Checknaut

Checknaut checks every page of your WordPress site and tells you, in plain English, what a visitor would trip over and what to do. Where it can make the change itself, there is a Fix button, and every fix can be undone.

Free, with no page limit, no account and no AI service.

How it works

• Open Checknaut. The first visit checks the whole site, in about a minute.

• Home shows one score out of 100 (Excellent, Good, Needs work or Needs attention) and the three fixes that matter most.

• Open a fix: what is wrong, on which pages, whether visitors will notice, and what to do. Click Fix, or mark it “It’s fine as is” with your reason.

• Undo history lists every change Checknaut made, each with its own Undo.

Six plain groups

Everything found lands in Broken, Looks unfinished, Easy for everyone, Found on Google, Speed or Safety, marked Critical, Warning or Good to fix. Behind them run seven audits: site QA, accessibility, SEO, performance, Site Health, legal pages and design consistency. They fetch each page the way a visitor does and read what is actually served.

What they cannot see (content a builder generates at render, a host that blocks loopback requests) is named, never counted clean.

One-click fixes, free

Image descriptions from your Media Library, heading structure, zoom on phones, skip link, main landmark, SEO fields (with an SEO plugin), image compression and the security switches. Here each Fix button fixes one page. Fixes are written into your site at the source: no overlay, nothing tracked about your visitors.

Also free: Pages (every page and post, what built it, when it changed, how many things it has to fix), internal link checks, snapshots, runtime diagnostics, a read-only switch, a Deep Space theme and the admin in nine languages.

Three builders are written: Divi 5, Elementor and the block editor. Every other builder (Bricks, Beaver Builder, Breakdance, Oxygen, WPBakery and the rest) is detected by name, audited from its rendered page, and refused for writes rather than guessed at.

com. It fixes a problem on every page in one click and adds Launch Check, speed tools, site reports, scheduled audits, legal page drafts, filters and CSV export on Pages, and the AI connector (Claude, ChatGPT or any MCP client). This plugin contains no AI connector: it serves no MCP endpoint, registers no REST route of its own and calls no AI service.

Its screens show locked previews of Pro, which each user can hide.

What it will not do. Audit output is automated static analysis: a floor, not a certification of ADA, WCAG, GDPR or any other law, and not legal advice. Nothing is written to a page without a way back.

WordPress is a registered trademark of the WordPress Foundation. Divi is a registered trademark of Elegant Themes, Inc. Elementor is a registered trademark of Elementor Ltd.

Checknaut is an independent product by Abcreative, LLC and is not affiliated with, authorized by, endorsed by, or sponsored by any of them. All other product names and brands are the property of their respective owners.

1.

External services

This plugin connects to the services below, only when the feature that needs them is used.

• WordPress.org (api.wordpress.org): Site Health compares your core files with WordPress.org’s published checksums, runs WordPress’s own update check, and reads each installed plugin’s directory listing (last update, tested version) to flag abandoned plugins. Sends your WordPress version, locale and plugin slugs. Privacy policy: https://wordpress.org/about/privacy/

• Your own site: audits and diagnostics fetch this site’s pages as a visitor would. Nothing leaves the server.

• DNS: Site Health looks up your domain’s SPF, DMARC and MX records with your server’s resolver. Only the domain name is sent.

• RDAP (rdap.org): when the Site Health audit runs, it asks rdap.org (which redirects to your registry) for your domain’s expiry date. Only the domain name is sent; cached 24 hours; the checknaut_health_domain_lookup filter turns it off. Privacy: https://about.rdap.org/ · https://www.icann.org/privacy/policy

• Link checker (only with Checknaut Pro): when a link check runs, each URL linked from the checked page(s) gets a HEAD or GET request. Only the URL is sent, not your site’s address.

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com): only when a font family is recorded for loading (Checknaut Pro does this for a Google font Divi does not load), visitors’ browsers fetch its stylesheet from Google. The plugin sends nothing to Google. Privacy FAQ: https://developers.google.com/fonts/faq/privacy · Privacy policy: https://policies.google.com/privacy · Terms: https://policies.google.com/terms

• WPVulnerability (www.wpvulnerability.net): off unless you turn it on in Site Health. Each audit, and Pro’s re-check after an update, sends the WordPress version and plugin/theme folder names, custom ones too (none with a non-wordpress.org Update URI). The service sees your server’s IP address and a Checknaut user agent. Cached 12 hours. Terms: https://www.wpvulnerability.com/license/ · Privacy: https://www.wpvulnerability.com/privacy/

• Checknaut checkout (checknaut.com/buy/): only when you click Choose on Checknaut → Upgrade to Pro, your browser opens our store’s checkout in a frame. What you enter there goes to our reseller, the merchant of record: https://checknaut.com/privacy-policy/

• Hostinger API (developers.hostinger.com): only if you save a Hostinger API token (Settings → Environment), the plugin asks Hostinger to purge its cache after a fix. Sends your domain and token. Terms: https://www.hostinger.com/legal/universal-terms-of-service-agreement · Privacy: https://www.hostinger.com/legal/privacy-policy