Title: Forensix Digital
Author: forensixdigital
Published: <strong>November 6, 2026</strong>
Last modified: November 6, 2026

---

Search plugins

![](https://ps.w.org/forensix-digital/assets/banner-772x250.png?rev=3787394)

![](https://ps.w.org/forensix-digital/assets/icon-256x256.png?rev=3787394)

# Forensix Digital

 By [forensixdigital](https://profiles.wordpress.org/forensixdigital/)

[Download](https://downloads.wordpress.org/plugin/forensix-digital.1.1.1.zip)

 * [Details](https://wordpress.org/plugins/forensix-digital/#description)
 * [Reviews](https://wordpress.org/plugins/forensix-digital/#reviews)
 *  [Installation](https://wordpress.org/plugins/forensix-digital/#installation)
 * [Development](https://wordpress.org/plugins/forensix-digital/#developers)

 [Support](https://wordpress.org/support/plugin/forensix-digital/)

## Description

Forensix Digital is a modular toolkit for your website. It shows you what is wrong,
explains it in plain language and tells you where to fix it. It has 16 free apps,
and you switch on only the ones you want. An app that is switched off adds no code
to your pages and runs no scans.

**Every finding in full**

The free plugin shows every finding with all affected addresses and the full explanation.

#### Scan and fix

**Site Scan**

 * Finds broken and redirected links, missing images and files, mixed content and
   old domain names left in your content.
 * Shows every affected address and where the problem comes from (block editor, 
   classic editor, Elementor, menu or widget) so you know where to fix it.
 * Works in small steps, so it runs fine on shared hosting.

**SEO Basics**

 * Checks titles, meta descriptions, headings, canonical addresses, indexing settings,
   social tags and structured data on the pages as visitors and search engines see
   them.
 * Finds duplicate titles, descriptions and near-duplicate page text.
 * Checks robots.txt and your XML sitemap, and tells you whether AI crawlers are
   blocked and whether an llms.txt file exists.
 * Works next to Yoast SEO, Rank Math, SEOPress, All in One SEO, SureRank, The SEO
   Framework, Slim SEO, SmartCrawl and Squirrly SEO. If one of them is active, Forensix
   reads its values and does not add a second set of tags. Without one, it adds 
   titles, descriptions and share tags itself.

**Accessibility check**

 * Finds common barriers for people who use a screen reader or a keyboard: links
   and buttons without a name, fields without a label, images without an alt attribute,
   a missing page language and more.
 * It cannot replace testing by a person, and it does not make your site compliant
   with any law on its own.

**Performance check**

 * Lists scripts, styles and fonts loaded from other websites, scripts that hold
   up the page, very large pages and images that could load lazily.
 * It does not measure loading time.

**Content check**

 * Finds leftover placeholder text, the sample page and post, the default tagline,
   empty paragraphs, text repeated on several pages, dates that have passed, embedded
   videos that no longer exist and an old year in the copyright notice.

**Shop and languages check**

 * With WooCommerce: products without a description, image, price or SKU, and shop
   settings that need attention.
 * With Polylang or WPML: pages and posts that have no translation in one of your
   languages.
 * It only reads and never changes your shop or your pages.

#### Images

**Images & Media**

 * Finds image files that are too large, images with far more pixels than a screen
   shows, images without alternative text and images in older formats, with an estimate
   of how much each could shrink.
 * Write alternative text for your images in one list.
 * Compress a single image by hand. The original is kept, so you can restore it 
   with one click.

#### Forms and email

**Forms**

 * Build forms by dragging fields into a live preview, or start from a contact, 
   quote request, callback or newsletter template. Place them with a block, a shortcode
   or an Elementor widget.
 * Field types include text, email, phone, number, date, slider, dropdown, radio
   buttons, checkboxes, consent, hidden fields, headings and dividers. Paid fields
   are shown greyed out in the builder.
 * Spam protection with a hidden field, a timestamp check, a rate limit and a block
   list of email addresses or domains. If you want more, add Cloudflare Turnstile
   or hCaptcha with your own keys.
 * Every message is saved first and then emailed, so a failing mail server never
   loses a message. Failed emails are flagged in the inbox.
 * An inbox to read, search and delete messages, retention settings per form, and
   support for the WordPress tools for exporting and erasing personal data.
 * Forms are built with labels, linked error messages and keyboard operation.

