Design & content integrityVisual regressionSurprise layout changes, caught pixel-for-pixel.Structure driftVanished buttons, fields and sections, flagged.Broken links & imagesNo 404s or missing images on your key pages.Error scanNo error messages or raw, unrendered code on your pages.
Speed & Web VitalsCore Web VitalsLCP, INP and CLS within Google’s thresholds.Real-user Web Vitals (RUM)LCP/INP/CLS from actual visitors, p75 per page.
Security & integrityVulnerability scanRisky, closed or abandoned plugins & themes, flagged.File integrityCore files, plugins and hidden code — checked against what's supposed to be there.Theme integrityTampered theme files, wp-config.php and dropped malware, caught.Admin rosterNew or elevated admins and their application passwords, flagged.Exposure scanLeaked keys, exposed files and weak headers — found before an attacker finds them.Mixed contentNo insecure http resources on your HTTPS pages.Background jobsThe Action Scheduler queue keeps draining.
Sales & checkoutGuest checkoutAdd to cart → pay, as a first-time shopper.Logged-in checkoutPurchase as a real, signed-in customer.Payment methodsEvery way to pay stays available.StorefrontYour shop page loads and lists products.Prices & stockPrices show and add-to-cart works.Order anomalyCatches a silent drop in orders.
Accounts & emailCustomer loginSign-in works, all the way into the account area.Password resetThe reset email actually sends and arrives.Email deliveryYour site can still send mail — before customers notice it can’t.
Uptime & availabilityUptimeReachable, fast, and not erroring.SSL certificateValid, trusted, and not about to expire.Maintenance-mode leakNo ‘coming soon’ wall hiding your live site.
Domain & DNSDomain registrationNot expiring, not on hold, locked.DNS healthRecords unchanged, DNSSEC working, resolvers agree.Email authenticationSPF, DKIM and DMARC that keep your mail trusted.Certificates & subdomainsNo surprise certificates, no dangling subdomains.
Search & AI visibilitySEO integrityNo accidental noindex; robots and canonical sane.AI / AEO readinessFound and cited by ChatGPT, Perplexity & AI Overviews.Multilingual healthhreflang cluster valid, every locale indexable.Google Search Console monitoringClicks, indexed pages and rich results — against your own usual.Bing Webmaster Tools monitoringPages in Bing's index, crawl errors and traffic — watched daily.
See all checks →
Changelog

What’s new in Relvato

Every update to the Relvato app and the WordPress plugin, newest first.

Relvato appv1.1.0
WordPress pluginv1.23.1
WordPressWP 7.1.2Tested up to WP 7.1.2 ✓

The Relvato app updates automatically — you always get the latest version when you open it. The WordPress plugin updates through WordPress, automatically or manually depending on your site’s update settings.

  1. Relvato appv1.1.0
    • Safe plugin updates: a plugin with a known vulnerability can be updated to the version that fixes it — Relvato re-runs every check that passed before and rolls the update back on its own if one breaks. Plugins that can't be updated can be deactivated the same way, and reactivated automatically if the site needs them.
    • Roll back a plugin update that broke a check, from wordpress.org, with a hold that keeps WordPress — or any updater — from reinstalling the bad version. A newer release still installs normally.
    • Security hardening next to each exposure-scan finding: "Fix it" turns off XML-RPC, hides the public user list, removes version leaks, turns off the file editor, adds safe security headers and more, with "Undo" on each.
    • More one-click fixes: run a stalled background-job queue once, and switch off a WP Maintenance Mode or SeedProd maintenance page (with undo).
    • Fixes are now matched to what each check actually found, so the fix offered always fits the problem.
    • A plugin update that failed (the same version before and after) no longer re-runs every check on the site.
  2. Relvato appv1.0.0
    • First versioned release of the Relvato app — continuous verification for WordPress, WooCommerce and any deployed site.
    • Monitoring journeys across checkout, login, storefront, prices & stock, uptime, SSL, Core Web Vitals, Real-user Web Vitals (RUM), visual regression, structure drift, SEO, AI feature output, vulnerabilities, file integrity, background jobs and more.
    • AI site overview: a plain-language read of each site that separates real problems from likely false positives.
    • Notifications: a live-derived alert bell for failing runs, plugin and beacon issues, and billing.
    • One-click fixes for a safe, reversible set of WordPress issues, plus AI-suggested fixes for failing checks.
    • Review tools for visual & structure changes — accept a new baseline, ignore only specific sections, and a per-decision undo.
    • Vulnerability scanning of plugins and themes, backed by the Wordfence Intelligence feed and WPScan.