Find what's holding your site back. Then fix it.
Klydexa Website Audit inspects eight areas of your WordPress site and reports what is costing you traffic, sales and speed - ranked by how much it actually costs. Where a problem can be resolved safely from inside WordPress, it offers a one-click fix.
Everything that decides whether your site performs
Each category is scored out of 100 and graded. Findings are ranked Critical, Warning, Notice or Passed, so you can work top-down instead of guessing where to start.
SEO
Indexing, permalinks, titles and meta descriptions, headings, canonicals, Open Graph, structured data, sitemap, robots.txt.
Indexing & markup 7 fixesPerformance
PHP version, caching, response time, document weight, render-blocking assets, autoloaded options, database overhead.
Server & database 9 fixesCore Web Vitals
LCP image priority, layout-shift sources, font-display, third-party load, connection hints, plus optional real-user field data.
LCP, CLS & INP 4 fixesAccessibility
Alt text, document language, heading order, landmarks, skip links, accessible names, form labels, duplicate IDs, zoom.
WCAG basics 4 fixesSecurity
HTTPS and mixed content, HSTS, pending updates, file editing, debug exposure, XML-RPC, headers, username enumeration.
Hardening 6 fixesMobile usability
Viewport tag, responsive styling, srcset coverage, fixed-width elements, touch icons, tappable phone numbers.
Small screens 1 fixUser experience
404 handling, site search, privacy policy, timezone, comment spam, navigation, broken internal links.
Visitor journey 3 fixesWooCommerce
Store pages, HPOS, secure checkout, legacy API, product data, cart fragments, asset loading, Product schema.
Store health 6 fixesThe WooCommerce category and its fixes only appear when WooCommerce is active - otherwise it is not registered at all.
Four steps, about a minute
-
Take a backup
The audit only reads - it never changes anything. But you will want a restore point before applying fixes, so make it now rather than later.
-
Run the full audit
Categories run one after another, each as its own request, so a single slow check cannot time out the whole run. That is also what drives the progress bar.
-
Wait 20–60 seconds
The plugin fetches your homepage, a sample post and a deliberately non-existent URL, then parses the markup your visitors actually receive.
-
Work top-down
Findings are sorted by severity within each category. Clear the Critical items first - they are the ones actively costing you traffic, sales or security.
Where the number comes from
Points deducted per finding
| Level | Meaning | Points |
|---|---|---|
| Critical | Actively harmful right now. Fix today. | −22 |
| Warning | A real cost, but the site still works. | −9 |
| Notice | Worth making when convenient. | −3 |
| Passed | Checked and healthy. | 0 |
Every category starts at 100 and loses points for each finding, never below 0. Nothing adds points - a clean category simply keeps its 100. The overall score is the plain average of the categories that ran. Grades: A 90+, B 80+, C 65+, D 50+, F below.
The number is a progress tracker, not a verdict. A site scoring 78 with no critical findings is in better shape than one scoring 85 with an exposed checkout. Read the findings, not just the total.
Two kinds, and the plugin always tells you which
Nothing is written to your theme, your .htaccess or your
wp-config.php. You can apply a fix from the finding itself, or
from the One-Click Fixes screen where they are grouped by category.
Reversible switches
28Applied live through WordPress hooks. The plugin stores which switches are on and reapplies the behaviour on every request. Turn one off and the behaviour disappears completely - nothing is left behind. Deactivating the plugin has the same effect.
One-off actions
13These change data or settings directly - emptying spam, deleting old revisions, updating an option. Some cannot be undone. Anything that deletes data or changes visitor-facing behaviour is marked “Review before applying” and asks you to confirm.
Fixes worth pausing over
- Disable XML-RPC - breaks the WordPress mobile app, Jetpack and any remote publishing tool that relies on it.
- Switch to SEO friendly permalinks - only safe on a site not yet indexed with its current structure. On an established site, changing permalinks without redirects loses your rankings.
- Fill in missing image alt text - generated from filenames and titles, so it is a placeholder. Bad alt text is worse for a screen reader user than none.
- Delete old revisions / Empty spam and trash - permanent. Nothing goes to the trash; it is gone.
Privacy, in full
Off by default- Every check runs on your own hosting, against your own site. It requests your own URLs and reads your own database.
- No telemetry, no analytics, no phone-home, no account required.
- Reports are stored as a single non-autoloaded row in
wp_options, so they cost nothing on a normal page load. - Every screen and AJAX action requires the
manage_optionscapability and a valid nonce.
The one exception
The optional Google PageSpeed Insights lookup, which is disabled by default. When you enable it, it sends your public homepage URL - and your API key if you entered one - to Google, to retrieve real-user Core Web Vitals. No page content, post data, customer data or credentials are transmitted. Responses are cached for six hours.
Start with a full audit
Install, activate, and press Run full audit. A full run usually takes 20–60 seconds and changes nothing until you decide to apply a fix.