BadgerScan Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
Most WordPress security plugins look at your site from one side. A scanner on the outside sees your headers and certificate but has to guess at your versions. A plugin on the inside knows your exact versions but cannot see what your server actually serves to a visitor.
BadgerScan looks from both sides and reconciles the two into a single grade. That reconciliation is the point, because the two views disagree more often than you would expect, and the disagreement is usually the interesting part:
- A weakness that is real inside but blocked at your web server stops dragging your grade down, instead of scaring you about something visitors cannot reach.
- A setting that looks correct inside but is not actually enforced where it counts is caught, instead of passing quietly.
- An outdated component the outside scan can only guess at is confirmed by the exact version read from inside.
It is strictly read-only about your site. It never edits one of your files, changes one of your settings, or touches your content, and it reports findings rather than content: versions, counts, and flags, never your posts, usernames, or passwords. The only things it writes are its own: your consent flag, your connect key, and its cached scan results.
It checks:
- WordPress core, plugin, and theme versions and pending updates
- Admin accounts, the “admin” username, and open registration
- Configuration: WP_DEBUG, the dashboard file editor, XML-RPC, table prefix
- Exposure: backup files, debug logs, and readme.html sitting in the web root
- Transport: HTTPS
It is read-only and data-minimized. It reports versions, counts, and flags only. It never reads, stores, or transmits your post content, usernames in bulk, or passwords, and it never changes one of your settings, edits one of your files, or alters your content. It stores only its own options and cached results.
Free vs Pro
The scan and grade are free, with no account required. Connect a BadgerScan account to unlock Pro:
- The full report: the outside view of what your site shows the public internet (DNS, email, TLS, headers, exposed files, from public data only) combined with the inside view, as a branded PDF you can keep or hand to a client
- The specific CVE IDs and fixes for your exact plugin, theme, and core versions
- Email alerts the moment your grade drops or a new CVE hits a version you run
- Full scan history in your dashboard, so you can see the trend rather than one snapshot
BadgerScan Pro is C$10/mo per site.
CyberBadger, who make BadgerScan, also do the fixing for people who would rather hand it over: a one-off analyst review with a remediation plan, or fully managed WordPress upkeep. Those are services, not plugin features, and nothing in the plugin depends on them.
External services / Privacy
BadgerScan relies on the BadgerScan service operated by CyberBadger (https://badgerscan.cyberbadger.ca) to score your scan and, if you connect an account, to store your history and send reports.
- What is sent: your site URL, the plugin version, the WordPress core/plugin/theme versions and counts, the configuration and exposure flags listed above, and the file names of any suspicious or modified files we flag. If you have connected an account, your connect key.
- What is never sent: post or page content, usernames in bulk, passwords, or other personal data.
- When: when you run a scan. That means a manual click, or the automatic daily scan once you have consented by running your first scan. Never on install, and never before you consent. You can switch this off on the BadgerScan screen at any time; that stops the daily scan and the polling below.
- Polling (connected accounts only): if you have connected an account, the plugin also asks the service every 15 minutes whether you have requested a re-scan from your dashboard. That request sends your site address, the plugin version, and your connect key, and nothing else. It runs a scan only if you asked for one, and it stops entirely if you switch automatic contact off.
- Why: to calculate your grade and, for Pro, to save history and send alerts.
Terms: https://badgerscan.cyberbadger.ca/terms
Privacy: https://badgerscan.cyberbadger.ca/privacy
Screenshots
No screenshots provided
