One-time written diagnosis — technical, security, performance, SEO. PDF report + walkthrough call.
Base scope of work — applies to all tiers. See the tier comparison below for hours and SLA specifics.
PHP version, WP core hash check, plugin/theme inventory, deprecated hook scan, mu-plugin review, cron audit.
Login surface, REST API exposure, plugin CVEs, file permissions, user role audit, 2FA coverage, salts rotation.
LCP / INP / CLS field data, asset waterfall, cache effectiveness, DB query log, image weight audit.
Indexation, canonical sanity, schema validation, internal-link health, thin-content map, meta coverage.
Findings ranked by severity. Each one has reproduction steps, screenshot, and the fix-effort estimate.
We screen-share the report and answer questions. Recorded if your team cannot all attend live.
Transparent process — you always know what stage we're at and what comes next.
You hand over read-only WP, hosting, and Search Console access. We send a 1-page kickoff doc with what to expect.
We run our internal scan stack (Wordfence CLI, WPScan CLI, Lighthouse, Screaming Frog, custom DB profiler). Raw findings land in a triage doc.
Senior engineer walks the code, the admin, and the front-end. Catches what scanners miss — custom code smells, leaky hooks, brittle integrations.
We write findings up with severity, evidence, and remediation effort. Every finding has a screenshot.
Screen-share the report end to end. You leave with a ranked fix list and we are done.
Pick the level that fits your size and required response time. You can switch tiers between months.
Four-stream 80-point audit for sites up to 50k visits/month.
Deep 140-point audit + 90-day remediation roadmap for high-traffic and eCommerce.
Scope transparency — no surprises in the monthly report.
Access we require — passed via secure channel (1Password / Bitwarden).
"We were about to spend 12k on a redesign. The audit said the front-end was fine — the real problem was a runaway WooCommerce cron. Fixed it in 4 hours. Saved us 11.6k."
"The 90-day roadmap was the deliverable we kept. Half of it was things we already suspected — the other half saved us from at least one Friday-evening outage."
Standard 80-point audit is $499 fixed. Premium 140-point audit with a 90-day remediation roadmap is $999. Most agencies charge $1,500 to $3,000 for the same scope because they fold an account-management retainer into the price. We do not.
Standard ships 5 business days from access handover. Premium ships 7 days. The walkthrough call is scheduled within the week after delivery.
Executive summary, severity-ranked findings (each with screenshot + reproduction + fix effort), 4 stream chapters (Tech / Security / Performance / SEO), and a prioritized fix list. Premium adds a 90-day roadmap with effort and impact scoring.
No. All checks are read-only or run against a staging clone. The only time we touch production is the backup-restore drill, and that runs on staging too. Your real site is not slowed, not changed, not at risk.
Not as part of the audit price. We hand you the ranked list. From there you can fix it yourselves, give the list to your existing agency, or hire us to implement under one of our other services (Optimization, Support, or a care plan).
It would not survive on this site if it were. The PDF is the deliverable. Plenty of clients take the report and never come back — that is fine. If you do hire us for remediation, the audit fee comes off the first invoice.
Sites under 50k monthly visits without WooCommerce, LMS, or custom plugins: Standard. Sites with eCommerce, memberships, multilingual, or 10k+ lines of custom code: Premium. If unsure, book the kickoff call and we will recommend.
Yes, agency partners get white-label PDFs with your branding. Bulk pricing kicks in at 3+ audits per month. Email [email protected] for terms.
A WordPress audit is a one-time, written diagnosis of where your site is healthy, where it is fragile, and what the priority fixes are. Four streams: technical, security, performance, and SEO. Deliverable is a PDF report and a 60-minute walkthrough call. Most clients order an audit before deciding whether they need a maintenance care plan, a speed optimization sprint, or a redesign. The audit gives you the data to decide.
An audit gives you the report. If you want the ongoing engagement — monthly content, schema, ranking work — pair it with our WordPress SEO service.
Got a written audit report and not sure what to do with it? Our WordPress consulting turns the audit into a prioritized action plan — 2-hour package or hourly.
If the report comes back without at least 5 severity-Medium or higher findings, we refund the engagement in full. We have never refunded an audit.
