WP Analyze

WordPress tells you a plugin has an update. It doesn't tell you that the update patches a critical vulnerability — or that the plugin was quietly pulled from the directory for an unfixed security issue, leaving it running on your site with no warning at all.

WP Analyze closes that gap. It sweeps every plugin and theme in the WordPress.org directory every day. You list what your sites run, and you get an email the moment a security advisory affects any of it.

What it doesn't do matters just as much: it never connects to your site. No plugin to install, no admin access, nothing added to your page load.

• Email alerts when something you run gets an advisory

• No plugin — we never touch your site

• Monitor up to 5 sites, 15 plugins and 2 themes each

• Monthly summary, sent even when nothing is wrong

• 7-day advance notice for verified plugin authors

• Free — no paid tier, no card

Built entirely on public WordPress.org data.