Guru Site Health Score, Audit & One-Click Fixes

Описание

Install it, click Run scan, and in a few seconds you have one number: how healthy your WordPress site actually is, out of 100.

Nothing about your site ever leaves it. No account, no API key, no telemetry, no fonts fetched from Google — not one external request, by design rather than by setting. That is not a privacy policy, it is an architecture: there is no code here that could send anything anywhere, and the assistant below is not a language model, so there is nothing to send it to.

For anyone who looks after sites for other people, that removes paperwork rather than adding a virtue: no subprocessor to declare, no data-processing agreement, no account for the client to inherit when you hand the site over, and no key that quietly expires on a site you stopped billing for. It also means it works unchanged on a staging box, behind a firewall, or on an intranet install — the places where anything that phones home simply stops working.

Underneath the number sits the list that produced it: outdated plugins, security settings still on their defaults, autoloaded options quietly bloating every page load, images with no alt text, SEO basics switched off — sorted so the thing that matters most is at the top.

Every item tells you what is wrong, why it matters, what to do about it, and the evidence behind it. Nothing changes unless you press a button — and anything it changes, it can undo.

Some of those items have a 1-click fix. Press it and Guru Site Health makes the change, records exactly what it did, and puts an Undo next to it. Press Fix all and it works through every safe one at once, showing you the full list first. Or ask Guru, the assistant on the dashboard, and it will take you through them one at a time.

Thirteen findings can be fixed this way, including the SEO ones most often left wrong by accident — a site still telling search engines not to index it, plain permalinks, a sitemap switched off. It is an auto fix you can read before you press and undo after you have.

Think of it as the health check WordPress’s own Site Health screen gestures at, carried all the way through: scored, ranked, and in thirteen places fixable from where you are standing.

There is nothing to configure, no account to create and no API key to paste.

Features

The score

• Six areas weighted into a single number you can track over time.
• Anything that cannot be measured is excluded from the average, never counted as zero.
• Severity adapts to your environment — debug mode is a serious problem on a live site and completely normal on a laptop.

Fixing it for you

• 1-click fixes on the findings where a change is safe and reversible — search-engine visibility, open registration, permalinks, sitemaps, XML-RPC, version disclosure, the file editor, expired transients, and automatic updates for core, plugins and themes.
• Fix all applies every safe one at once, and shows you the complete list before you press it.
• Undo on every change, individually or all at once. A Changes made card lists everything the plugin has altered on your site.
• Guru, an assistant on the dashboard, answers questions in your own words and applies fixes on your say-so. It makes no external requests — nothing is sent to a language model or anywhere else.
• Ask it where am I losing points and it weighs each area’s score against its weight to tell you which one is actually costing you the most, which is rarely the one that looks worst.

Finding and fixing

• Every issue says what is wrong, why it matters, and exactly what to do about it.
• The evidence behind each finding is shown, so you can check it rather than take it on faith.
• Issues grouped by severity and filterable by area, so you can start with what actually matters.
• Reads Rank Math or Yoast SEO where they are installed, clearly labelled.

Seeing what changed

• Score history over the last 7, 30, 90 or 365 days, or any custom date range.
• Compare two periods to see precisely which issues appeared and which were resolved.
• Email alerts only when something genuinely regresses. No daily digest.
• Scans on a schedule: hourly, twice daily, daily or weekly.

Reporting

• A printable report with a plain-English summary, charts, and every fix.
• Save it as a PDF from your browser — no PDF library is bundled to do it.
• Comparisons export the same way, which is the document to send a client.

Built for real sites

• Scan history lives in its own database table, never in autoloaded options — we do not cause the bloat we scan for.
• Large sites can spread a scan across several requests so it never times out.
• Keeps the last 100 detailed scans by default, adjustable from 10 to 2000.
• A short guided introduction on first run, re-openable whenever you like.
• A REST API under bwg-site-health/v1 exposes every scan, so the data is yours.
• No external requests of any kind.
• Fully translatable.

What it checks

Every check below runs on your own site, with no account and no setup. A full audit takes a few seconds, and the scan itself only reads — nothing is changed until you press a fix.

