Free WordPress audit tool

Audit your WordPress site.
Free, no account.

80+ checks across performance, security, SEO, UX and compliance. External, read-only analysis: no plugin to install, no admin access, no password. The full report appears on screen.

Your URL
Analysis
Full report
FreeNo accountNo admin accessResults in 1 to 2 min
80+
Checks
1-2 min
For the full report
€0
No account, no card
What is public

Your site says more than you think.
And anyone can read it.

Your WordPress version

It is often written in plain text in your pages' code. Whoever reads it knows which flaws to try.

Your plugins, with their version

Their paths leak through the CSS and JS files your site loads. Orilyt cross-references them with known vulnerabilities.

Your security headers

HSTS, CSP: if they are missing, the browser protects very little. This is checked from the outside, in a single request.

Orilyt looks at your site the way a stranger would. Without asking it anything.
How it works

One URL, one report

Three steps. No admin access. No account.

You enter a URL

Any publicly reachable site. Nothing to install.

Orilyt analyses from the outside

Performance, security, SEO, UX, compliance. 1 to 2 minutes.

You read the full report

Each point: the finding, its impact, the action to take. Nothing is hidden.

The report

The whole report. Not a preview.

There is nothing behind an account. What the analysis finds, you see.

An overall and per-family score
Performance, security, SEO, UX. You see where it hurts before reading a line.
A plain-language summary
What the analysis found, summarised without jargon, at the top of the report.
Every point in detail
Priority, risk, effort, and how to fix it. Code examples included.
The limits, in plain sight
When Orilyt cannot measure, it says so. It does not invent a green light.
What Orilyt does not do
The analysis is external. It sees what your site publishes, not what runs on your server. A plugin that loads nothing on the page stays invisible. Orilyt confirms an exposed risk, it never certifies the absence of risk. That needs admin access, and Orilyt asks for none.
2026 Barometer

19,901 sites analysed.
Here is what we found.

Orilyt measured 12 technical criteria across 19,901 sites in five European countries (.fr, .de, .es, .be, .ch). The results are public: table, PDF and CSV, no sign-up.

See the barometer

Your site, now.

Free, no account, in 1 to 2 minutes.