SteadyScore
SteadyScore scans every plugin installed on your WordPress site and gives each one a single reliability score from 0–100 — so you can see, at a glance, which plugins you can trust and which ones deserve a second look. WordPress admins inherit risk from every plugin they install: abandoned code, unpa
SteadyScore scans every plugin installed on your WordPress site and gives each one a single reliability score from 0–100 — so you can see, at a glance, which plugins you can trust and which ones deserve a second look.
WordPress admins inherit risk from every plugin they install: abandoned code, unpatched vulnerabilities, low-quality authors. SteadyScore puts an honest number on each plugin’s risk profile so you can prioritize what to replace, audit, or remove. Agencies run it on client sites; developers run it on their own for routine plugin hygiene.
Every score is built from six transparent factors:
- Rating & reviews — the plugin’s WordPress.org star rating and review volume.
- Active installs — how widely the plugin is deployed and trusted.
- Update recency — how recently the author last shipped a release.
- Compatibility — tested-up-to against your version of WordPress.
- Security — known vulnerabilities, via Wordfence Intelligence.
- Author reputation — the author’s track record across their whole portfolio.
What’s in the free version
- A reliability score, 0–100, for every plugin listed on WordPress.org.
- The full six-factor breakdown for each plugin, with a plain-English recommendation.
- Known-vulnerability data from Wordfence Intelligence (add a free key of your own).
- Lifecycle flags — abandoned, removed from WordPress.org, or not updated in 2+ years.
- A sortable dashboard with risk / active / in-use filters and CSV export.
- Background scoring through Action Scheduler — no wp-cron load, nothing on your front end.
Available with the Pro addon
SteadyScore Pro extends the free plugin:
- Reliability scoring for commercial & closed-source plugins — LearnDash, WP Rocket, premium Gravity Forms add-ons, and the like — via the SteadyPress API.
