scan

They launched a new version of https://wpsecurityanalyzer.com -- Non-intrusive, read-only surface scan. We hit public endpoints the same way a browser would — no login, no payload, no stress on your origin. It is nice, give it a try, it is free.