Used by WordPress agencies
Catch website issues
before your clients do.
SiteHealth monitors your client WordPress sites for downtime, security issues, broken pages, SEO regressions, and 35+ other health checks — and sends white-label reports clients love. Built for agencies managing 10–100+ sites.
No credit card required · 14-day free trial · Cancel anytime
Find out what's broken on your client sites right now.
Paste in any URL — get a full health report in seconds.
Free site health scan
Get a full health report in 30 seconds. No signup required.
Built for the agencies that take site health seriously.
WordPress agencies
Monitor 10–100+ client sites from one dashboard. Send branded reports clients actually read.
Solo developers + freelancers
Stop logging into 12 sites every Monday. SiteHealth runs the checks for you.
In-house web teams
Catch security regressions, broken deploys, and SEO drops before stakeholders do.
Three things SiteHealth does that nothing else in your stack does.
Built for the gap between uptime monitors and security scanners.
Outcome 1
Catch downtime in 5 minutes, not 5 hours.
Uptime checks every 5 minutes on Agency tier. Multi-region soon. Email, Slack, SMS, and webhook alerts grouped into incidents — not 50 noisy notifications per outage.
HTTP 503 from all 3 regions
Email + Slack notification dispatched
3 consecutive failed checks
Response time: 312ms · All checks passing
Outcome 2
Send white-label reports clients actually read.
Branded PDF reports with your logo and colors, scheduled weekly or monthly. Clients see a single health score and know you're on top of it. Justifies the retainer.
Outcome 3
Spot WordPress vulnerabilities the day they're disclosed.
Daily-synced WordPress vulnerability database, plus an optional companion plugin that reports your real plugin/theme/core inventory. We tell you which client sites are exposed before attackers find out.
Detected in SiteHealth DB: May 3, 2025 · 2 days after public disclosure
What SiteHealth monitors
38 health checks across 6 categories.
Click a category to see the full check list.
🔒 Security (12)
- SSL certificate validity Checks expiry and chain validity
- Content Security Policy Detects missing or weak CSP headers
- Security headers X-Frame-Options, HSTS, X-Content-Type
- WordPress vulnerabilities Matches plugins/themes against CVE database
- Malware blocklist Checks Google Safe Browsing + 5 other lists
- Mixed content HTTP assets on HTTPS pages
- Cookie security flags Secure, HttpOnly, SameSite attributes
- Admin URL exposure Detects exposed /wp-admin or /wp-login
- Directory listing Open directory indexes on the server
- XML-RPC exposure Checks if xmlrpc.php is publicly accessible
- File editor enabled WordPress theme/plugin editor in dashboard
- Debug mode active WP_DEBUG enabled in production
⚡ Performance (4)
- Response time Time to first byte from our probe servers
- PageSpeed score Lighthouse-powered mobile + desktop scores
- Compression Gzip or Brotli enabled for text assets
- HTTP/2 support Protocol upgrade for multiplexed requests
🔍 SEO (8)
- Meta title & description Presence, length, and uniqueness
- Schema markup Structured data for rich results
- XML sitemap Existence, validity, and submission status
- Robots.txt Presence and absence of accidental noindex
- Canonical tags Self-referencing and correct rel=canonical
- Redirect chains Detects multi-hop redirects that hurt crawl
- Open Graph tags og:title, og:image, og:description on key pages
- Broken internal links Crawls homepage for 4xx internal links
📧 Email Deliverability (3)
- SPF record Sender Policy Framework DNS record check
- DKIM record DomainKeys Identified Mail configuration
- DMARC policy Enforcement policy and reporting address
🌐 Availability (5)
- Uptime monitoring HTTP checks every 5 min (Agency) or daily (Starter)
- DNS monitoring NS record changes and DNS propagation
- Domain expiry WHOIS-based expiry alerts (30, 14, 7 days)
- DNSSEC validation Checks DNSSEC chain if enabled
- WWW consistency www vs non-www redirect consistency
♿ Compliance (6)
- Accessibility score WCAG 2.1 AA violations on homepage
- Favicon Presence and correct size/format
- Content integrity Homepage word count and visible text ratio
- Cookie consent Detects tracking cookies without a consent banner
- HTTPS redirect All HTTP traffic redirects to HTTPS
- Privacy policy link Detectable privacy policy or terms link in footer
All checks run on every scan. Interval depends on your plan.
