Alternatives to WPSec
An online scanner that checks WordPress sites for known vulnerabilities in core, plugins and themes. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
WPSec
An online scanner that checks WordPress sites for known vulnerabilities in core, plugins and themes.
Replacements
Listings that take over the same core job as WPSec.
Sucuri SiteCheck
Free remote scanner that checks a website for visible malware, blocklisting and outdated software.
Sucuri SiteCheck scans any site, not just WordPress, for visible malware, blocklisting and outdated software, but only remotely and without scheduled alerts.
Watchful
A web dashboard for agencies that maintain many WordPress sites, with backups, updates and security scans.
Watchful is an agency dashboard for many WordPress sites that includes a vulnerability scanner alongside backups, bulk updates and client reports.
Quttera Website Malware Scanner
Free online scanner that checks a website's public content for malicious scripts and threats.
Quttera Website Malware Scanner checks public content of any site for malicious scripts rather than known plugin and theme vulnerabilities.
Pentest-Tools.com
An online toolkit of vulnerability scanners and penetration testing tools that produces customizable reports.
Pentest-Tools.com offers general vulnerability scanners that validate findings with exploits and produce audit reports, with the full feature set behind paid plans.
Also worth comparing
These listings name WPSec as their own alternative, so the relationship runs both ways.
WPScan
WordPress security scanner for plugin, theme and configuration checks.
WPSec runs in the browser with an instant free scan and scheduled scans with email alerts, writing reports for non-specialists instead of a command-line tool.
Similar software
Related functionality, not a direct replacement.
WordPress Theme Detector
A free online tool that identifies the WordPress theme and plugins a website is using.
SiteGuarding Website Malware Scanner
An online scanner that checks uploaded PHP and JavaScript files for malware and backdoors.
Qualys Community Edition
Free, cloud-based edition of the Qualys security platform for asset discovery and vulnerability assessment.
Security Headers
A web service that analyses a site's HTTP response headers and grades them from A+ to F.
HTTP Observatory
Mozilla's web tool that grades a site's HTTP security headers and gives fix recommendations.
