Fifteen switches that turn off what WordPress loads by default and most sites never use. No caching, no minification.
Total Findings
12
Security Grade
Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).
Show your audit status in your README or website.
[](https://wphealthkit.com/directory/payloadless)
Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.
Site owners: should they update? See the update-safety verdict for Payloadless
Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.
Claim This PluginGet a comprehensive security audit for your WordPress plugin or theme. Upload your zip and get results in minutes.
Start Free Audit