WordPress technical audit: performance and security

A WordPress technical audit is a comprehensive assessment of your website: performance, security, on-page SEO, code quality, and the condition of your plugins and database. Within five working days, Evolurise will provide you with a 20- to 40-page report detailing each issue identified, its impact and the corrective actions prioritised by urgency.

What our WordPress audit covers

Performance audit

• Mobile and desktop PageSpeed Insights scores
• Core Web Vitals (LCP, FID/INP, CLS)
• Analysis of page weight and blocking resources
• Cache audit (page, object, browser)
• CDN configuration and media compression
• Database optimisation (checks, orphaned tables)

Security audit

• WordPress versions, plugins and themes (known CVEs)
• File and directory permissions
• SSL/TLS and HTTPS configuration
• Presence of malware and backdoors (WPScan scan)
• Password policy and two-factor authentication
• HTTP security headers (CSP, HSTS, X-Frame)

Technical SEO audit

• Full crawl (Screaming Frog), 404 errors, redirects, canonicals
• Hn structure and semantic coherence
• Title/meta/OG tags, duplicate content, length, keywords
• Schema.org structured data
• XML sitemap and robots.txt file
• Google Search Console indexing, excluded pages, coverage errors

Code and plugin audit

• Theme quality (compliance with WordPress Coding Standards)
• Unnecessary, abandoned or conflicting plugins
• Unoptimised SQL queries (slow queries)
• PHP and JavaScript errors (logs)
• PHP 8.x compatibility

The deliverable: an actionable report

You will receive a PDF report of between 20 and 40 pages, organised into three priority levels:

• 🔴 Urgent, To be rectified immediately (critical security vulnerabilities, pages indexed in error)
• 🟠 Important, To be addressed within the month (poor performance, inadequate technical SEO)
• 🟢 Optimisation, Further reading (quick wins, best practice)

FAQ, WordPress Technical Audit

How much does a WordPress audit cost?

Our standard WordPress technical audit costs €490. It covers performance, security, SEO and code. The cost of the audit is deductible if you then commission us to rectify the issues identified.

How long will it take for the report to be delivered?

5 working days after we receive your login details. We require WordPress admin access and FTP/SSH access (read-only) to carry out the full audit.

Do you also offer to rectify any issues that have been identified?

Yes. Once the report has been submitted, we will provide you with a quote to rectify the issues identified. Urgent rectifications are usually dealt with within 48 hours. The cost of the audit is deducted from the quote for the rectifications.

Does the audit require the site to be shut down?

No. The audit is carried out in read-only mode and does not affect the availability of your website. Only the rectification of any issues identified may require brief periods of scheduled maintenance.

What sort of website would benefit from a WordPress audit?

Every active website should undergo an audit, particularly before a redesign, before outsourcing maintenance to a service provider, or if you notice an unexplained drop in traffic, a slowdown in the site’s performance, or suspicious security issues.

See also : WordPress maintenance, SEO optimisation, WordPress redesign