Browse categories
Explore
Fiverr Pro
English
$
USD
I will do a wordpress security audit and vulnerability scan with a PDF report
Frank M.
About this gig
Passive, non-intrusive WordPress security check: nothing on your site is changed.
Not sure if your WordPress site is exposed? Get a quick, NON-INTRUSIVE security check and a clear written report.
What I check (passive, public info only):
- WordPress core, plugin and theme versions visible from outside
- Known vulnerabilities for those versions (WPScan vulnerability DB, public CVEs)
- HTTPS/TLS configuration and certificate
- Security headers (HSTS, CSP, X-Frame-Options...)
- Exposed files and endpoints: readme, xmlrpc.php, user enumeration
- Login page protection
- Optional: wp-admin settings review if you give me access (Premium)
What you get: a PDF report with each finding, its risk level and plain-English fix steps.
This gig is REPORT ONLY. No fixes, no brute force, no exploitation, no load testing. You must own the site (or be authorized) and confirm it in writing in the order.
Want the issues fixed? Check my WordPress hardening gig.
About me: basic and advanced ethical hacking training, 10+ years on Linux and macOS, and my own isolated analysis lab.
Message me before ordering if you have questions.
Respect third-party rights
Please be aware that it is against Fiverr's policies for sellers to include themes, templates, or any other elements that infringe third-party rights or applicable laws in the delivered work. Read more about in our Guide to Responsible Digital Creation.
Get to know Frank M.
Frank M.
Linux and WordPress Security Specialist
- FromSpain
- Member sinceOct 2026
Languages
Spanish, English
Linux and WordPress security hardening from Madrid, Spain. I have used Linux and macOS daily for over 10 years and I completed ethical hacking training by Securízame (basic and advanced). I secure Ubuntu/Debian VPS servers (SSH keys, firewall, fail2ban, automatic security updates, Lynis audit) and WordPress sites (updates, login protection, security headers, XML-RPC and user enumeration lockdown), and I deliver a clear before/after report. I only work on systems you own, with your written authorization.
My Portfolio
FAQ
Will you change anything on my site?
No. This gig is report only. I don't install plugins or edit files. If you want fixes, see my WordPress hardening gig.
Is the check safe for my site?
Yes. I only use passive, public information and normal page requests. No brute force, no exploitation, no load testing.
Can I order a check for a site I don't own?
No. You must own the site or have written authorization from the owner, confirmed in the order requirements.
Do I need to give you admin access?
Not for Basic or Standard. Admin access is only needed (and optional) for Premium; you can create a temporary account and delete it afterwards.
