Public-first analysis
Start from what the internet can see.
Make your website harder to hack.
Scan for malicious scripts, injected code, suspicious redirects, SEO spam, DNS issues, and compromised CMS behavior — start from the public surface, then go deeper only when you authorize it.
✓ No account required
✓ Safe & read-only
✓ No installation
✓ Deep Scan is optional and authorized
DNS SECURITY
Check the DNS health of a domain.
Inspect DNS routing, mail records and authentication policies such as SPF and DMARC.
DEEP SCAN · BETA
Go beyond what a public URL can reveal.
Deep Scan performs an authorized analysis from inside the website environment to inspect files and supported CMS database content.
Filesystem
WordPress DB
Webshells
Backdoors
Obfuscated PHP
Injected code
Ready for authorization
DNS health checks
Validate DNS records and email authentication.
Authorized deep scan
Go deeper with permission. You stay in control.
Privacy conscious
Database credentials stay on the target server.
Evidence focused
Clear findings with context you can act on.
Our mission is simple:
Protect your web presence. Make security accessible.
We believe every website — big or small — deserves to be secure. WM Security gives you the clarity, evidence and control to stay ahead of threats.
Support independent website security scanning.
WM Security is provided free of charge. Voluntary support helps with hosting, testing and continued development.
♡ Donate to WM Security
PROFESSIONAL WEBSITE CLEANUP
Has your website been compromised?
If WM Security detects malicious code, manipulated resources, redirects, backdoors or other suspicious behavior, you can request professional cleanup and security hardening.
✓ Malware removal
✓ Compromised file cleanup
✓ Backdoor investigation
✓ WordPress cleanup
✓ Database inspection
✓ Security hardening