Install it, click Run scan, and in about ten seconds you have one number: how healthy your WordPress site actually is, out of 100.

Underneath it sits the list that produced that number — outdated plugins, security settings still on their defaults, a database quietly filling with junk, images with no alt text, SEO basics switched off — sorted so the thing that matters most is at the top.

Every item tells you what is wrong, why it matters, what to do about it, and the evidence behind it. Nothing on your site is changed. Fix something, scan again, and watch the number move.

There is nothing to configure, no account to create and no API key to paste.

Features

The score

Six areas weighted into a single number you can track over time.
Anything that cannot be measured is excluded from the average, never counted as zero.
Severity adapts to your environment — debug mode is a serious problem on a live site and completely normal on a laptop.

Finding and fixing

Every issue says what is wrong, why it matters, and exactly what to do about it.
The evidence behind each finding is shown, so you can check it rather than take it on faith.
Issues grouped by severity and filterable by area, so you can start with what actually matters.
Reads Rank Math or Yoast SEO where they are installed, clearly labelled.

Seeing what changed

Score history over the last 7, 30, 90 or 365 days, or any custom date range.
Compare two periods to see precisely which issues appeared and which were resolved.
Email alerts only when something genuinely regresses. No daily digest.
Scans on a schedule: hourly, twice daily, daily or weekly.

Reporting

A printable report with a plain-English summary, charts, and every fix.
Save it as a PDF from your browser — no PDF library is bundled to do it.
Comparisons export the same way, which is the document to send a client.

Built for real sites

Scan history lives in its own database table, never in autoloaded options — we do not cause the bloat we scan for.
Large sites can spread a scan across several requests so it never times out.
Keeps the last 100 detailed scans by default, adjustable from 10 to 2000.
A short guided introduction on first run, re-openable whenever you like.
A REST API under bwg-site-health/v1 exposes every scan, so the data is yours.
No external requests of any kind.
Fully translatable.

What it checks

Every check below runs on your own site, with no account and no setup. A full audit takes a few seconds and reads only — nothing is changed.

Updates — outdated core, plugins and themes, PHP versions past their security-support date, and whether anything is blocking automatic updates from landing.
Security & configuration — weak or default authentication keys, the file editor, debug output in production, plain HTTP, open registration handing out privileged roles, XML-RPC, predictable admin usernames.
Database — autoloaded option bloat, revision build-up, expired transients, orphaned metadata: the routine maintenance nobody remembers to do.
Media — images missing from disk after a bad migration, oversized unoptimised originals, missing alt text.
Accessibility — images with no alt attribute, links a screen reader announces as nothing, skipped heading levels.
SEO — search-engine visibility, a robots.txt blocking your whole site, plain permalinks, missing sitemap.

Where it fits alongside your other plugins

You already have plugins that each watch one thing. Guru Site Health is the layer above them: it reads what is actually happening on your site, works out how healthy it really is, and answers three questions on one screen — what is important, what changed, and what next.

It does not replace your SEO plugin, your security plugin, or your cache plugin. It reads alongside them and turns a pile of separate signals into one score you can act on.

If you use Rank Math or Yoast SEO, Guru Site Health reads their analysis and folds it into your score, clearly labelled so you always know where a finding came from. If you use neither, nothing is missing — the SEO checks above still run.

The same rule applies everywhere: Guru Site Health never asks you to install another plugin to work, and never counts a missing plugin against your score.

Honest scoring

Two rules make the number trustworthy:

What cannot be measured is never scored as zero. If a check has no data source, it is reported as not measured and excluded from the average entirely. Not having a particular plugin installed can never lower your score.
Severity depends on context. Debug mode is a serious problem on a live site and completely normal on a developer’s machine. Guru Site Health reads your environment type and scores accordingly, instead of nagging every local install.

Automatic monitoring

Guru Site Health scans on a schedule and keeps a history, so you can see your score over time and exactly which issues appeared or were resolved between any two scans.

It emails you only when something genuinely regresses — a new high-severity problem, or a real drop in score. There is no daily digest, because a daily “still fine” email is a daily email you will learn to ignore.

Reports you can hand to someone else

Your latest scan opens as a printable report: a plain-English summary of what the score means, charts showing where the problems are, and every finding with its fix and the evidence behind it. Save it as a PDF straight from your browser.

No PDF library is bundled to do it. Your browser already renders type better than any PHP library would, and the result is selectable text rather than a picture of text.

You can also compare any two periods — the last 7, 30, 90 or 365 days, or a custom date range — and export that comparison the same way. If you look after sites for other people, that is the document that shows what actually changed this month.

Privacy: nothing leaves your site

Guru Site Health makes no external requests at all. No accounts, no API keys, no telemetry, no analytics, no “anonymous usage data”. Every scan runs on your server and every result is stored in your own database.

The only email it ever sends goes to the address you choose, through your own site’s mail configuration.

That includes fonts. The dashboard’s typeface is bundled with the plugin and served from your own site. A font pulled from Google Fonts would hand a third party the IP address of every administrator who opens the page, which is exactly the kind of quiet leak this plugin exists to find — so it is never loaded that way.

The one time anything is offered to an outside address

If you deactivate the plugin, it asks why. That is the only place Guru Site Health mentions an address outside your own site, so it is worth being exact about what happens:

Your server still sends nothing. Nothing is posted, no API is called, no request is made on your behalf.
If you pick a reason and press Send feedback & deactivate, your browser opens https://buildwithguru.com/feedback.php in a new tab. You can see the address before you click it, and closing the tab sends nothing.
Exactly three things travel in that link: the reason you chose, the plugin version, and any note you typed. No site URL, no email address, no scan results, no score.
Choosing Just deactivate skips all of it, and the plugin deactivates either way. The prompt never blocks it.
Developers can point it somewhere else with the bwg_site_health/feedback_url filter, or remove it entirely with bwg_site_health/deactivation_survey.

Since the plugin collects no usage data at all, a churn reason is the only feedback it can ever receive. That is why it asks — once, at the end, and only if you choose to answer.

Try it

Install it, click Run scan, and you will have your score in about ten seconds. No account, no key to paste, and nothing on your site is changed.

A longer walk through how the score is built — the six areas, how they are weighted, and the two rules that decide what a missing check does to your number — is at buildwithguru.com.

Site Health Score & Website Audit — BuildWithGuru