Site Checkup
Sample report · fictional data

Needs attention

  1. A
  2. B
  3. C
  4. D
  5. F

Check-up report

cedar-bakery.example

Cedar Bakery, Mar Mikhael · Sunday 1 November 2026, 10:42 Beirut time

Your website works and the basics are in place: visits are encrypted and WordPress is up to date. But two doors are open. A test page shows anyone how your server is set up, and an old backup of the whole site can be downloaded. Both are what automated attacks look for every day, and both take under an hour to fix.

Fix this with CodataleRun a deeper scan
  • 2 to fix now
  • 2 to fix soon
  • 1 worth doing
  • Fix the urgent ones to reach a B.

What we found

Most important first

Fix nowExposed files· SecurityFix time: 5 minutes

Anyone can see your server configuration

A test page left on your server lists the exact software and settings your site runs on. Attackers use this kind of page to choose the attacks that will work on you, so it saves them most of their homework.

Fix nowExposed files· SecurityFix time: 15 minutes

An old copy of your website can be downloaded

A full backup from June 2025 sits in a public folder. Backups usually hold customer orders, email addresses and the passwords your site uses, so whoever downloads it gets a copy of your business.

Fix soonWordPress and plugin versions· SecurityFix time: 10 minutes

Your order form plugin is two versions behind

The plugin that takes cake orders is out of date. Newer versions fix a problem that lets someone send spam through your form, which can get your emails marked as junk.

Fix soonSecurity headers· SecurityFix time: 30 minutes

Your site doesn’t ask browsers to protect visitors

Browsers can block common tricks, like loading your site inside a fake page to steal clicks, but only if your site asks them to. Four of the five standard protections are switched off.