WPSec
Funäsdalen, Sweden
What it is
WPSec is an online security scanner for WordPress websites, available on the web and through an API. Its scanner combines WPScan-based and custom technology to check sites against a vulnerability database and identify outdated software. A dashboard tracks multiple installations, and reports explain findings and possible responses. Scans can run monthly, weekly or daily depending on the plan. WPSec also analyzes code behind 118,000+ plugins and scores plugin risk, including cases without a known vulnerability. Email and smartphone push alerts can flag issues such as outdated or risky plugins and themes. The Free plan is free and includes one scan location, up to 10 reports and monthly scans. Premium costs €19 a month, billed per website, with different per-site charges across higher website bands. It adds PDF and JSON exports, API, webhooks, CLI, AI/MCP integration, and stealth and WAF-bypass scanning. White Label costs €295 a month, billed €3400/year, and includes branded design and a separate isolated instance. The service is provided by Triop AB in Funäsdalen, Sweden; support typically responds within three business days.
For and against
For
- Free plan includes one scan location
- Tracks multiple WordPress sites in a dashboard
- Scans can be scheduled daily, weekly or monthly
- Alerts cover risky and outdated plugins and themes
Against
- Free plan limits users to 10 reports
- Premium is billed per website
- Support typically responds within three business days
The verdict
WPSec combines vulnerability checks, plugin risk scoring and reports for WordPress installations. The free plan is limited to monthly scans at one location, while paid plans add scanning and reporting options.
Who it suits
WPSec suits WordPress site owners and teams who want to monitor multiple installations for vulnerabilities and outdated software. Premium and White Label plans may suit users needing more frequent scans, exports or branded reporting.
Plans and prices
Free
84,900 known vulnerabilities · 1 scan location · Up to 10 scan reports · Monthly scans
Read 10 Oct 2026 · wpsec.com
Premium
Daily, weekly, or monthly scans · Attack Surface analysis and CVE matching · PDF and JSON exports · API, webhooks, CLI
Read 10 Oct 2026 · wpsec.com
White Label
Everything in Premium · Unlimited scans and reports · Branded design, logo, and domain · Separate isolated instance
Read 10 Oct 2026 · wpsec.com
On the record
- Alerts
- WPSec offers email and smartphone push notifications about security issues, including outdated or risky plugins and themes.wpsec.com · read 10 Oct 2026
- Attack surface
- WPSec says it analyzes code behind 118,000+ plugins and scores plugin risk, including when no known vulnerability exists.wpsec.com · read 10 Oct 2026
- Company
- The site identifies WPSec as a service by Triop AB in Funäsdalen, Sweden.wpsec.com · read 10 Oct 2026
- Dashboard and reports
- Users can track multiple WordPress websites in a dashboard and receive reports explaining findings and how to address them.wpsec.com · read 10 Oct 2026
- Exports and access
- Premium includes PDF and JSON report exports, API, webhooks, CLI access, and AI/MCP integration with Claude and Cursor.wpsec.com · read 10 Oct 2026
- Free plan limit
- The Free plan includes one WordPress scan location, up to 10 scan reports, and monthly scans.wpsec.com · read 10 Oct 2026
- Integrations
- A WPSec article says outgoing JSON webhooks can integrate with third-party services such as Slack and Zapier.blog.wpsec.com · read 10 Oct 2026
- Product
- WPSec describes itself as an online security scanner for WordPress vulnerabilities that tracks installations and identifies outdated software.wpsec.com · read 10 Oct 2026
- Scan controls
- Premium includes stealth and WAF-bypass scanning.wpsec.com · read 10 Oct 2026
- Scanner
- Its scanner is based on WPScan and custom technology, and checks WordPress websites against a vulnerability database.wpsec.com · read 10 Oct 2026
- Scheduled scans
- Account scans can run daily, weekly, or monthly, depending on the selected plan.wpsec.com · read 10 Oct 2026
- Security disclosure
- WPSec publishes a vulnerability reporting program with safe-harbor terms and a PGP key for reporting issues.wpsec.com · read 10 Oct 2026
- Support
- WPSec says support typically responds within three business days.wpsec.com · read 10 Oct 2026
