on autopilot.
Frequently asked questions
Everything you need to know about our free WordPress developer utilities.
Are these WordPress tools really free?+
Yes. No signup and no credit card required. Each tool runs from the outside, just like a visitor would, with zero tracking or account gates.
Do I need to install anything on my WordPress site?+
No. Every tool works completely from the outside through public HTTP inspection. Nothing is installed, no plugin is needed, and no admin login is required.
Do you keep or sell scan results?+
Results are kept for 72 hours under an unlisted permalink so you can share audit reports with clients or teammates. After 72 hours, reports expire and are purged automatically.
How is this different from SITEOPS continuous monitoring?+
These free tools check one page, once, on demand. SITEOPS runs these checks across your entire client portfolio 24/7 on autopilot, alerts you before clients notice problems, and safely rolls back breaking plugin updates.