Domain wordpress.org responds in 13.86ms.
We flagged 3 configuration penalty item(s) that can leave your server exposed or reduce search engine trust.
Speed
âĄ
13.86 ms
Excellent (<100ms)
Total Links
đ
78
45 internal âĸ 33 external
Penalties
đ ī¸
3
Penalties applied
SSL Health
đ
TLSv1.3
Expires in: 70 days
Brand Spoofing Shield
âī¸
đĄī¸ PROTECTED
SPF: Configured
DMARC: REJECT
Cookie Privacy Risk
đĒ
0 Cookie(s) Scanned
â All evaluated cookies secured.
Supply Chain SRI
đ
5 External Script(s)
â ī¸ 1 CDN script(s) lack SRI hashes.
Social Card Preview
đą
Missing OG Image
Title: Default HTML Title
đĄī¸ Complete Website Scorecard
Weighted evaluation & clear non-technical guides
-5 pts
Critical Fix Advisory
Content-Security-Policy header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-3 pts
Moderate Fix Advisory
X-Content-Type-Options header absent
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
-5 pts
Critical Fix Advisory
HTTPS page references HTTP resources
âŧ
Why points were lost:
Automated security heuristics detected configuration vulnerabilities requiring remediation.
Plain English: Think of this like leaving your front door unlocked or leaving name tags on keys. It makes it easier for bad actors to target your system!
đ ī¸ Recommended Remediation Action
Implement strict DNS records, hide server version banners in your server config, and publish a DNS CAA record.
Click card again to collapse detail view.
+Preserved
Passed âĸ Transport Encryption
Active TLS Cipher Protocol (TLSv1.3)
âŧ
Why this helps: Protects user sessions and sensitive data against wiretapping and man-in-the-middle sniffing attacks.
Plain English: Your data travels in a heavily armored car so nobody can spy on passwords or credit card numbers.
đ Technical Deep Dive
Modern TLS 1.3 eliminates vulnerable cryptographic primitives, enforcing Perfect Forward Secrecy (PFS) and reducing handshake round-trips to just 1-RTT.
+Optimal
Passed âĸ Response Speed
Rapid Round-Trip Time (13.86ms)
âŧ
Why this helps: Fast server response keeps visitors engaged and directly boosts search engine ranking signals.
Plain English: Your page loads instantly so visitors don't get frustrated and leave.
⥠Core Web Vitals Impact
Server response under 200ms ensures minimal Time to First Byte (TTFB), laying a foundation for optimal Largest Contentful Paint (LCP) performance scores.
+Healthy
Passed âĸ Search Engine Metadata
Valid HTML Meta & Title Tag Structure
âŧ
Why this helps: Ensures Google and search crawlers can index your page title accurately.
Plain English: Search engines easily understand what your page is about so they can display it properly to users.
đ Search Crawler Insight
Well-formed title and description metadata maximize Click-Through Rates (CTR) in Search Engine Result Pages (SERPs).
+Verified
Passed âĸ Infrastructure Routing
Verified Autonomous Network Hosting (ASN 2635)
âŧ
Why this helps: Confirms your website is connected via an established, reliable hosting provider.
Plain English: Your website lives in a reputable, trustworthy neighborhood online.
đ BGP Routing Verification
Valid ASN route records confirm clean network reputation, reducing IP blocklist risks across email and web gateways.
đ Network Infrastructure & DNS Compliance
Server hosting profile, CAA records, and GeoIP data
Simulate search result listings across web engines
đ
https://wordpress.org/
Blog Tool, Publishing Platform, and CMS â WordPress.org
Open source software which you can use to easily create a beautiful website, blog, or app.
Title Len
55
Meta Desc
90
No Alt Imgs
0
Forms
1
Deep Inspection Hub
đĄ SEO & Content Recommendations
Metadata and ranking enhancements
1 Notes
âĄMissing OpenGraph social sharing image
Link Distribution Footprint
Int: 45 Ext: 33
Detailed Inspect Lists
đ Redirect Chain (0)âŧ
No redirects recorded.
đĄī¸ SSL Alt Names (2)âŧ
*.wordpress.org
wordpress.org
đ External Domains (23)âŧ
bbpress.org
bsky.app
buddypress.org
developer.wordpress.org
events.wordpress.org
jobs.wordpress.net
learn.wordpress.org
ma.tt
make.wordpress.org
mastodon.world
mercantile.wordpress.org
openverse.org
wordpress.com
wordpress.tumblr.com
wordpress.tv
wordpressfoundation.org
www.facebook.com
www.instagram.com
www.linkedin.com
www.threads.net
www.tiktok.com
www.x.com
www.youtube.com
Auditor Status
âšī¸ Auditor Limitations (6)âŧ
âĸ Historical uptime monitoring
âĸ Full-site crawling
âĸ Malware or phishing analysis
âĸ External blacklist/reputation checks
âĸ Vulnerability exploitation or authenticated testing
âĸ Real-browser Core Web Vitals
âšī¸ How Our Scoring Engine Works
Every website starts with a baseline score of 100 points. Points are deducted based on automated security scans and web server configuration heuristics.
đ´ Critical Penalties (-5 pts):
Severe vulnerabilities such as an expiring SSL certificate or missing Content Security Policy (CSP) headers.
đĄ Moderate Penalties (-3 pts):
Advisories like missing MIME sniffing protection or minor security header omissions.
Passed checks do not add extra points above 100, but confirm that your server maintains essential safeguards.