Title: SiteProof – Website Security Reports Author: Verdant Studio Published: November 12, 2026 Last modified: November 12, 2026 --- Search plugins ![](https://ps.w.org/siteproof/assets/banner-772x250.png?rev=3799063) ![](https://ps.w.org/siteproof/assets/icon-256x256.png?rev=3799063) # SiteProof – Website Security Reports By [Verdant Studio](https://profiles.wordpress.org/verdantstudio/) [Download](https://downloads.wordpress.org/plugin/siteproof.1.0.0.zip) * [Details](https://wordpress.org/plugins/siteproof/#description) * [Reviews](https://wordpress.org/plugins/siteproof/#reviews) * [Installation](https://wordpress.org/plugins/siteproof/#installation) * [Development](https://wordpress.org/plugins/siteproof/#developers) [Support](https://wordpress.org/support/plugin/siteproof/) ## Description SiteProof checks the basics of your WordPress website and tells you, in plain language, what needs attention, what to do first and what is already in good shape. Every check is saved. You can see what changed since the previous check, and save a report as PDF to show your team, developer or client what was checked and when. #### What SiteProof checks * Whether WordPress, your plugins and your themes are up to date * Whether your PHP version still receives security updates * Whether your website uses HTTPS * How many accounts have administrator access, and which administrator accounts are no longer used * Whether technical error details are visible to visitors * Whether anyone can sign up and get too many permissions * Whether a security plugin and a backup plugin are active #### What you get * **A calm overview.** One status, at most five recommended actions in order of importance, and a list of what looks good. No long lists of warnings. * **Clear next steps.** Every action explains what is going on and what to do, without technical jargon. * **Automatic checks.** SiteProof checks your website every week. You can also check at any time with “Check now”. * **History.** Every check is kept, so you can see what was resolved and what is new since the previous check. * **A shareable report.** Save any check as a PDF report, including all actions, all results and recent check history. #### What SiteProof is not SiteProof is not a firewall, malware scanner or backup tool, and it does not change your website. It works alongside the security, backup and hosting tools you already use, and tells you whether the basics are in order. A result of “Good” means no issue was detected by that check. It is not a guarantee that your website cannot be compromised. #### Privacy SiteProof stores its check results in your WordPress database and works without an account. It does not send your website’s data to SiteProof or to other services. The only requests it makes are the WordPress.org checks described under External requests. To show administrator accounts that are no longer used, SiteProof stores the date and time of each administrator’s most recent login. No other personal data is stored, and this information is not shared. Reports never include usernames. Deleting the plugin removes all SiteProof data. SiteProof adds a suggested text to Settings Privacy that you can use in your privacy policy. #### External requests SiteProof uses the update information WordPress already collects. If that information is missing, for example right after you update a plugin, SiteProof asks WordPress to refresh it. WordPress then makes its standard update check to WordPress.org, the same request it makes automatically twice a day. To check whether your PHP version still receives security updates, SiteProof uses the same WordPress.org check as the WordPress dashboard and Site Health, at most once a week. SiteProof does not add any data to these requests. See the [WordPress.org privacy policy](https://wordpress.org/about/privacy/). ## Screenshots [⌊The overview when everything is in order: one clear status and what looks good.⌉⌊ The overview when everything is in order: one clear status and what looks good.⌉[ The overview when everything is in order: one clear status and what looks good. [⌊When something needs attention: recommended actions in order of importance, each with what to do.⌉⌊When something needs attention: recommended actions in order of importance, each with what to do.⌉[ When something needs attention: recommended actions in order of importance, each with what to do. [⌊Check history: every check, manual and automatic, with its status.⌉⌊Check history: every check, manual and automatic, with its status.⌉[ Check history: every check, manual and automatic, with its status. [⌊What changed since the previous check, and all results of that check.⌉⌊What changed since the previous check, and all results of that check.⌉[ What changed since the previous check, and all results of that check. [⌊The report, ready to save as PDF and share.⌉⌊The report, ready to save as PDF and share.⌉[ The report, ready to save as PDF and share. ## Installation 1. In your WordPress dashboard, go to Plugins Add New Plugin and search for “SiteProof”. 2. Click Install Now, then Activate. 3. Go to SiteProof in the menu and click “Run the first check”. If you do not, SiteProof runs its first automatic check within an hour. ## FAQ ### Is SiteProof a security plugin? Do I still need one? SiteProof does not block attacks or scan for malware, so yes: keep your security plugin, backups and hosting protection. SiteProof gives you an overview of whether the basics are in order and helps you show that they are checked regularly. ### How is SiteProof different from Site Health? Site Health shows a broad technical overview of your website right now, including performance and server settings. SiteProof focuses on security and maintenance, puts the most important actions first, adds checks Site Health does not do (such as inactive administrator accounts and whether a backup plugin is active), and keeps a history of every check so you can show what was checked and when. ### How often does SiteProof check my website? Once a week, automatically, and whenever you click “Check now”. The weekly check uses WordPress’s built-in scheduler, which runs when your website has visitors, so on a very quiet website it can run a little later. ### Who can see SiteProof? Only administrators. On a multisite network, only network administrators. ### Why does a check say “not checked yet”? WordPress does not keep a login history, so SiteProof records administrator logins itself. For an administrator account without a recent login, SiteProof needs 90 days of records before it can say whether the account is still used. The check explains when the result will be available. ### How do I create a report? Click “Save report as PDF” on the SiteProof overview, or on any check in History. Your browser’s print window opens, where you choose “Save as PDF”. ### Does SiteProof work on WordPress Multisite? Yes, per site. Each site in the network gets its own checks and history. Because only network administrators can install updates on a multisite network, SiteProof is only visible to network administrators. There is no combined overview of all sites in the network. ### Can developers change the checks? Yes. These filters are available: * `siteproof_checks` to add or remove checks * `siteproof_max_administrators` (default 3) * `siteproof_inactive_admin_days` (default 90) * `siteproof_security_plugins` and `siteproof_backup_plugins` to recognise more plugins * `siteproof_snapshot_retention` (default 52 saved checks) Changes made with these filters are listed in every report, so readers can see when a report does not use SiteProof’s standard checks. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “SiteProof – Website Security Reports” is open source software. The following people have contributed to this plugin. Contributors * [ Verdant Studio ](https://profiles.wordpress.org/verdantstudio/) * [ Robert (Verdant Studio) ](https://profiles.wordpress.org/robertverdant/) [Translate “SiteProof – Website Security Reports” into your language.](https://translate.wordpress.org/projects/wp-plugins/siteproof) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/siteproof/), check out the [SVN repository](https://plugins.svn.wordpress.org/siteproof/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/siteproof/) by [RSS](https://plugins.trac.wordpress.org/log/siteproof/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.0 * First release. ## Meta * Version **1.0.0** * Last updated **6 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.4 or higher ** * Tested up to **7.1.4** * PHP version ** 8.1 or higher ** * Tags * [maintenance](https://wordpress.org/plugins/tags/maintenance/)[overview](https://wordpress.org/plugins/tags/overview/) [report](https://wordpress.org/plugins/tags/report/)[security](https://wordpress.org/plugins/tags/security/) [updates](https://wordpress.org/plugins/tags/updates/) * [Advanced View](https://wordpress.org/plugins/siteproof/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/siteproof/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/siteproof/reviews/) ## Contributors * [ Verdant Studio ](https://profiles.wordpress.org/verdantstudio/) * [ Robert (Verdant Studio) ](https://profiles.wordpress.org/robertverdant/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/siteproof/)