Good questions, straight answers.
Can’t find yours? Search our help center or start a live chat there.
Questions and answers
Is the free scan safe for my site?
Yes. It only reads what any visitor's browser already sees — headers, certificates, public pages. No attacks, no load.
Why do I need to verify my domain?
Deeper tests probe your site more actively. We only run them for the verified owner, with explicit consent.
I'm not technical. Can I still fix things?
That's the point. Each fix is written step by step, with copy-paste snippets and plain-language context.
Do you support sites that aren't WordPress?
Yes. Every site gets a grade; WordPress sites also get plugin, theme and core-specific checks.
What do I get for free?
An A–F grade, the full list of issues, step-by-step fixes for the first 3, and a monthly re-check for one site. Paid plans add every fix, weekly deep scans, alerts and more sites.
Can I cancel or get a refund?
Yes — cancel anytime; cancelling stops the next billing. Each customer can get one refund, within 30 days of purchase, and only if no full report has ever been opened on the account. Once any full report is opened, there are no refunds. Your statutory consumer rights still apply.
How long does a free scan take?
Usually a few seconds. Slow sites can take up to about a minute.
Which languages is HackGrade available in?
English, Spanish, French, Portuguese, Chinese and Hebrew. Results, fixes and reports are translated.
Is the free website security check safe to run?
Yes. It only makes the same kind of requests a normal visitor’s browser makes: pages, headers, certificates and public DNS records. Nothing is attacked and no load is added.
How is the grade calculated?
Each finding has a severity. Critical and high issues, such as no HTTPS or a plugin with a known vulnerability, pull the score down far more than missing best-practice headers. The letter grade comes from the score.
Is this WordPress scan free?
Yes. The grade, the full list of issues and step-by-step fixes for the first 3 are free. Paid plans add every fix, weekly deep scans and alerts.
Will scanning slow down or break my WordPress site?
No. The free scan reads public pages like a visitor does. It doesn’t log in, submit forms or send attack traffic.
Can a free online scan tell me if my site is hacked?
It can show warning signs and the weaknesses that lead to hacks. No remote scanner can see every file on your server, so we combine the scan with the manual checks on this page.
Why do only some visitors see the redirect?
Malware often hides from logged-in admins and shows itself only to mobile visitors or people arriving from search, to stay unnoticed.
Find out your grade before someone else does.
Free to start. Paid plans from $12 a month, or a one-time report for $29. See pricing