**Email delivery**

 * Sends your site’s email through your own mail account (SMTP), so form messages
   and password resets arrive.
 * A test button explains problems in plain words. The password is stored encrypted
   and never shown again.

#### Site tools

 * **Business details:** keep your business name, phone numbers, email addresses,
   address and opening hours in one place. Scans tell you when a page uses a different
   phone number or email address.
 * **Google tools:** step-by-step help to connect your site to Google Search Console
   and Google Analytics, optional placement of your verification code, Analytics
   or Tag Manager tag, and a check that finds missing or doubled tags.
 * **Launch checklist:** what your site needs before it goes live, such as search
   visibility, https, a privacy page and a first scan.
 * **Maintenance mode:** a “we will be right back” or “coming soon” page for visitors
   while you work. You and your team still see the real site.
 * **Pre-publish check:** before you publish in the block editor, shows what is 
   worth a second look. It only advises and never blocks publishing.
 * **Reports:** how many problems your last scans found, fixed or left open, and
   a CSV export of open findings.
 * **Site health:** plain-language notes on hosting, late scheduled tasks, disk 
   use and settings that are easy to get wrong. It is not a firewall and does not
   scan for malware.

**Privacy**

The free plugin does not contact any outside service on its own. Requests to other
websites happen only when you turn on an app and run its check. The only one that
reaches us is the Speed test, and only when you press its button. They are all listed
under External services.

### External services

The free plugin connects to these services only in the situations described.

 * **Websites you link to (Site Scan).** When you run a scan, the plugin sends a
   request to each address on another website that your pages link to, to see whether
   it still works. Only the address is requested; no data about you or your visitors
   is sent. Each host gets at most two requests per second.
 * **WordPress.org Plugin Directory API (Site health).** When you run the Site health
   check, the plugin asks api.wordpress.org for public information (last update,
   closed status) about the plugins installed on your site, by their folder names.
   [WordPress.org privacy policy](https://wordpress.org/about/privacy/)
 * **YouTube and Vimeo oEmbed (Content check).** When you run a scan with the Content
   check on, the plugin asks YouTube (https://www.youtube.com/oembed) or Vimeo (
   https://vimeo.com/api/oembed.json) whether each embedded video still exists. 
   Only the video address is sent. [YouTube terms](https://www.youtube.com/t/terms),
   [Google privacy policy](https://policies.google.com/privacy), [Vimeo terms](https://vimeo.com/terms),
   [Vimeo privacy policy](https://vimeo.com/privacy)
 * **Google Analytics and Google Tag Manager (Google tools).** Only if you enter
   an Analytics or Tag Manager ID, the plugin adds Google’s tag to your pages. Your
   visitors’ browsers then load it from www.googletagmanager.com and send usage 
   data to Google. You can start the tag with consent denied until a consent banner
   allows it. [Google terms](https://policies.google.com/terms), [Google privacy policy](https://policies.google.com/privacy)
 * **Cloudflare Turnstile or hCaptcha (Forms spam check).** Only if you choose one
   of them under Forms > Spam check and enter your own keys. Visitors’ browsers 
   then load the provider’s script on pages with a form (challenges.cloudflare.com
   or js.hcaptcha.com), and when a form is sent, your site sends the check result
   and your secret key to the provider to confirm it (challenges.cloudflare.com/
   turnstile/v0/siteverify or api.hcaptcha.com/siteverify). [Cloudflare terms](https://www.cloudflare.com/website-terms/),
   [Cloudflare privacy policy](https://www.cloudflare.com/privacypolicy/), [hCaptcha terms](https://www.hcaptcha.com/terms),
   [hCaptcha privacy policy](https://www.hcaptcha.com/privacy)
 * **Forensix Digital speed test service and Google PageSpeed Insights (Speed test,
   part of Performance check).** Only when you start a speed test, your browser 
   sends the address of the page you entered and your site’s address to forensix.
   digital (forensix.digital/wp-json/forensix/v1/psi/free). Our server asks Google’s
   PageSpeed Insights API with our own key and sends the report back. We keep the
   report for 10 minutes so a repeat test of the same page is answered at once, 
   and we keep a daily count per site (a hash of the site’s address) to apply the
   daily limit. Nothing else is stored. If you save your own Google API key on the
   Speed test screen, or our service is not available, your browser asks Google 
   directly (www.googleapis.com/pagespeedonline) and nothing goes to forensix.digital.
   Nothing is saved on your site besides your own key, if you add one. [Forensix Digital terms](https://forensix.digital/terms/),
   [Forensix Digital privacy policy](https://forensix.digital/privacy-policy/), 
   [Google terms](https://policies.google.com/terms), [Google privacy policy](https://policies.google.com/privacy)
 * **Cloudflare Turnstile or hCaptcha (Forms).** Only if you enter your own Turnstile
   or hCaptcha keys under Forms > Spam check, forms that use the check load the 
   provider’s script (challenges.cloudflare.com or js.hcaptcha.com) in the visitor’s
   browser, and your site sends the visitor’s answer token to the provider to verify
   it (challenges.cloudflare.com/turnstile/v0/siteverify or api.hcaptcha.com/siteverify).
   [Cloudflare website terms](https://www.cloudflare.com/website-terms/), [Turnstile privacy addendum](https://www.cloudflare.com/turnstile-privacy-policy/),
   [hCaptcha terms](https://www.hcaptcha.com/terms), [hCaptcha privacy policy](https://www.hcaptcha.com/privacy)
 * **Your mail server (Email delivery).** Only if you turn on Email delivery, your
   site’s email is sent through the SMTP server you enter, with the user name and
   password you enter. The terms of your mail provider apply.

