Security

WordPress security posture check — PASSIVE hygiene assessment from public signals

WordPress security posture check — PASSIVE hygiene assessment from public signals: detects WordPress, flags version disclosure (generator tag, readme.html), xmlrpc.php exposure, user enumeration, uploads directory listing, login exposure, missing security headers, and HTTPS. Returns a 0-100 posture score with prioritized remediation. Flags security practice, not exploitable vulnerabilities — no CVE matching, no intrusion. For site owners and authorized auditors. ?url=

Price: $0.005 per call, paid in USDC via the x402 protocol (see the x402 security scheme).

get/api/wp/assess

Request

  • Base URL: https://api.webbersites.com
  • URL: https://api.webbersites.com/api/wp/assess
  • Auth: API key in header X-PAYMENT

Query parameters

urlstring required

WordPress site URL to assess (homepage)

Response

Success

is_wordpressboolean
posture_scorenumber
gradestring

Changes

No recorded changes to this operation across all 1 revision of this API.