Audits that used to cost thousands.
Start free — no card required.
58 deterministic scanners and 4 AI engines run on every audit — every finding cross-validated by two independent models. Annual billing saves 25%.
Annual = 3 months free (monthly × 9). Lock the launch price — it only goes up from here.
LAUNCH50 at checkout. Ends 30 November 2026.Unlimited scans. One full AI audit to see what the engine adds.
- Unlimited deterministic audits
- All 58 scanners
- 1 full AI audit (4 AI engines)
- Report card (A–D)
- Public directory listing
For active plugin & theme authors and small shops.
- 50 full audits / month
- Private results + signed receipts
- Site monitoring (3 sites)
- Fix Plan with every audit
- GitHub Actions, CLI, REST API + MCP server
- PDF + embeddable badge
For agencies and hosts running WordPress at scale — BYOK for unlimited.
- 50 audits / month
- Bring your own AI keys → unlimited
- Fleet dashboard + morning digest
- 100 monitored sites, 5 seats
- White-label reports
- REST API, MCP server + webhooks
- CRA / GDPR / WCAG / EAA reports
Every audit runs the WPHK Engine — two independent frontier models cross-validate every security finding. Need unlimited AI? Enterprise runs on your own provider keys: we charge for the platform, your providers charge for the compute. Setup takes two minutes in Settings.
Not sure what the AI engines add over the free scan? See a real AI audit report — our own companion plugin, run through the WPHK Engine: actual findings, severity reasoning, and the Fix Plan.
Not ready for a plan? Audit once.
A single full audit for £4.99, or the £99 CRA Readiness Bundle — no subscription. Prefer a plan? Platform includes 50 audits a month for £49.
One engine, one price per audit. Themes and optional engines count as two.
One engine. Every audit. Cross-validated.
Every audit runs the same 58 deterministic scanners, then the WPHK Engine: two independent frontier models review security findings, and only what both models corroborate is reported at high confidence. One engine means every grade is comparable — and every signed receipt is reproducible.
Every security scanner worth using takes time. WP HealthKit runs 62 verification layers — 58 deterministic scanners and 4 AI engines — and queues jobs so each one gets full attention. Higher tiers get priority slots. No shortcuts.
Upload → queue position shown immediately → priority processing → results
Side by side
What each plan unlocks
| Feature | Free | Platform | Enterprise |
|---|---|---|---|
| Scans (58 deterministic checks) | Unlimited | Unlimited | Unlimited |
| AI audits / month | 1 (one-off) | 50 | 50 (unlimited with BYOK) |
| BYOK — unlimited on your own keys | — | — | |
| 62-layer verification engine | |||
| WPHK Engine (cross-validated security) | 1 audit | ||
| Anti-malware & nulled plugin detection | |||
| WP + WooCommerce compatibility | |||
| Fix Plan (Markdown + JSON) | |||
| Private audit results | — | ||
| Signed provenance receipt | — | ||
| SBOM export | — | ||
| PDF report | — | ||
| Site monitoring | — | 3 sites | 100 sites |
| API & MCP access | — | ||
| CLI + GitHub Action | — | ||
| Fleet dashboard (multi-client) | — | — | |
| White-label reports | — | — | |
| CRA / GDPR / WCAG / EAA reports | — | — | |
| Team seats | — | 1 | 5 |
| Annual billing (3 months free) | — | ||
| Get started | — | — | Contact us |
Automated audits complement but do not replace manual penetration testing for mission-critical applications.