Free WordPress Resources

Free, practical tools for keeping a WordPress site working, secure and recoverable. Everything here runs in your browser: nothing scans your site, and we never ask for passwords or login details. Checklist ticks are saved only on your own device.

Interactive tools and checklists

WordPress Troubleshooting Finder

Pick a symptom and get likely causes, safe first checks and the right guide.

Interactive tool

WordPress Maintenance Checklist

Weekly, monthly and quarterly tasks with progress tracking and a print option.

Interactive checklist

Security Hardening Checklist

Passwords, MFA, admin roles, updates, configuration and incident basics.

Interactive checklist

Backup and Recovery Checklist

Plan, store and verify backups, and restore without making things worse.

Interactive checklist

Printable checklists

WordPress Migration Checklist

Before, during and after moving to a new host or domain.

Printable

New Site Launch Checklist

Settings, content, security, search and forms before you go live.

Printable

Trusted external testing tools

These free tools are run by other organisations. They test your site from the outside. Here is what each one tells you and what it does not.

Google PageSpeed Insights

PageSpeed Insights shows real-visitor data from the Chrome User Experience Report when your site has enough traffic, plus a simulated Lighthouse test. Use the real-visitor section to judge whether people are affected, and the lab section to find causes. Scores vary between runs, so compare trends rather than single numbers. Our guide to a slow WordPress site explains how to read it.

Qualys SSL Labs Server Test

The SSL Labs Server Test checks your HTTPS certificate, the certificate chain and which protocols your server supports, and gives a grade. It tests the server configuration only: it does not find mixed content inside your pages. For that, see our mixed content guide. Certificate and protocol problems are usually fixed by your host.

Google Search Console

Google Search Console shows how Google crawls and indexes your site, and its Security issues report warns about detected malware or hacked content. Submitting a sitemap tells Google where your pages are; it does not guarantee they will be crawled, indexed or ranked.

Google Safe Browsing site status

The Safe Browsing site status tool shows whether Google currently considers a site unsafe. If your site is flagged, follow our guide to a site redirecting to spam.

WordPress Site Health (built in)

In your dashboard, Tools → Site Health checks your PHP version, scheduled tasks, HTTPS and other configuration from inside WordPress. Read the critical items first, and remember that hosts can modify some tests.