WP HealthKit's independent audit rates Runlight overall risk as HIGH with a report-card grade of B.

How many vulnerabilities does Runlight have?

The audit found 53 findings: 0 critical, 5 high, 40 medium severity.

Should I use Runlight?

Based on the latest audit (grade B, risk HIGH), review the 53 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

Runlight

Audited at release

v0.3.3WordPress PluginAudited 4 days ago

Privacy friendly analytics with no cookies, kept in your own database. Counts visitors and the AI agents that read your site, right inside WordPress.

HIGH

Total Findings

Security Grade

Coding Score

96/100

Security Findings

Critical0

High5

Medium40

Low7

Info1

Executive Summary

Is Runlight secure? In WP HealthKit's independent 2026 audit, Runlight received an overall risk of HIGH and a report-card grade of B across 53 findings (0 critical, 5 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

Security Report Card

Readiness

Coding Standards

96/100

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Categories with Findings

PerformanceDatabaseDependency SecurityCoding StandardsType SafetyInternationalizationai-llm-safetyDependenciesSecurityUpdate SafetyAI-Generated CodeHardcoded SecretsWordPress Compatibilitycompatibility

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![Runlight security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/runlight)](https://wphealthkit.com/directory/runlight)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

Readiness

Coding Standards

96/100

PHP Compatibility

Requires PHP 8.1Declared minimum: 8.1

Runlight

Security Findings

Executive Summary

Security Report Card

Readiness

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

Readiness

PHP Compatibility

Categories with Findings