## Screenshots

[⌊Overview with the latest scan and what needs attention first.⌉⌊Overview with the
latest scan and what needs attention first.⌉[

Overview with the latest scan and what needs attention first.

[⌊Apps: turn on only what you need.⌉⌊Apps: turn on only what you need.⌉[

Apps: turn on only what you need.

[⌊Findings with the affected addresses and where to fix each one.⌉⌊Findings with
the affected addresses and where to fix each one.⌉[

Findings with the affected addresses and where to fix each one.

[⌊Form builder and inbox.⌉⌊Form builder and inbox.⌉[

Form builder and inbox.

## Installation

 1. Upload the plugin or install it from the Plugins screen, then activate it.
 2. Open Forensix in the admin menu and go to Apps.
 3. Turn on the apps you want, for example Site Scan, SEO Basics or Forms.
 4. Run a scan from the Overview and open Findings to see the results.

## FAQ

### Does an app that is switched off slow my site down?

No. A switched-off app registers no hooks, schedules nothing and prints nothing 
on your pages.

### Will Forensix change my content?

Not on its own. The checks only read and report. A few apps change something when
you ask them to: Images & Media saves the alternative text you write and compresses
an image when you press the button (the original is kept), SEO Basics saves the 
title and description you enter, and Email delivery, Maintenance mode and Google
tools change how your site sends email or what it shows once you turn them on.

### Does Forensix replace my SEO plugin?

No. It works next to Yoast SEO, Rank Math, SEOPress, All in One SEO, SureRank, The
SEO Framework, Slim SEO, SmartCrawl and Squirrly SEO. Forensix only prints SEO tags
if none of them is active.

### Do I lose my form messages if I turn the Forms app off?

No. Forms and messages stay in the database. They show again when you turn the app
on. Deleting the plugin’s data is a separate, confirmed step.

### Is there a paid version?

Yes, an optional add-on adds repairs, scheduled scans, backups, staging and more.
The free plugin works fully on its own and is not limited in time. See [forensix.digital/pricing](https://forensix.digital/pricing/)
for the Pro and Expert editions.

