Each check below appears in the plugin under its French name. A check that cannot run on a given server is marked Non vérifié and left out of the score.
Security — 23 checks
| In the plugin | What it looks at |
|---|---|
| Version de WordPress | Whether WordPress itself is up to date |
| Mises à jour des extensions | Plugins with an update waiting |
| Mises à jour des thèmes | Themes with an update waiting |
| Extensions abandonnées ou retirées | Plugins closed on WordPress.org, or not updated there for more than two years |
| Extensions inactives | Plugins installed but switched off — their code is still on the server |
| Thèmes inutilisés | Themes other than the active one, its parent and one default fallback |
| Connexion sécurisée (HTTPS) | Whether the site and its admin use HTTPS |
| Certificat SSL | Whether the certificate is valid, and when it expires |
| Contenu mixte (HTTP dans HTTPS) | Images, scripts or styles still loaded over plain HTTP |
| Mode débogage | Whether errors are displayed to visitors |
| Fichiers sensibles exposés | Backups, logs, configuration copies and similar files that can be downloaded |
| Éditeur de fichiers intégré | Whether theme and plugin code can be edited from the admin |
| Identifiant « admin » | An account named admin |
| Comptes administrateurs | How many accounts have full control |
| Clés de sécurité WordPress | Missing or default keys and salts in wp-config.php |
| Préfixe de la base de données | The default wp_ table prefix |
| Interface XML-RPC | Whether XML-RPC is open |
| Exposition des identifiants utilisateurs | Usernames revealed by author pages or the REST API |
| Listage des dossiers | Folders that list their contents to anyone |
| Version de WordPress visible | The version number printed in the page source or readme.html |
| En-têtes de sécurité HTTP | Security headers such as HSTS and X-Frame-Options |
| Pare-feu et protection des connexions | A security plugin or protection against password guessing |
| Permissions du fichier de configuration | File permissions on wp-config.php |
Performance — 11 checks
| In the plugin | What it looks at |
|---|---|
| Version de PHP | Whether the PHP version still receives security fixes |
| Temps de réponse du serveur | How long the home page takes to start arriving |
| Cache de page | Whether pages are served from a cache |
| Cache objet persistant | Redis, Memcached or similar |
| Compression des pages | Gzip or Brotli |
| Données chargées à chaque page | The size of the settings WordPress loads on every request |
| Encombrement de la base de données | Revisions, spam, trash and expired temporary data |
| Poids des images | Images in the media library heavier than 500 KB |
| Fichiers chargés par la page d'accueil | How many scripts and stylesheets the home page loads |
| Nombre d'extensions actives | How many plugins are switched on |
| Mémoire disponible | The PHP memory limit |
SEO — 14 checks
| In the plugin | What it looks at |
|---|---|
| Visibilité dans Google | The setting that asks search engines not to index the site |
| Fichier robots.txt | Whether it exists and what it blocks |
| Adresses des pages (permaliens) | Readable addresses rather than ?p=123 |
| Titre et slogan du site | Empty or default values |
| Outil de référencement | An SEO plugin such as Yoast, Rank Math or SEOPress |
| Titre de la page d'accueil | The home page title, and its length |
| Description de la page d'accueil | The home page meta description, and its length |
| Titre principal (H1) | Exactly one main heading on the home page |
| Plan du site XML | A sitemap search engines can find |
| Textes alternatifs des images | Images with no alternative text |
| Compatibilité mobile | Whether the page is set up for small screens |
| Aperçu sur les réseaux sociaux | The tags that build a preview when the page is shared |
| Données structurées | Schema.org markup |
| Icône du site (favicon) | Whether a site icon is set |
Maintenance — 8 checks
| In the plugin | What it looks at |
|---|---|
| Sauvegardes automatiques | A known backup plugin, or a managed host that backs up for you |
| Mises à jour de sécurité automatiques | Whether WordPress installs its security releases on its own |
| Fiabilité des e-mails | Whether mail goes through SMTP or a sending service |
| Erreurs techniques récentes | Recent PHP errors in wp-content/debug.log |
| Tâches planifiées | Scheduled tasks more than an hour late |
| Espace disque | Free space left on the server |
| Modules du serveur | Recommended PHP extensions that are missing |
| Version de la base de données | Whether the MySQL or MariaDB version is still maintained |