Klydexa Website Audit

Description

Klydexa Website Audit inspects eight areas of your WordPress site and reports what is holding it back, ranked by how much it actually costs you. Where a problem can be resolved safely from within WordPress, the plugin offers a one-click fix.

Every check runs on your own server, against your own site. The plugin reads your settings and database directly, and makes a small number of loopback HTTP requests to your own front end so it can inspect the HTML your visitors actually receive. Nothing is sent to a third party unless you explicitly enable the optional PageSpeed Insights lookup.

Full documentation is available at klydexa.com/website-audit.

What it checks

• SEO – indexing settings, permalinks, titles and meta descriptions, heading structure, canonical URLs, Open Graph tags, structured data, XML sitemap and robots.txt.
• Performance – PHP version, page and object caching, server response time, document weight, asset counts, render-blocking scripts, compression, autoloaded options, revision and transient build-up, database overhead.
• Core Web Vitals – LCP image prioritisation, layout-shift sources, font-display strategy, third-party script load, connection hints, plus optional real-user field data from Google.
• Accessibility – alt text, document language, heading order, landmarks, skip links, accessible names, form labels, iframe titles, duplicate IDs, zoom restrictions.
• Security – HTTPS and mixed content, HSTS, pending updates, file editing, debug exposure, XML-RPC, response headers, version disclosure, directory browsing, username enumeration.
• Mobile usability – viewport tag, responsive styling, srcset coverage, fixed-width elements, touch icons, tappable phone numbers.
• User experience – 404 handling, site search, privacy policy, timezone, comment spam exposure, navigation, broken internal links.
• WooCommerce – store page setup, HPOS, secure checkout, legacy API, product data completeness, cart fragments, asset loading, Product schema.

The WooCommerce category and its fixes only appear when WooCommerce is active. Plugin findings elsewhere in the report – pending updates, plugin count – cover active plugins only.

Every check is described in detail at What it checks.

One-click fixes

Fixes come in two kinds, and the plugin always tells you which is which before you apply it.

Reversible switches are applied live through WordPress hooks. Turning one off removes its behaviour completely. Nothing is written to your theme, your .htaccess or your wp-config.php, so uninstalling the plugin cleanly undoes every switch.

One-off actions change data or settings directly – emptying spam, deleting old revisions, updating an option. Some cannot be undone. Each one states exactly what it will do, and anything that deletes data or changes visitor-facing behaviour is marked “Review before applying” and asks for confirmation.

Each fix is listed individually, with exactly what it changes, at One-click fixes.

Reading the report

Each category is scored out of 100 and graded, with an overall score on the dashboard. Findings are ranked Critical, Warning, Notice or Passed, so you can work top-down. You can filter the whole report by severity or search it by keyword.

See Reading the report for how scoring works.

Scheduling

Audits can run automatically daily, weekly or monthly via WP-Cron, with an optional email summary. Scheduling is off by default.

Documentation

• Overview – what the plugin does, at a glance.
• What it checks – all eight categories, check by check.
• One-click fixes – every fix and what it changes.
• Documentation – installation, scoring, settings, developer hooks.
• FAQ – the most common questions, answered.
• Support – troubleshooting steps and how to report a problem.
• Changelog – what changed in each release.

External services

This plugin can contact one external service. It is disabled by default and nothing is transmitted until you enable it.

Google PageSpeed Insights API

This service is used only when you tick “Fetch real-user Core Web Vitals from Google” under Klydexa Website Audit → Settings. It retrieves Chrome UX Report field data – real-user Largest Contentful Paint, Interaction to Next Paint and Cumulative Layout Shift – for your site’s origin.

• What is sent: the public homepage URL of your site, and your PageSpeed Insights API key if you have chosen to enter one. No page content, post data, customer data, user data or credentials are transmitted.
• When it is sent: only while an audit is running and only while the option is enabled. Responses are cached for six hours to limit repeat requests.
• Service provider: Google. API documentation: https://developers.google.com/speed/docs/insights/v5/get-started
• Terms of service: https://developers.google.com/terms
• Privacy policy: https://policies.google.com/privacy

No other external service is contacted. The plugin makes loopback HTTP requests to your own site’s front end in order to read its rendered HTML; those requests never leave your server’s network.