### Does it promise better rankings?

No. Forensix points out technical problems. It cannot promise rankings, traffic 
or citations by AI tools.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Forensix Digital” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ forensixdigital ](https://profiles.wordpress.org/forensixdigital/)

[Translate “Forensix Digital” into your language.](https://translate.wordpress.org/projects/wp-plugins/forensix-digital)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/forensix-digital/),
check out the [SVN repository](https://plugins.svn.wordpress.org/forensix-digital/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/forensix-digital/)
by [RSS](https://plugins.trac.wordpress.org/log/forensix-digital/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.1.1

 * Repairs only change site settings that a Site Scan found, plus the tagline and
   search visibility. No other setting can be written.

#### 1.1.0

 * All settings, hooks, tables and constants now start with forensix_ (FORENSIX_
   for constants). Existing settings, forms, entries, scan history and schedules
   move to the new names on their own when you update. If you add your own code 
   to our hooks, rename fxd_ to forensix_. In wp-config.php the old FXD_ENCRYPTION_KEY
   still works.
 * Forensix Digital Pro needs version 0.2.0 or newer with this version. A notice
   tells you if an older Pro is active.

#### 1.0.6

 * Site Scan: you choose how many pages a scan checks, up to 100,000. The default
   is now 10,000.
 * Reports list your last 50 scans.
 * Originals of compressed images are now kept in a protected folder inside the 
   uploads folder (uploads/forensix-digital/). Originals kept by older versions 
   can still be restored.
 * Form submissions and uploads are cleaned as soon as they arrive, and the finished
   form is checked once more before it is shown.
 * The closed page of Maintenance mode and the range field of forms load their CSS
   and script the WordPress way.

#### 1.0.5

 * Speed test runs through forensix.digital with our own Google key, so it no longer
   fails when Google’s shared limit is used up. Each site gets a few tests a day,
   and a repeat test of the same page within 10 minutes is free. You can add your
   own free Google key on the Speed test screen to skip our server.

#### 1.0.4

 * Shop and languages findings now show the right steps under “How to fix”. Some
   of them showed advice meant for broken links or an old domain name. The tagline,
   search visibility and form email findings had the same problem and are fixed 
   too.

#### 1.0.3

 * Findings: the App filter now lists every app that has findings (Content, SEO,
   Speed, Media, Accessibility and more), not only Site Scan. The Apps screen shows
   the right number of findings per app.

#### 1.0.2

 * Findings: filter by app and search by word, address or place. The Apps screen
   links straight to each app’s findings.
 * The “Download open findings (CSV)” link in Reports no longer says it has expired.
 * Site Scan no longer reports images as “not in a modern format” when WebP or AVIF
   copies are served for them.
 * The out-of-date check now also catches dates after words like “until”, “tickets”
   or “book by”, and dates written as 2026-11-02.

#### 1.0.1

 * First release on wordpress.org.
 * Drag-and-drop form builder with a live preview, more field types, and optional
   Turnstile or hCaptcha.
 * German and Spanish translations.
 * Settings & Licence sits right under Overview.

#### 0.1.3

 * The Forensix Digital logo in the admin header.

#### 0.1.2

 * New admin header with brand band and pill navigation.

#### 0.1.1

 * Modern admin design: new navigation, cards and buttons.

#### 0.1.0

 * Development version. Apps framework, Site Scan, SEO Basics and Forms.

## Meta

 *  Version **1.1.1**
 *  Last updated **10 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.5 or higher **
 *  Tested up to **7.1.4**
 *  PHP version ** 8.1 or higher **
 * Tags
 * [broken links](https://wordpress.org/plugins/tags/broken-links/)[forms](https://wordpress.org/plugins/tags/forms/)
   [seo](https://wordpress.org/plugins/tags/seo/)[site health](https://wordpress.org/plugins/tags/site-health/)
 *  [Advanced View](https://wordpress.org/plugins/forensix-digital/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/forensix-digital/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/forensix-digital/reviews/)

## Contributors

 *   [ forensixdigital ](https://profiles.wordpress.org/forensixdigital/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/forensix-digital/)