Skip to content
Check a domain

Software check

Runs in every scan · 6 checks

Check your website for outdated software and pluginswith known vulnerabilities in what we find.

See which software your site tells the world it runs, which versions need an update, and which to do first.

  • $8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax)
  • No subscription

What we check

What we look at.Each with evidence and a fix.

Part of every Quick Scan, alongside the other checks.

  • Platforms and versions

    The CMS, server, language and libraries your site announces, such as WordPress, Drupal, PHP, nginx or jQuery.

  • WordPress plugins and themes

    The ones your pages reveal, with their versions.

  • Known vulnerabilities

    Published issues in those versions, most urgent first, including ones known to be used in attacks.

  • End of life

    Release lines that no longer get security fixes.

  • Version give-aways

    Headers and page tags that announce versions to everyone.

  • WordPress remote access

    Whether the XML-RPC interface is advertised.

Why it matters

Small settings.A big difference for your visitors.

  • Know what to update first

    Ranked by what matters, with a rough effort for each.

  • Back on supported versions

    Regular security fixes, flowing again.

  • Say less about your stack

    Fewer version numbers on show.

What a finding looks like

Plain English.With the evidence behind it.

Open the full sample report

F1 · technology-fingerprint

Update an outdated component

Medium Likely Hours

What it means
Your homepage announces PHP 7.4. Moving to a supported version brings back regular security updates and closes the issues public vulnerability data lists for 7.4.
Evidence
X-Powered-By: PHP/7.4.3
PHP 7.4 — end of life 2022-11-28
Expected
A supported PHP 8 release (8.3 or later), version not announced (expose_php = Off)
Fix
Ask your host to move the site to a supported PHP version (8.x). Then stop advertising the version at all: set expose_php = Off.

How to fix it

A few clear steps.In the order to take them.

Your report has the exact fix for your site, ready to forward to whoever looks after it.

  1. Update your CMS core, plugins and themes from the dashboard, or ask your host or developer to.

  2. Remove plugins and themes you no longer use. Deactivated isn't removed.

  3. Move to a supported language version, such as a current PHP 8 release.

  4. Stop announcing version numbers in headers and page tags.

Hide version numbers
; php.ini
expose_php = Off

# nginx
server_tokens off;

Questions

Outdated software questions.

Something else? support@scandefend.com

How do you know which version my site runs?

From what your pages and headers announce publicly, the same things any browser receives. When only part of a version is visible, the report says "possibly affected" rather than confirming, so you can tell a strong match from a hint.

Does a known vulnerability mean my site has been hacked?

No. It means a published problem affects that version, and updating closes it. Issues known to be used in attacks are marked so you can do those first.

Can you see every plugin on my site?

We see the plugins and themes your public pages reveal. Ones that leave no trace on the homepage sit outside a Quick Scan, so keep your dashboard's update list as the full picture.

Does this work for Shopify, Wix or Squarespace?

Yes. Hosted platforms keep their own core software up to date, and the report says when a setting is managed by the platform. We still report what your pages load, such as libraries and embedded scripts.

Keep exploring

Also useful: What we check Sample report Pricing For small businesses

See what your website shows.Know what to fix first.

See pricing