How SiteHealth compares to your current stack.
| Feature | UptimeRobot | Wordfence | Pingdom | SiteHealth |
|---|---|---|---|---|
| Uptime monitoring | ✓ | ✗ | ✓ | ✓ |
| WP vulnerability scanning | ✗ | ✓ | ✗ | ✓ |
| SEO regression checks | ✗ | ✗ | ~ | ✓ |
| Multi-site dashboard | ✗ | ✗ | ✓ | ✓ |
| White-label client reports | ✗ | ✗ | ✗ | ✓ |
| WordPress companion plugin | ✗ | ✓ | ✗ | ✓ |
| Content change detection | ✗ | ✗ | ✗ | ✓ |
| Single price for all features | ✗ | ✗ | ✗ | ✓ |
Comparison reflects publicly listed features as of May 2026. We'd love to be wrong — email us if we are.
WordPress plugin
Optional WordPress plugin = deeper visibility.
Install our free WordPress plugin and SiteHealth sees inside your client sites — exact plugin/theme/core versions, admin user changes, file integrity, login events. No more guessing whether a "WP Security Suite" plugin is the vulnerable one or the patched fork.
The plugin is free, open-source, and works with any tier.
Pricing
Simple pricing. Cancel anytime.
Starter
For freelancers and small agencies just getting started.
Pro
For agencies with multiple clients and client reporting needs.
Agency
For large agencies managing 50–100+ sites.
All plans include: 38 health checks, public scan reports, WordPress companion plugin, email support, 14-day money-back guarantee.
Need more than 100 sites? Email us for Enterprise pricing.
14 days free on any plan. No credit card required.
Frequently asked questions
Everything an agency needs to know before switching.
How is this different from UptimeRobot or Wordfence?
UptimeRobot only monitors whether your site is up — it has no idea if WordPress plugins are vulnerable, if your SSL is misconfigured, or if SEO tags are broken. Wordfence is a WordPress security plugin but has no uptime monitoring, no SEO checks, and no multi-site dashboard. SiteHealth is the only tool that combines uptime, security, SEO, email deliverability, and white-label reporting in one place — without installing a plugin on every site.
Do I need to install anything on my client sites?
No. SiteHealth works from outside your sites — just add a URL to your dashboard and monitoring starts immediately. For deeper visibility (exact plugin versions, admin events, file integrity), you can optionally install our free WordPress plugin. The plugin is never required.
What happens if SiteHealth itself goes down?
Checks run from multiple independent probe servers. If our primary monitoring infrastructure has an issue, secondary probes continue independently. We maintain a public status page at status.sitehealth.app. Historical check data is stored redundantly so nothing is lost during an outage.
Can I rebrand the reports for my clients?
Yes — on Pro and Agency plans, reports show your agency’s name, logo, and accent color. Clients see your brand, not ours. The “Powered by SiteHealth” watermark on free scan reports is removed when you’re on a paid plan.
How does the WordPress plugin work? Do I have to install it?
The plugin is a lightweight, open-source PHP plugin that reports your site’s exact inventory — plugin/theme/core versions, user count changes, login events, and file changes — to your SiteHealth dashboard. It’s never required, but it makes vulnerability matching far more accurate. Without it, we compare your WordPress version against known vulnerabilities. With it, we check every plugin and theme individually.
Where is my data stored? GDPR?
Check data and site metadata are stored on servers in the EU (Frankfurt). We do not sell data to third parties. SiteHealth is designed to be GDPR-compliant: you can export or delete your data at any time from the dashboard. We only store the minimum data needed to run your health checks.
Can I cancel anytime?
Yes. Cancel from your dashboard settings at any time — no phone call required, no hoops. Your monitoring continues until the end of your billing period, then stops. We also offer a 14-day money-back guarantee on all paid plans, no questions asked.
Do you support non-WordPress sites?
Yes. Most of SiteHealth’s 38 checks work on any website — SSL, uptime, performance, SEO, security headers, and more. WordPress-specific checks (plugin vulnerabilities, companion plugin) simply don’t apply to non-WordPress sites and are skipped. The companion plugin only works with WordPress.
Built by the person who'll answer your email
Hi, I'm Andrew.
I've been building web products for over a decade. SiteHealth started as an internal tool I built after one too many "hey, the site is down" emails from clients. It turned into the unified health monitor I wish had existed when I was running an agency.
I read every email. If you have questions, feedback, or just want to say hello — reach out directly.
andrew@sitehealth.appFind out what's broken on your client sites.
Run a free scan. No signup required.
Free site health scan
Get a full health report in 30 seconds. No signup required.