GeniousSonu Site Checkup
Complete security audit, site hardening checklist, and vulnerability scanner for WordPress. One-click safe hardening, login protection, and client reports.
The Agency Security Challenge
WordPress security in client agencies typically fails due to human fatigue or heavy, bloated plugins that break sites.
Spreadsheets get skipped. Bloated suites break production.
- •Unchecked Checklists: 40+ manual tasks on internal Notion or Google Docs get abandoned during tight delivery schedules.
- •Fatal Breakages: Aggressive monolithic plugins alter server files blindly, creating 500 Internal Server Errors with no rollback.
- •Secret Leaks: Audit logs frequently dump plain-text database passwords and auth salts into wp_options.
Actionable SOP automation with verified safeguards.
- •Built-In SOP Engine: 64 structured checklist items grouped into 7 actionable categories right in the WordPress admin.
- •1-Click Fix with Diff Previews: Inspect every line of code before it touches .htaccess or wp-config.php.
- •Zero-Secret Logging: Passwords, database keys, and salts are strictly scrubbed and masked prior to storage.
How It Works in 3 Steps
A transparent, safe, and verifiable workflow designed for developers and agencies.
See Checklist
Open the dashboard to trigger an instant audit of 64 agency SOP items. The plugin evaluates your server environment, calculates your SOP Coverage score, and flags missing protections.
Click to Fix
Execute safe Level-A automation tasks in 1 click or inspect the pre-execution diff modal. For complex setups (WAF, 2FA, backups), use Level-B guided bridges to mature, audited tools.
Verified Audit Trail
Every fix is instantly confirmed via loopback self-verification. Export print-ready executive client audit summaries with completion certificates and emergency incident-response escalation contacts.
Engineered for Enterprise WordPress
Every capability is taken directly from our production task registry and validated against agency security guidelines.
Level A: 1-Click Safe Hardening
Disable XML-RPC, restrict REST unauthenticated user enumeration, enforce clickjacking (X-Frame-Options), MIME sniffing protection, HSTS, and strict 640 wp-config.php permissions.
Automated & ReversibleLevel B: Guided Plugin Bridges
Seamlessly bridges to vetted plugins (Wordfence, Two-Factor Authentication, WPS Hide Login, and backup tools). Generates RFC 9116 security.txt disclosure policies.
Best-Practice BridgesLevel C: SOP Rotation Reminders
Track 15-day hosting/cPanel and admin password rotations, quarterly 90-day backup restore drills, staging HTTP Basic Auth walls, and 6-month Google Search Console URL removal reviews.
Maintenance HygieneLevel D: Executive Client Reports
Generate print-ready HTML and PDF audit summaries detailing completed hardening, SOP coverage percentage, emergency incident-response escalation contacts, and audit trails.
Agency Client HandoffVulnerability Intelligence (Patchstack)
Cross-references active plugins and themes against the Patchstack vulnerability database with match-confidence scoring (high, medium, unverified). Requires explicit consent.
CVE IntelligenceServer Environment Aware
Detects Apache/LiteSpeed vs Nginx automatically. On Nginx, .htaccess tasks present copyable Nginx server directives instead of false positive warnings.
Apache & NginxDashboard Preview & Screenshots
Visual walkthrough of the admin dashboard, diff viewer, and client report generator.
GeniousSonu Site Checkup is an agency checklist, audit, and baseline hardening tool. It is NOT a replacement for a web application firewall (WAF) or real-time intrusion prevention system (such as Wordfence or Cloudflare), nor is it a backup service or a guarantee of total security. It reduces your attack surface and enforces agency SOP hygiene without adding background bloat. For maximum defense, run it alongside an audited firewall and scheduled off-site backups.
Compatibility & Requirements
Lightweight requirements tested on standard hosting stacks.