Built for the WordPress community

Our mission

WordPress powers over 43% of the web. Yet many site owners — especially smaller businesses and independent creators — lack access to the professional-grade tools that help them understand how their site is performing. WPStats was built to fix that.

We provide instant, free analysis of any WordPress website without requiring registration, payment, or any account. Enter a URL and get a comprehensive report in seconds.

What WPStats analyzes

• Speed & Core Web Vitals
  Real data from Google PageSpeed Insights API. Performance, Accessibility, Best Practices, and SEO scores for both mobile and desktop. FCP, LCP, TBT, CLS metrics with visual indicators.
• Security analysis
  Checks HTTPS, exposed WordPress version, open XMLRPC endpoint, user enumeration via REST API, RSD files, WLW manifests, and more. Calculates an overall security score.
• SEO audit
  Detects title tags, meta descriptions, Open Graph tags, Twitter Cards, Schema.org structured data, canonical URLs, sitemap.xml, and robots.txt. Identifies active SEO plugins (Yoast, Rank Math, AIOSEO).
• Plugin & theme detection
  Identifies plugins and active theme from HTML source code. Detects WooCommerce, Elementor, Divi, Gutenberg blocks, caching plugins, and 100+ more common plugins.
• REST API analysis
  Checks if the WordPress REST API is active, counts registered routes, and detects whether user accounts or posts are publicly exposed through the API (a common security concern).
• 40+ language support
  WPStats is fully translated into over 40 languages including Bulgarian, Arabic, Japanese, Chinese, and all major European languages. RTL support included.

How it works

When you submit a URL, WPStats performs several parallel checks:

1. HTML fetch — Our server fetches the page's HTML source using PHP cURL
2. Pattern matching — Regex analysis detects WordPress fingerprints, plugins, and meta tags
3. REST API check — We query /wp-json/ and specific endpoints
4. PageSpeed API — Parallel requests to Google's PSI API for mobile and desktop
5. Score calculation — Security and SEO scores are computed from all findings
6. Results rendered — Everything is displayed in your browser — nothing is stored

Technology stack

Privacy & data

We are committed to minimal data collection. WPStats does not store the URLs you analyze or any analysis results. We store only an anonymous SHA-256 hash of your IP address (not the IP itself) to enforce the daily rate limit, which auto-expires in 24 hours. No cookies, no tracking, no advertising.

Read our full Privacy Policy for complete details.

Fair use

WPStats is free for everyone and limited to 5 analyses per day per IP address. This keeps the service sustainable and ensures fair access. If you're an agency or developer needing higher limits, contact us to discuss options.

Open to the community

WPStats was built by WordPress developers, for WordPress developers. We actively listen to community feedback and continuously improve the tool. If you have a feature request, found a bug, or want to contribute a language translation, we'd love to hear from you.