A useful WordPress security baseline—free.
Local core, plugin, and theme integrity checks with dashboard status and optional weekly email. No account required.
PressPatrol Free is for site owners who want a clear answer to a basic question: has anything important changed? It runs entirely inside your WordPress install, keeps its findings local, and produces an exportable report you can keep or share with a technical partner.
Free patrol capabilities
Verify core integrity
Compare WordPress core files against the official checksum service and identify missing or modified files.
Verify plugins and themes
Compare WordPress.org plugins and themes file by file with their matching official checksum or release package.
Watch privileged access
Fingerprint administrator accounts so unexpected access changes are visible on the next patrol.
Inspect uploads
Find PHP and other executable file types in the uploads directory, where they usually do not belong.
What is included
- On-demand patrol from the WordPress dashboard
- Automatic weekly local patrol
- Official core checksum verification
- File-level verification for WordPress.org plugins and themes
- Clear labels when a comparison copy is unavailable for host-provided, custom, or third-party plugins and themes
- Administrator account baseline and change signal
- Suspicious executable detection in uploads
- WordPress Dashboard status widget
- Optional weekly email summary
- Portable JSON evidence report
- No PressPatrol account, telemetry, or credit card
What the free plugin does not do
The free plugin does not claim to replace a firewall, backups, careful update practices, or server-level incident response. It does not provide hourly checks, off-site evidence, instant alerts, portfolio management, or independent baselines for plugins and themes downloaded outside WordPress.org. Those are jobs for PressPatrol Cloud and Server Patrol.
Start your first patrol.
Version 0.9.11 WordPress.org submission candidate. Install the ZIP from Plugins → Add New → Upload Plugin.
Privacy by default
Reports stay in your own WordPress database. To retrieve matching official references, the plugin sends installed WordPress, WordPress.org plugin, and WordPress.org theme version identifiers to WordPress.org. Optional summaries are sent by your website to the email address you choose. PressPatrol does not receive your file contents, users, inventory, scan results, or email summaries.