New audit

content-refresher.com

Scanned May 5, 2026, 10:51 AM

Run a fresh audit — Upgrade
100
A · Safe
0
Plugins Detected
0
Active Vulnerabilities
0
Outdated Plugins
0
Abandoned

Security Assessment

Key findings for content-refresher.com

  • No known vulnerabilities detected in installed plugins.
  • Security headers are well configured.

WordPress

Version hidden
Core installation

Active Theme

Not detected

Hosting Provider

Unknown
Infrastructure

Detected Plugins

0 total
PluginVulnerabilities

Unlock the full security analysis

Get the full breakdown of your site's security posture:

All 0 detected plugins
CVE details & patch status
Security header analysis
Exposed paths & TLS audit
DNS & email security
CT log subdomain discovery

Security Report

one-time
$49USD
  • Full report for this site
  • Every detected plugin & CVE
  • Remediation guidance
  • No re-audit after fixes
Get Report — $49
Recommended

Report + Re-audit

best value
$99USD
  • Everything in Security Report
  • One complimentary re-audit within 90 days
  • Verify your fixes actually closed the findings
  • Clean-record badge for your site

Guided Remediation

small business
$299USD
  • Everything in Report + Re-audit
  • 15–30 min expert consult to triage findings
  • Prioritized action plan for your site
  • Optional partner handoff for fixes
Get Guided Remediation — $299

One-time payment · Instant access · No subscription required

Not ready to buy? We'll send you a one-time free alert

if we detect a new vulnerability affecting your plugins.

One free alert · Continuous monitoring available with a paid plan

Security Posture

A
Security Headers
A
TLS/SSL
A
Exposed Paths
A
Email Security

Security Headers

100/100
Content-Security-Policy

CSP is configured, helping prevent XSS and injection attacks.

Strict-Transport-Security

Strong HSTS policy with includeSubDomains.

X-Frame-Options

Clickjacking protection is enabled.

3 more checks — unlock full report to see all

TLS/SSL Certificate

Issuer
E7
Expires
74 days
Protocol
TLSv1.3
Wildcard
No

Exposed Paths & Login Security

0 exposed

No critical paths exposed. Unlock for the full breakdown.

DNS & Email Security

SPF

SPF record with hard fail (-all) — strong email authentication.

DMARC

DMARC policy is set to quarantine — good protection against spoofing.

DKIM

DKIM record found for selector "default". Email signatures can be verified.

Certificate Transparency

4 certificates found

Infrastructure

Server Software

Server: Apache

X-Powered-By

X-Powered-By header is not exposed.

Web Application Firewall

No WAF detected. Consider adding one for additional protection.