Incode Heatmap
Audited at releasev0.6.5WordPress PluginAudited Today
Self-hosted heat maps: clicks, mouse movement and scroll depth, stored in your own database. Privacy-first, no third-party services.
B
Total Findings
105
Security Grade
B
Security Findings
105Critical1
High10
Medium29
Low30
Info35
Executive Summary
Is Incode Heatmap secure? In WP HealthKit's independent 2026 audit, Incode Heatmap received an overall risk of CRITICAL and a report-card grade of B across 105 findings (1 critical, 10 high severity).
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).