Free tool · 26 checks
Free website maintenance audit: is anyone looking after your site?
Enter your website URL and in about a minute you will know whether the CMS, plugins and server are up to date, which security gaps are visible and whether there are signs nobody maintains it. We only look at what the site shows publicly.
- 26 maintenance and security checks
- Free, no sign-up
- Results in ~1 minute
- Passive, safe analysis
- Connecting to the website
- Detecting CMS, plugins and versions
- Checking certificate, headers and email
- Checking errors and performance with Google
- Calculating the score
Results for
Software and versions
CMS, plugins, PHP and libraries: up to date or with known flaws.
Security
Certificate, headers and what the site reveals to an attacker.
Domain email
Nobody can send email pretending to be your company.
Maintenance signals
Signs of whether someone looks after the site or it is abandoned.
Want ARTIC to take care of maintenance?
Our web team goes through this report with you, brings the site up to date and keeps it there: tested updates, backups, security and monitoring. For WordPress, PrestaShop, Shopify, Astro and custom applications.
- Report review with someone from the team
- Plan prioritised by security risk
- No-obligation quote
What this audit cannot see (and ARTIC does)
For safety, this tool only looks at what the site shows any visitor. A full review needs access to the server and admin panel.
Backups
Whether they exist, where they are stored and whether they can actually be restored.
Every plugin and its source
Including premium ones and those invisible from outside, and whether licences are valid.
Users and access
Forgotten admins, weak passwords and two-factor authentication.
Malware scan
Injected code, modified files and hidden redirects.
Server and PHP internals
Actual version, disk, resources and caching setup.
Known vulnerabilities
Each component checked against vulnerability databases, with the owner's permission.
An unmaintained website is a risk, not a saving
Most hacked websites are not chosen targets: they have an outdated plugin, theme or CMS that a bot finds automatically. Once a vulnerability is published, automated attacks start within hours or days.
The consequences go beyond the site: spam pages indexed on Google, phishing emails sent from your domain, "dangerous site" warnings in browsers and exposed customer data.
This audit is passive: it does not try to get in or look for hidden files. It only analyses what the site shows any visitor, which is exactly what an attacker sees before deciding.
What the audit checks: all 26 points
Grouped into four blocks. JavaScript errors, deprecated APIs and performance are measured by Google PageSpeed Insights; the rest by our server using what the site, public DNS and the WordPress.org API show anyone.
Software and versions 7
- Platform detected
- WordPress up to date
- Plugins up to date
- Theme up to date
- Supported PHP version
- jQuery without known vulnerabilities
- Secure JavaScript libraries
Security 8
- Valid SSL certificate
- Long-lived HSTS
- Security headers
- WordPress XML-RPC exposed
- Software versions not revealed
- CDN scripts with integrity (SRI)
- CDN or firewall protection
- No mixed content
Domain email 3
- SPF record
- DMARC policy
- Mail servers (MX)
Maintenance signals 8
- Copyright year up to date
- Recently updated content
- No broken links
- No visible PHP errors
- Fast server response
- No JavaScript errors
- No deprecated APIs
- Mobile performance
Maintenance audit FAQs
How do I know whether my website is being maintained?
Versions are the clearest sign: if WordPress, plugins or PHP have not been updated for months, maintenance is not happening. So are the copyright year, the date of the latest content, broken links and visible errors. This audit checks them in a minute.
Can the audit harm my website?
No. It makes the same requests as a normal visitor and queries public DNS and the public WordPress.org API. It does not try passwords, look for hidden files or attempt to access private areas.
Does it detect every WordPress plugin?
It detects those that load files on the analysed page and whose version can be compared with the WordPress.org repository. Premium plugins and those that only act in the admin panel are invisible from outside.
Why check email in a website audit?
Because the domain is the same. Without SPF and DMARC anyone can send email pretending to be your company, and since 2024 Gmail and Yahoo filter mail from misconfigured domains as spam.
What does ARTIC website maintenance include?
Updates tested before they are applied, backups, security and uptime monitoring and incident fixes, for WordPress, PrestaShop, Shopify, Astro and custom applications.
What do you do with the URL I analyse?
We only use it to run the audit. We keep the result for 24 hours so the analysis is not repeated if you come back. We do not store personal data unless you fill in the form.
ARTIC partner
Francesc Beumala
Founder, partner and CEO of ARTIC
Who is behind ARTIC
“An industrial company does not need more noise: it needs the right buyer to find it on Google and in AI, and a system that turns those visits into real opportunities.”
Francesc Beumala is the founder, partner and CEO of ARTIC, a B2B digital marketing agency specialised in industrial companies. A computer engineer, he has spent more than 15 years helping companies grow online: he was a senior developer and project manager at Gestinet and a digital marketing consultant and lead developer of Editions Lefebvre Sarrut’s European Magento stores. He leads the business and the agency’s technology area, with a focus on artificial intelligence applied to business, and designs SEO, SEO for AI, Paid Media and automation strategies for manufacturers, engineering firms and service companies. He hosts Negociem, an entrepreneurship podcast featuring founders and business leaders.
With the rest of the team
Other free audits
- Free GEO auditFree 100-point GEO and SEO audit: find out whether Google, ChatGPT, Claude, Gemini and Perplexity can read, understand and cite your website. Results in a minute, no sign-up.
- Free accessibility auditFree 50-point web accessibility audit: WCAG 2.2 AA and the European Accessibility Act. Find out what stops people with disabilities from using your site. Results in a minute, no sign-up.
- Free cookie and GDPR auditFree 32-point audit of cookies, consent and tracking: banner, Consent Mode v2, cookies before consent, Tag Manager, GA4, Meta Pixel, Google Ads and legal texts. No sign-up.
- Free Google Business Profile auditFree 22-point audit of your Google Business Profile: category, hours, photos, reviews, consistency with your website and comparison with nearby competitors. No sign-up.
- Free complete website auditFree 185-point complete website audit: SEO and GEO, accessibility (WCAG 2.2), cookies and GDPR, and maintenance and security. One report with a score for each area. No sign-up.
- Free competitor comparisonFree website comparison: we analyse your site and up to three competitors across 185 checks of SEO, AI visibility, accessibility, cookies and GDPR, and maintenance. See where they beat you. No sign-up.