Is Site Rescue Review a penetration test?
No. It is a defensive diagnostic review of WordPress security and revenue reliability signals. It does not include destructive testing, denial of service, credential attacks, persistence, or exfiltration.
VDL Site Rescue
WordPress Security + Revenue Reliability Review
Find hidden WordPress, WooCommerce, security, checkout, and payment-critical signals before they cost traffic, sales, or trust.
£249 launch review
One-time defensive review. No subscription.
What you get
- WordPress plugin, theme, and update posture review
- Security header, XML-RPC, REST exposure, and exposed-file signal review
- WooCommerce checkout and revenue-critical path review where relevant
- Plain-English findings table with severity, evidence, and recommended fixes
- Retest checklist and optional implementation quote if fixes are needed
What to send
- Site URL
- VDL Site Leak Scanner export, if available
- Plugin/theme list, if available
- Screenshots, support notes, or hosting/security alerts
- WooCommerce checkout or payment examples, if commerce is involved
Scope and safety
- No passwords by email
- No destructive testing, denial of service, credential attacks, persistence, or exfiltration
- Read-only or temporary access only if needed after initial triage
- Testing stays inside the agreed site and evidence scope
How this works
The review can start from a plugin export, screenshots, exposed-file examples, security-header checks, WooCommerce context, or a written description. It is not dependent on a perfect scan.
Initial review response is within 1 business day. We confirm the evidence needed and send a manual payment link or invoice before the review starts.
This is a defensive diagnostic review and recommended next steps. It is not a full penetration test, compliance certification, or guarantee that every issue is found.
Review intake
Request Site Rescue Review
Submit the request first. We reply with the minimum evidence needed and a manual payment link or invoice before the review begins.
How to verify site rescue signals
- Confirm whether exposed files, XML-RPC, REST, or missing-header signals are reachable on the live site.
- Check whether findings touch checkout, cart, account, order-pay, or order-received paths.
- Review plugin, theme, WooCommerce, and gateway versions before changing production settings.
- Prioritize fixes by customer impact, exploitability, and whether the issue affects payment or checkout paths.
Site Rescue Review FAQ
What evidence can I send?
You can send a VDL Site Leak Scanner export, plugin/theme list, screenshots, hosting alerts, support notes, WooCommerce examples, or a written description of the issue.
Does a missing header or exposed endpoint prove compromise?
No. These are diagnostic signals. They may justify cleanup or closer review, but they do not automatically prove compromise or financial impact.
Can the review include WooCommerce checkout paths?
Yes. The review can include cart, checkout, account, order-pay, order-received, and payment-critical paths where they are relevant to the evidence.