TrustBeacon Email Delivery Auditor

TrustBeacon Email Delivery Auditor identifies publicly visible DNS, email-authentication, and domain-configuration problems that can interfere with WordPress email transmission and delivery.

If WordPress messages are failing, being rejected, or landing in spam, TrustBeacon provides a single plain-English audit of the public configuration affecting your domain and email. Every finding includes an explanation, a recommendation, and the potential business impact.

The plugin checks email-delivery and domain-trust signals such as:

Email transmission and receipt

• MX records

• Public mail-domain configuration

Email authentication and deliverability

• SPF records and enforcement strength

• Limited common-selector DKIM discovery, plus administrator-supplied selectors

• DMARC policies and enforcement strength

Supporting domain and website trust

• SSL certificate availability

• HTTP security headers

• CAA records

• DNSSEC indicators when supported by the server

• Cloudflare indicators in public response headers

• Public security plugin indicators visible in page HTML

The report includes:

• An overall Trust Score

• Separate category ratings

• Passing, warning, failing, and informational findings

• Plain-English explanations

• Recommended corrective actions

• Business-impact explanations

TrustBeacon performs diagnostic checks. It saves only the latest timestamped report and optional DKIM selector settings in this WordPress database. It does not change DNS records, mail settings, security controls, or content.

Important: TrustBeacon evaluates publicly visible configuration and trust indicators. It does not send a test email, inspect private mail-server settings, guarantee inbox placement, or provide a security certification, penetration test, malware scan, or compliance audit.

Admin Dashboard

The Trust Auditor admin page presents results as a dashboard rather than a single wide table:

• An overall Trust Score is shown as a circular gauge alongside the trust grade and counts of passing, warning, failing, and informational findings, all derived directly from the current audit’s findings.

• Email Authentication, Website Security, Visitor Protection, and DNS Security are shown as separate summary cards using the plugin’s existing category ratings (Excellent, Good, Fair, Needs Attention, or Additional Review Recommended).

• Findings are grouped by category. Each finding keeps its category, check, status, score, message, recommendation, and business impact; recommendation and business impact are available in an expandable “Recommendation and business impact” section.

• Status is always shown as visible text (PASS, WARN, FAIL, INFO) in addition to color, and a small status dot is decorative only.

• Before an audit has been run, an introductory panel explains what will be checked. It does not display a score or findings, so nothing can be mistaken for real results.

• The dashboard styling loads only on the Trust Auditor admin page and does not affect the rest of the WordPress admin area.

• The dashboard works without JavaScript. Recommendation and business impact sections use the browser’s native expand/collapse control.

External services

TrustBeacon Auditor performs remote HTTPS requests to websites selected

by the site administrator in order to audit publicly available trust

signals.

The plugin connects directly to the website being audited to inspect

information such as:

• SSL certificate availability

• HTTP response headers

• Cloudflare detection

• Security plugin indicators

Data transmitted:

• The domain name entered by the administrator.

• Standard HTTP request headers, including a User-Agent string.

These requests occur only when an administrator initiates an audit.

No personal visitor information is collected, stored, or transmitted.

The plugin does not use any third-party commercial APIs.

Privacy Policy:

com/privacy-policy/

Terms of Use:

com/terms-of-use/

WPVibe and WordPress Abilities

9 or newer, TrustBeacon exposes two administrator-only abilities:

• trustbeacon/run-audit: run the installed site audit and save its latest report. Optional selectors is an array of up to 10 names. Omit it to use saved selector settings; [] requests limited automatic discovery. A supplied list is a one-run override and does not change settings.

• trustbeacon/get-last-audit: read the saved report without running new checks.

WPVibe can discover these abilities through WordPress. No separate AI key, account, pairing protocol, or WPVibe-specific credential is added by TrustBeacon. A WPVibe connection must already be authorized independently.

Administrator permission (manage_options) is required for both abilities. Older WordPress installations retain the normal dashboard without Abilities integration.

Identical scans within 60 seconds return the same timestamped report. Always check completed_at. Reports contain structured findings, DKIM lookup evidence, limitations, and message_authentication=not_tested.

Unknown/INFO findings are excluded from the score; this exclusion does not establish that an unknown check passed. Each supplied-selector assessment contributes at most one DKIM summary to the score, regardless of the number of selectors. Discovery contributes no scored DKIM pass.

The most recent report and selector settings are stored locally until replaced or manually removed. They contain public configuration observations, not messages, private keys, visitor data, or mailbox credentials. When a connected client requests an audit, the results pass through that client and its connector under their own privacy policies.

TrustBeacon itself does not contact an AI service.