• Updates — outdated core, plugins and themes, PHP versions past their security-support date, and whether anything is blocking automatic updates from landing.
• Security & configuration — weak or default authentication keys, the file editor, debug output in production, plain HTTP, open registration handing out privileged roles, XML-RPC, predictable admin usernames.
• Database — autoloaded option bloat, revision build-up, expired transients, orphaned metadata: the routine maintenance nobody remembers to do.
• Media — images missing from disk after a bad migration, oversized unoptimised originals, missing alt text.
• Accessibility — a built-in accessibility checker looking at your real content: images with no alt attribute, links a screen reader announces as nothing, skipped heading levels.
• SEO — an SEO audit of the basics that get left wrong by accident: search-engine visibility, a robots.txt blocking your whole site, plain permalinks, a missing sitemap.

Where it fits alongside your other plugins

You already have plugins that each watch one thing. Guru Site Health is the layer above them: it reads what is actually happening on your site, works out how healthy it really is, and answers three questions on one screen — what is important, what changed, and what next.

It does not replace your SEO plugin, your security plugin, or your cache plugin. It reads alongside them and turns a pile of separate signals into one score you can act on.

What it needs, and what it works with

It requires nothing. No other plugin, no account, no API key, no service. Install it, press Run scan, and all 32 checks run on their own. Every feature described here works on a completely bare WordPress install.

What it does do is read what you already have, so your existing plugins make the score better rather than being ignored:

• Rank Math — reads its SEO analysis and folds it into your score, every finding labelled so you always know it came from Rank Math rather than from us.
• Yoast SEO — the same, through its own reader.
• Any sitemap plugin — if Rank Math, Yoast, SEOPress, AIOSEO or The SEO Framework is publishing your sitemap, the sitemap fix stands down rather than switching WordPress’s own back on and leaving you with two.

If you run none of these, nothing is missing. The SEO checks still run on their own, and an area that cannot be measured is excluded from your score rather than counted as zero.

That is the rule everywhere: Guru Site Health never asks you to install another plugin to work, and never counts a missing plugin against your score.

Honest scoring

Two rules make the number trustworthy:

1. What cannot be measured is never scored as zero. If a check has no data source, it is reported as not measured and excluded from the average entirely. Not having a particular plugin installed can never lower your score.
2. Severity depends on context. Debug mode is a serious problem on a live site and completely normal on a developer’s machine. Guru Site Health reads your environment type and scores accordingly, instead of nagging every local install.

Automatic monitoring

Guru Site Health scans on a schedule and keeps a history, so you can see your score over time and exactly which issues appeared or were resolved between any two scans.

It emails you only when something genuinely regresses — a new high-severity problem, or a real drop in score. There is no daily digest, because a daily «still fine» email is a daily email you will learn to ignore.

Reports you can hand to someone else

Your latest scan opens as a printable report: a plain-English summary of what the score means, charts showing where the problems are, and every finding with its fix and the evidence behind it. Save it as a PDF straight from your browser.

No PDF library is bundled to do it. Your browser already renders type better than any PHP library would, and the result is selectable text rather than a picture of text.

You can also compare any two periods — the last 7, 30, 90 or 365 days, or a custom date range — and export that comparison the same way. If you look after sites for other people, that is the document that shows what actually changed this month.

Privacy: nothing leaves your site

Guru Site Health makes no external requests at all. No accounts, no API keys, no telemetry, no analytics, no «anonymous usage data». Every scan runs on your server and every result is stored in your own database.

The only email it ever sends goes to the address you choose, through your own site’s mail configuration.

That includes fonts. The dashboard’s typeface is bundled with the plugin and served from your own site. A font pulled from Google Fonts would hand a third party the IP address of every administrator who opens the page, which is exactly the kind of quiet leak this plugin exists to find — so it is never loaded that way.

The one exception is the question it asks when you deactivate it, and even then your server sends nothing: picking a reason opens a feedback page in your own browser, carrying the reason, the plugin version and anything you typed. No site URL, no email, no scan data. Just deactivate skips it entirely, and deactivation is never blocked. Switch it off for good with the bwg_site_health/deactivation_survey filter, or point it elsewhere with bwg_site_health/feedback_url.

Try it

Install it, click Run scan, and you will have your score in a few seconds. No account, no key to paste, and nothing on your site is changed.

A longer walk through how the score is built — the six areas, how they are weighted, and the two rules that decide what a missing check does to your number — is at buildwithguru.com.