Golive Audit

Description

Golive Audit answers one question before you launch or hand a site to a client: is this site ready?

It runs 19 read-only checks that WordPress’s built-in Site Health does not cover, understands whether it is looking at a production or a staging site, and produces a report you can hand to the client.

What it checks

• Search engine visibility that matches the environment (indexable in production, hidden on staging)
• Site URLs: no localhost, IP-address or staging host left behind; WordPress Address and Site Address agree
• robots.txt that blocks the whole site, pretty permalinks, XML sitemap, site title and tagline, site icon, front page
• Leftover sample content, comment and pingback defaults, privacy policy page
• Unique salts and keys, the “admin” user and too many administrators, open registration that grants a privileged role, the file editor, a leftover debug.log
• A real administration email address, a configured mail transport, the timezone

Core Site Health already covers PHP and WordPress versions, HTTPS, updates, caching and debug mode, so those are deliberately not repeated.

Built for handoffs

• Environment profiles: audit as production or staging; the detected WP_ENVIRONMENT_TYPE is the default.
• Readiness score and verdict: “Ready”, “Needs attention” or “Launch blocked” (an unaccepted critical failure blocks launch).
• Accepted risks: waive a failed check with a written reason; the reason appears in the report.
• Manual handoff checklist: backups restored, forms tested, analytics, cookie consent and more, with presets for business sites, blogs and shops.
• Reports: a printable page (save it as PDF), CSV and JSON. Reports never contain secrets, key values, the admin email address or server paths.
• WP-CLI for CI: wp golive-audit run --env=production --fail-on=warning exits non-zero when a check at that severity fails.
• Extensible: add your own checks with the golive_audit_register_checks action.

Everything is read-only. The plugin never changes your site; each problem links to the screen where you can fix it.

Privacy

Golive Audit makes no external requests and collects no data. It stores three options in your database: accepted risks, checklist progress and report settings. They are removed when you delete the plugin.

Source code

The dashboard in assets/build is compiled from the readable source in assets/src with @wordpress/scripts (npm install && npm run build). The full repository, including unit tests, is at the project’s source repository.