Duva Mail
Audited at releasev0.1.0WordPress PluginAudited Today
Sends all the emails of WordPress (WooCommerce, forms, password resets) through the Duva transactional email API, hosted in Canada.
B
Total Findings
34
Security Grade
A
Security Findings
34Critical0
High0
Medium12
Low19
Info3
Executive Summary
Is Duva Mail secure? In WP HealthKit's independent 2026 audit, Duva Mail received an overall risk of HIGH and a report-card grade of B across 34 findings (0 critical, 0 high severity).
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).