Preventionlabs

When a site breaks, the hard part is finding out what’s wrong. Preventionlabs checks your website from the outside in 15 seconds to about a minute, from one click, and tells you what’s broken, where, and what to do.

A full report covers:

• Pages: failing, slow, redirecting or hidden from Google, broken links, JavaScript errors
• Security: leaked files such as .env, .git and backups, outdated scripts with published security holes, security headers
• Uptime and speed: HTTPS, redirects, page weight, caching
• Search: noindex tags, robots.txt blocks, sitemap pages that fail
• Email: SPF, DKIM and DMARC, so your emails don’t land in spam
• Domain and DNS: DNSSEC, nameservers, records pointing at services that no longer exist
• WordPress: versions and plugins visible from outside

Every check is read-only: nothing in Preventionlabs can change your site, DNS, code or settings. Reports are produced by code from the data checked, with no AI and no opinions. Copy the report into your AI assistant or send it to your developer to work out the fix.

Only the owner can check a site. The plugin proves this site is yours in one click, with no DNS changes: Preventionlabs gives it a proof for this site’s address, the plugin publishes it, and Preventionlabs reads it back. Reports can only run on sites you’ve proven.

More: the website, https://preventionlabs.com.au. Questions it answers, https://preventionlabs.com.au/website-questions. Everything a report checks, https://preventionlabs.com.au/checks.

External services

This plugin connects to the Preventionlabs service at app.preventionlabs.com.au. It is needed to run the checks, which happen on Preventionlabs’ servers, not on your site.

• What is sent: your Preventionlabs API key, this site’s address (when you click Verify this site), and the ID of the site you choose to check. Nothing about your visitors, users or content is sent.
• When: only after an administrator pastes an API key and clicks Connect, and then each time the Tools > Preventionlabs page is opened (to list your sites), Verify this site is clicked, or a report is run.
• The proof: after you click Verify this site, the plugin publishes a random proof token at /?rest_route=/preventionlabs/v1/proof on this site. Preventionlabs reads it to confirm the site is yours, when you verify and again before each report. The token only proves this site to your account; it is useless anywhere else. It is removed when you delete the plugin.
• The service: Preventionlabs. Terms: https://preventionlabs.com.au/terms Privacy policy: https://preventionlabs.com.au/privacy

A Preventionlabs account is required. Each domain’s first 2 full reports are free. After that, a report is A$2 from your Preventionlabs balance, topped up from A$20. No subscription.