The WordPress Health Report
A paid, fixed-scope diagnosis of your WordPress site — technical, performance, security and Canadian compliance — delivered as a written report you own and can hand to anyone.
Price: Contact us for a personalized evaluation · Turnaround: One business day
Why this costs money
Every agency in this market offers a free audit. A free audit is a sales document. It's designed to find enough alarming things to justify a proposal, and it disappears if you don't buy.
We charge for the diagnosis because charging for it changes what it is:
- It's complete, not curated for alarm
- It's yours — hand it to your in-house developer, another agency, or your insurer
- It has no upsell obligation. Roughly a third of the people who buy one don't hire us afterward, and that's a fine outcome
- It's honest about what's fine. A free audit never says "your hosting is good, keep it"
What's in it
H3: Technical foundation
Core integrity verified against official checksums · plugin and theme inventory with maintenance status and known vulnerabilities · PHP and database versions against supported releases · file permission and hardening audit · cron and scheduled-task review · error-log analysis
H3: Performance
Field Core Web Vitals — LCP, INP, CLS on real traffic · TTFB and server response profile · database health: autoload size, transients, revisions, orphaned metadata · render-blocking and third-party script cost · your actual LCP element, identified
H3: Security posture
User and role audit · application passwords and API keys · 2FA coverage · firewall and monitoring assessment · backup verification — we attempt a restore, not just a check that files exist · exposure surface review
H3: Canadian compliance ← nobody else includes this
PIPEDA: consent, retention, safeguards, breach-response readiness · Québec Law 25 where applicable · AODA / WCAG 2.x accessibility assessment for Ontario obligations · CASL: consent capture, unsubscribe, records · cookie and tracking review — including whether your banner actually blocks anything before consent
H3: The remediation plan
Every finding rated by severity and effort, in fix order, with an estimated cost per item — whether you do it, we do it, or someone else does.
What it is not
- Not a Lighthouse screenshot with commentary
- Not an automated tool export with a logo on it
- Not legal advice. We identify likely compliance gaps and cite the obligation; we're not your lawyer and we'll tell you when you need one
- Not a sales proposal wearing a report's clothing
Who it's for
- You inherited a site and don't know what you inherited
- Your developer went quiet
- You're about to spend on a rebuild and want to know whether you need one
- You're being asked about privacy or accessibility compliance and don't know the answer
- You're buying a business and the website is part of the asset
- Something feels wrong and nobody can tell you what