Skip to content
SPECIFICTION
Get listed

WPSec

wpsec.com

From €19/mo Free plan WebAPI
Visit wpsec.com
Spec score 7.6 #15 of 33 in Vulnerability Management Software

What it is

WPSec is a cloud service for scanning WordPress websites for vulnerabilities and outdated software. Available through the web and an API, it checks sites against a vulnerability database using WPScan-based and custom scanning technology. A dashboard tracks multiple installations, while reports describe findings and possible remedies. Depending on the selected plan, scans run monthly, weekly, or daily. Its Attack Surface analysis examines code from more than 118,000 plugins and assigns risk scores even where no known vulnerability is recorded. Email and smartphone push alerts can flag security issues involving plugins and themes. The Free plan costs nothing and allows one scan location, up to 10 reports, and monthly scans. Premium costs €19 a month per website, with higher-band per-site pricing, and adds exports, API, webhooks, CLI, AI/MCP integration, stealth scanning, and WAF-bypass scanning. White Label costs €295 a month, billed €3400/year.

Spec sheet

Product
WPSec describes itself as an online security scanner for WordPress vulnerabilities that tracks installations and identifies outdated software.Read 10 Oct 2026 · wpsec.com
Integrations
A WPSec article says outgoing JSON webhooks can integrate with third-party services such as Slack and Zapier.Read 10 Oct 2026 · blog.wpsec.com
Support
WPSec says support typically responds within three business days.Read 10 Oct 2026 · wpsec.com
Headquarters
Funäsdalen, SwedenRead 28 Sep 2026 · wpsec.com
Company
The site identifies WPSec as a service by Triop AB in Funäsdalen, Sweden.Read 10 Oct 2026 · wpsec.com
Alerts
WPSec offers email and smartphone push notifications about security issues, including outdated or risky plugins and themes.Read 10 Oct 2026 · wpsec.com
Attack surface
WPSec says it analyzes code behind 118,000+ plugins and scores plugin risk, including when no known vulnerability exists.Read 10 Oct 2026 · wpsec.com
Dashboard and reports
Users can track multiple WordPress websites in a dashboard and receive reports explaining findings and how to address them.Read 10 Oct 2026 · wpsec.com
Exports and access
Premium includes PDF and JSON report exports, API, webhooks, CLI access, and AI/MCP integration with Claude and Cursor.Read 10 Oct 2026 · wpsec.com
Free plan limit
The Free plan includes one WordPress scan location, up to 10 scan reports, and monthly scans.Read 10 Oct 2026 · wpsec.com
Scan controls
Premium includes stealth and WAF-bypass scanning.Read 10 Oct 2026 · wpsec.com
Scanner
Its scanner is based on WPScan and custom technology, and checks WordPress websites against a vulnerability database.Read 10 Oct 2026 · wpsec.com
Scheduled scans
Account scans can run daily, weekly, or monthly, depending on the selected plan.Read 10 Oct 2026 · wpsec.com
Security disclosure
WPSec publishes a vulnerability reporting program with safe-harbor terms and a PGP key for reporting issues.Read 10 Oct 2026 · wpsec.com

Plans and prices

Free Free 84,900 known vulnerabilities · 1 scan location · Up to 10 scan reports · Monthly scans Read 10 Oct 2026 · wpsec.com
Premium €19 a month per website; €19 each for websites 1–2, then €6, €3, €2, and €1 each across higher bands Daily, weekly, or monthly scans · Attack Surface analysis and CVE matching · PDF and JSON exports · API, webhooks, CLI · AI/MCP integration · Stealth and WAF-bypass scanning Read 10 Oct 2026 · wpsec.com
White Label €295 a month €3400/year Everything in Premium · Unlimited scans and reports · Branded design, logo, and domain · Separate isolated instance Read 10 Oct 2026 · wpsec.com

Every WPSec plan and price →

Strong points and limits

Strong points

  • Free plan includes monthly WordPress scans
  • Tracks multiple sites in one dashboard
  • Analyzes code from 118,000+ plugins
  • Email and push security alerts
  • Premium offers API, webhooks, and CLI

Limits

  • Free plan limits scans to one location
  • Free plan allows only 10 reports
  • Premium billed per website
  • White Label costs €295 a month

Who it suits

WPSec suits WordPress administrators managing one or several sites who need vulnerability checks, reports, and alerts. Premium features fit users needing integrations, exports, or more frequent scans.

Verdict

WPSec combines WordPress vulnerability scanning, plugin risk analysis, reporting, and notifications in a cloud service. The free tier is limited, while paid plans add automation, integrations, exports, and advanced scan controls.

Where Specifiction places it

Alternatives to WPSecAll alternatives →