Questions, feedback, or support. We're here to help.
Whether you have a support question, a feature idea, a partnership inquiry, or feedback on Plugin Auditor, send us a message and we'll get back to you as soon as we can.
Plugin Auditor is currently in early access, so response times may vary slightly.
Based in
India, IST (UTC+5:30)
Find us online
Before you contact us
We'll only use your details to reply to your message. See our privacy policy.
Frequently asked questions
Everything you need to know before getting started.
125 automated checks across six categories: security, code standards, performance, compatibility, accessibility, and privacy. That covers things like SQL injection risks, missing nonce verification, deprecated functions, PHP version compatibility, and more. Every issue is flagged with its exact file and line.
Each check is weighted by severity, so critical issues like SQL injection or a missing nonce carry more weight than minor warnings. Scores run from 0 to 100 and reflect the plugin's overall risk profile across all 125 checks.
No. Your code is extracted into a temporary sandbox, scanned, and deleted the moment the scan finishes. We keep the scan result and report, never your source code. This is true for every scan, with or without an account.
Yes. Scan any plugin on WordPress.org by name or slug, or upload a ZIP for premium, private, or custom-built plugins. If it is a WordPress plugin, Plugin Auditor can scan it.
Without an account you get 3 scans per day, which reset daily. A free account gives you 30 scans per day, resetting each day. That is the full experience at launch.
Yes. Every scan gets a public link that never expires, and no account is needed to view it. Registered users can also export a full PDF report to include in a proposal or handoff.