Hi,
You can try some free website security scanning tools to check your website for common vulnerabilities.
Here are a few useful options:
- WPScan – Helps identify known WordPress core, plugin, and theme vulnerabilities.
- Wordfence – Provides WordPress malware scanning, firewall protection, and security alerts.
- OWASP ZAP – A free open-source tool for finding common web application security vulnerabilities.
- Google Safe Browsing – Helps check whether your website has been identified as unsafe.
I would recommend starting with Wordfence and WPScan if your website is built with WordPress.
Since your website stores user data, remember that automated scanners cannot detect every vulnerability. Keep WordPress, themes, and plugins updated, use strong passwords, enable two-factor authentication, and maintain regular backups.
Hope this helps!