Description
TrustBeacon Auditor provides a plain-English report of basic public trust signals for the WordPress site where it is installed.
The plugin checks public configuration signals such as:
- MX records
- SPF records
- DMARC records
- Common DKIM selectors
- SSL certificate availability
- HTTP security headers
- CAA records
- DNSSEC indicators when supported by the server
- Cloudflare indicators in public response headers
- Public security plugin indicators visible in page HTML
The report includes a simple trust score, trust level, findings, recommendations, and business impact explanations.
Important: TrustBeacon Auditor evaluates publicly visible trust indicators. It is not a security certification, penetration test, malware scanner, compliance audit, or guarantee that a website is secure.
Admin Dashboard
The Trust Auditor admin page presents results as a dashboard rather than a single wide table:
- An overall Trust Score is shown as a circular gauge alongside the trust grade and counts of passing, warning, failing, and informational findings, all derived directly from the current audit’s findings.
- Email Authentication, Website Security, Visitor Protection, and DNS Security are shown as separate summary cards using the plugin’s existing category ratings (Excellent, Good, Fair, Needs Attention, or Additional Review Recommended).
- Findings are grouped by category. Each finding keeps its category, check, status, score, message, recommendation, and business impact; recommendation and business impact are available in an expandable “Recommendation and business impact” section.
- Status is always shown as visible text (PASS, WARN, FAIL, INFO) in addition to color, and a small status dot is decorative only.
- Before an audit has been run, an introductory panel explains what will be checked. It does not display a score or findings, so nothing can be mistaken for real results.
- The dashboard styling loads only on the Trust Auditor admin page and does not affect the rest of the WordPress admin area.
- The dashboard works without JavaScript. Recommendation and business impact sections use the browser’s native expand/collapse control.
External services
TrustBeacon Auditor performs remote HTTPS requests to websites selected
by the site administrator in order to audit publicly available trust
signals.
The plugin connects directly to the website being audited to inspect
information such as:
- SSL certificate availability
- HTTP response headers
- Cloudflare detection
- Security plugin indicators
Data transmitted:
- The domain name entered by the administrator.
- Standard HTTP request headers, including a User-Agent string.
These requests occur only when an administrator initiates an audit.
No personal visitor information is collected, stored, or transmitted.
The plugin does not use any third-party commercial APIs.
Privacy Policy:
https://itechguide.com/privacy-policy/
Terms of Use:
https://itechguide.com/terms-of-use/
Installation
- Upload the plugin folder to the
/wp-content/plugins/directory, or install the plugin ZIP through the WordPress Plugins screen. - Activate the plugin through the Plugins screen.
- Open the Trust Auditor page in the WordPress admin menu.
- Click Run Audit.
FAQ
-
Does this plugin scan private files or private server data?
-
No. It checks public trust indicators for the installed site.
-
Does a high score prove my site is secure?
-
No. A high score means the checked public trust signals look good. It does not prove that the site is secure.
-
Does a low score prove my site was hacked?
-
No. A low score means that one or more public trust signals may be missing, weak, or unavailable.
-
Why does DKIM detection say no common selector was found?
-
DKIM selectors vary by mail provider. The plugin checks several common selectors, but some providers use custom selector names.
-
Why is DNSSEC sometimes informational?
-
Some PHP environments cannot query DNSSEC records reliably. In that case, the plugin avoids punishing the score for a check it cannot verify.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“TrustBeacon Auditor” is open source software. The following people have contributed to this plugin.
Contributors
Translate “TrustBeacon Auditor” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
0.1.8
- Redesigned the admin results page as a dashboard: a circular Trust Score gauge, finding-status counts, category summary cards, and findings grouped by category with expandable recommendation/business impact detail.
- Added a dedicated pre-audit introductory panel explaining what the audit checks, shown before any audit has been run.
- Added a scoped admin stylesheet that loads only on the Trust Auditor admin page.
- No changes to audit checks, scoring, or category-rating calculations. This is a presentation-only update.
0.1.3
- Revised scoring so INFO findings are excluded and WARN findings receive partial credit instead of harsh zero-point treatment.
- Adjusted grade labels to better reflect public trust signals rather than full security certification.
0.1.1
- Standardized plugin name, slug, text domain, prefix, contributor metadata, licensing, and WordPress.org readme format.
- Replaced mixed class prefixes with TBAUD-prefixed classes.
- Replaced raw HTTP header fetching with the WordPress HTTP API.
- Added safer DNS lookup wrapper and defensive handling for unavailable DNS constants.
- Added escaping, sanitization, nonce name, capability checks, and translatable admin strings.
0.1.0
- Initial development version.