Boorsuc Security Doctor
Security Doctor scans your WordPress site for headers, CSP, cookies, TLS, DNS/email, hardening, and GDPR-style signals
Know what is exposed — and what to harden next.
“A grade tells you something is weak. A diagnosis tells you what to change.”
The problem
Online scanners can say the site is “B” or “D.” They rarely say which WordPress setting, missing header, cookie flag, or DNS record to fix first — or whether last week’s fix held.
Security Doctor connects the finding to a WordPress-specific cause and a paste-ready next step — so you spend less time guessing and more time hardening.
Free vs Pro
| Feature | Free | Pro — $3.99/month |
|---|---|---|
| Full security scan (all modules) | Yes | Yes |
| A+–F grade & 0–100 score | Yes | Yes |
| AI diagnosis & fix guidance | Yes | Yes |
| Included Boorsuc AI | Yes | Yes |
| Keep every scan over time | Latest run only | Full history |
| Compare grade / issues before vs after a fix | Limited | Yes — trends across runs |
| Export reports for clients or your records | — | CSV export |
| Scheduled monitoring (daily / weekly) | — | Yes |
| Email alerts when the grade drops | — | Yes |
| Prove security work to a client | Hard (one snapshot) | Easy (history + export) |
| Your own OpenRouter key / paid models | — | Yes |
Sell the why, not only the feature
Free shows you what is wrong today.
Pro shows whether the fix held — and gives you a paper trail when something regresses.
*** For Free we include AI free models, only in PRO version you can add custom OpenRouter models
What you get
- Passive scan of your own site: redirects, security headers, CSP, cookies, page surface, client-side scripts, WordPress hardening, TLS basics, DNS/email (SPF / DMARC / CAA), and
security.txt - Clear A+–F grade and 0–100 score, with Critical / High / Medium / Low priorities
- Module tabs (Headers, CSP, Cookies, TLS, DNS & email, WordPress, Compliance, and more) — same idea as a full websec report, built for WordPress
- Paste-ready fix hints (headers, CSP snippets, hardening steps)
- Optional AI diagnosis: root cause, recommended fix, risk
- GDPR / PCI heuristic signals (privacy link, cookie flags, tracker clues) — risk indicators, not a legal audit
- Included Boorsuc AI — no own API key required to start
- Optional: paste your own OpenRouter key for your own quota / paid models (Pro)
How it works
- Install and open Boorsuc Security.
- Confirm the URL to analyze (homepage by default — must be this WordPress site).
- Click Analyze security.
- Read the grade, then open each module: finding → evidence → fix.
- Apply the change, clear caches / CDN, run again. With Pro: turn on monitoring so regressions get an email.
FAQ
No. Tools like HTTP Observatory focus on HTTP headers. Security Doctor is broader: headers plus WordPress hardening, TLS, DNS/email, cookies, client scripts, and compliance heuristics — with fixes aimed at this site.
No. Those checks are heuristics and risk signals (privacy page, cookies, trackers, security findings mapped to frameworks). They are not legal advice and not a compliance audit.
No. The scan is passive: one page fetch, a few safe HEAD requests on your own host, a normal TLS handshake, and public DNS lookups. No port scanning, no exploits.
No. Included Boorsuc AI works when Boorsuc services are online. Your own OpenRouter key is optional (Pro).
Different scope and different scoring. Observatory grades headers alone; Security Doctor also scores WordPress, DNS/email, cookies, CSP quality, and more — so the letter grade can be stricter. Compare the Headers / CSP tabs for a closer match.
No. Full scan, grade, modules, and AI diagnosis stay free. Pro unlocks full history, CSV export, scheduled monitoring, and email alerts.
Stop guessing what is open on your WordPress site.
Run a free security analysis. Upgrade to Pro when you want history, monitoring, and exports.