What this tool can do
It checks reachability, SSL certificate status, WordPress indicators, REST API response, xmlrpc.php, readme.html, robots.txt, sitemap.xml, SEO metadata, and common security headers.
WEBSITE TOOLS
Enter a public URL to check basic WordPress health signals, SSL, SEO metadata, and security headers using normal HTTP access only.
Scanner
This tool performs a simple diagnosis of basic WordPress site status using only what can be checked through normal access to public URLs. It does not guarantee whether vulnerabilities exist. For formal security audits or maintenance decisions, we recommend confirmation by a qualified specialist.
It checks reachability, SSL certificate status, WordPress indicators, REST API response, xmlrpc.php, readme.html, robots.txt, sitemap.xml, SEO metadata, and common security headers.
Enter the public URL of the site you manage or want to review, then click Scan. The result is a quick operational checklist, not a penetration test.
The scanner uses a small number of GET or HEAD requests to public endpoints such as the top page, /wp-json/, /xmlrpc.php, /readme.html, /robots.txt, and /sitemap.xml.
The REST API is an official WordPress feature and is used by many normal sites. A public response is informational and is not treated as dangerous by itself.
xmlrpc.php can be necessary for some publishing, app, or integration workflows. If it appears enabled, review whether your site actually needs it.
If WordPress detection is unclear, the site may hide default paths, use a cache or CDN, or may not be WordPress. Review the signals together rather than relying on one item.
The tool rejects localhost, private IP ranges, file URLs, and non-http schemes. It does not send POST requests, login attempts, brute force traffic, plugin enumeration, or exploit payloads.
Results are a snapshot from external access. Server settings, CDN rules, and security plugins can change what is visible.
WordPress Health Scanner is a free online utility that helps you check a public WordPress URL for SSL, SEO metadata, and basic security settings. It is designed for office workers, students, developers, IT administrators, and anyone who needs a quick result without installing dedicated software. The tool works through a standard web browser and can be used free of charge without creating an account. Its focused controls make it practical for both one-off personal tasks and repeat work.
Yes. You can use the tool free of charge and no account registration is required.
No. The tool runs in a modern web browser, so you do not need to install dedicated software.
Yes. The page is responsive, although a desktop browser may be easier for large files or detailed work.
ToolGarage does not intentionally retain your working data as saved tool content. Browser storage or server communication, when required by a specific feature, is limited to providing that feature.
Yes. Please review important results yourself and follow the rules, security policy, and file-handling requirements of your organization.
Review important outputs before using them. Processing is performed in the browser whenever the feature allows it; tools that must retrieve public website or DNS information communicate only as required to produce the requested result.
ToolGarage is operated by an active systems engineer in Hokkaido, Japan, with hands-on experience in system development, PC deployment, and web production. It provides free calculation, conversion, and diagnostic tools based on tasks encountered in real workplaces.