WordPress Vulnerability Scanner
Prevent breaches, protect your reputation, and save time. Our scanner finds critical risks other tools miss - in your WordPress site and the infrastructure it runs on.
Read our reviews on G2.com
A deeper WordPress security scan
Most tools skim the surface, Intruder dives in. Our WordPress security scan runs more than 30,000 WordPress‑specific checks, backed by 170,000+ tests across your entire tech stack. You get a single, risk‑ranked view of every critical issue, so you can prioritize the exposures that matter and ignore the noise.
Instantly scan for new WordPress threats
When a fresh CVE drops, Intruder is already on it. The platform updates automatically and continuously rescans WordPress for vulnerabilities, shrinking your exposure window and keeping you ahead of emerging threats.
Fits seamlessly into your workflow
Finding issues is only half the job. Intruder pushes results straight into Jira, Slack, Microsoft Teams and your CI/CD pipeline, so teams can act fast without changing how they work.
Yes, you can! Learn all about how to scan SPAs with Intruder here.
The first thing you need to do is add your website as a target by entering its IP address or url. You can then kick off your first scan in just a few clicks – it’s that simple!
Intruder’s website security scans check for web-layer security problems such as SQL injection and cross-site scripting, as well as other security misconfigurations. Read more about Intruder’s checks here.
Your internal systems can be just as enticing to hackers as your external network so it’s important to test your website for vulnerabilities there too.
When we talk about scanning the website internally, we’re actually talking about scanning the web server that the website is hosted on. Web servers are internet-facing, but any sensitive information connected to them (such as databases) will sit behind a firewall, to prevent them from being reached by unauthorized individuals.
If ‘stuff’ can’t be reached externally, then remote checks won’t work and so you’d need to run local checks. At Intruder, all local/internal checks are performed via an agent which you’d install on the server.
Internal vulnerability scanning also hunts through your website for missing patches and detects insecure versions of many thousands of software components and frameworks, including operating systems and network devices. Find out more about internal vulnerability scanning.
Yes, if it’s reachable over the internet, we can scan it. Just add the domain, sub-domain, or IP address for your Drupal (or any other CMS-based) site and Intruder will run the same deep vulnerability checks you’d get for WordPress, custom apps, or static sites.
Choose our Essential or Cloud plan to externally scan your website. If you are looking at our internal vulnerability scanning capability, this is only available to our Pro and Enterprise customers. Visit our pricing page to learn more.
Buy any of our Essential or Pro plans that cover infrastructure licenses by default. Head to our pricing page for more information.
