=== Recap Site Auditor ===
Contributors: recapwp
Tags: security, site health, audit, hardening, maintenance
Requires at least: 6.2
Tested up to: 7.0
Requires PHP: 8.0
Stable tag: 2.6.6
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A deterministic WordPress site auditor and fixer: finds security, configuration, update, and account problems, then fixes them on confirm, with undo.

== Description ==

Recap Site Auditor scans your WordPress site for the problems that quietly hurt it - insecure settings, risky configuration, outdated software, and weak account hygiene - then fixes them for you on confirm, with undo on everything it changes.

Detection and fixing are 100% deterministic: the plugin's own validated code finds every issue and applies every fix. There is no AI in the loop, nothing is sent to a third party, and every change is reversible.

**Free features**

* "Scan now" across your site's security, configuration, updates, and user hygiene, grouped into clear areas (Security, Platform, Users, Environment)
* A 0-100 Site Health score with a live trend across scans
* Fixes with full undo - make your site visible to search engines, disable XML-RPC, hide your WordPress version, block user enumeration, add security headers, disable the file editor, stop directory listing, and upgrade insecure (http) images to https
* "Revert all fixes" to undo everything Recap Site Auditor changed, in one step
* Detect-only checks for the things only you should change (debug mode in production, exposed install files that reveal your WordPress version, default admin usernames, too many administrators, EOL PHP, and available core / plugin / theme updates)
* Choose which areas to scan
* An activity log of what was scanned and fixed
* Clean uninstall: deleting the plugin reverts every fix it applied and removes all its data - deactivating keeps everything, so you can pause and resume

**Upgrade to Pro**

Upgrade at [recapwp.com](https://www.recapwp.com/pro/) for the full auditor: live PHP-error monitoring, performance checks, stale-content detection, and WooCommerce checks; the deeper security suite (modified-core integrity, SSL-expiry monitoring, and a built-in brute-force login limiter); the broken-link crawler (find dead links and orphan pages and create 301 redirects); the redirect manager; the on-page Frontend Auditor that inspects each page live in your browser and flags SEO issues in context (missing meta descriptions, missing alt text, thin content) alongside accessibility and broken links; the "Ask RecapWP" AI assistant; an actor-attributed audit log; and automatic background updates.

== Installation ==

1. Upload the `recap-app` folder to `/wp-content/plugins/`, or install through Plugins > Add New > Upload.
2. Activate Recap Site Auditor through the Plugins screen.
3. Open RecapWP > Audit and click "Scan now".
4. Review the findings and apply the fixes you want - every fix can be undone.

== Frequently Asked Questions ==

= Will fixes break my site? =
Every Free fix is a reversible setting or file change, applied only when you confirm it, and each one has an Undo. "Revert all fixes" undoes everything at once. The higher-risk items are detect-only - RecapWP tells you what to change but doesn't change them for you.

= Does it use AI or send my data anywhere? =
No. Detection and fixing are entirely deterministic and run on your own server. Nothing is sent to a third party. (The Pro "Ask RecapWP" assistant is optional and bring-your-own-key.)

= What happens to my data if I deactivate or delete the plugin? =
Deactivating changes nothing - your audit findings, fix history, logs, and settings are all kept, so you can reactivate anytime. Deleting the plugin is a clean uninstall: it first reverts every fix RecapWP applied (returning your site to its pre-fix state), then removes all RecapWP data. So deactivate to pause, delete to fully remove.

= Does it check for broken links? =
Broken-link crawling, orphan-page detection, and redirects are part of RecapWP Pro. The Free version covers security hardening basics, configuration, updates, and user-account hygiene.

== Screenshots ==

1. The Audit - your Site Health score, the area breakdown, and the findings list.
2. A finding with its fix and plain-English explanation.
3. The dashboard - health score, score trend, and recent activity.
4. Settings - revert all fixes and logging.

== Changelog ==

= 2.6.6 =
* First public release on WordPress.org.
* Deterministic site auditor across security hardening, configuration, updates, and user accounts.
* Fixes with full undo, plus "Revert all fixes".
* Site Health score with a trend across scans, and an activity log.
* Clean uninstall: deleting the plugin reverts every fix it applied, then removes all its data.

= Earlier =
See https://www.recapwp.com for the full history.

== Upgrade Notice ==

= 2.6.6 =
First WordPress.org release of Recap Site Auditor - a deterministic site auditor and fixer.