by Piotr Kunicki 0 (0 reviews)

Tuning4Web – Security Check

Name: Tuning4Web – Security Check
Author: Piotr Kunicki

Checks your site the way an anonymous visitor sees it, verifies that your WordPress hardening actually works, and lists external scripts it loads.

Tuning4Web ranks #68,171 among WordPress.org plugins with 0+ active installations, is #3,855 of 5,058 in the Security category, and was last updated Oct 15, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v1.3.7 Current Version v1.3.7

Updated 2 weeks ago Last Update on 15 Oct, 2026

Refreshed 2 days ago Last Refreshed on

#3,855 of 5,058 in Security Actively maintained

View on WordPress.org

Rank

#68,171

— No change

Active Installs

— No change

KW Avg Position

134

— No change

Downloads

137

+1 today

Support Resolved

— No change

Rating

Review 0 out of 5

0 (0 reviews)

Next Milestone 10

Total Progress 10%

0+ 10+

40,603

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 9 more installs to reach 10+

Rank Changes

Current #68,171

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

0.0

0 reviews

Overall 0%

0 (0%)

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.3.7
Last Updated: Oct 15, 2026
Requires WP: 6.0+
Tested Up To: 7.1.4
PHP Version: 7.4 or higher
Author: Piotr Kunicki

Support & Rating

Rating: ☆ ☆ ☆ ☆ ☆ 0
Reviews: 0
Support Threads: 0
Resolved: 0%

Keywords

external scripts hardening security Security Headers user enumeration

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security – Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

Frequently Asked Questions

Common questions about Tuning4Web – Security Check

No. It does not block traffic or scan files for malware. It checks whether the hardening you have (from any plugin, the server or the host) is effective, and fills gaps with a few simple, reversible switches.

The plugin could not decide automatically, for example because the site is in maintenance mode or answers every unknown URL with a normal page. Check that URL manually.

Page caches such as WP Super Cache serve stored pages before plugins load, so headers added or removed by the switch do not reach cached pages. The check detects this by comparing the cached home page with a freshly generated one, and shows a server rule (.htaccess, Nginx or PHP settings) that covers every response.

An anonymous request to the editor is always redirected to the login page before WordPress reads DISALLOW_FILE_EDIT. The plugin therefore reads the constant directly.

It writes a small PHP file with a random name into the uploads directory. The file only prints a random marker. The plugin requests it once and deletes it immediately. If the marker comes back, PHP runs in uploads and you should block it with the server rule the plugin shows. You can turn the test off with the checkbox next to the button.

Only the eight key values are replaced. If they cannot be found exactly once each, nothing is changed. After writing, the plugin requests your home page and restores the original file if the site does not respond correctly. Everyone is logged out, which is intended.

Only users with the manage_options capability (administrators). On multisite, only network administrators can rotate the keys, because wp-config.php is shared by the whole network.