WordPress Core & Configuration
Core settings, permalink structure, update posture, file permissions, and the small configuration details that quietly create bigger problems later.
Technical audits
I’ll take a closer look at your site.
I review WordPress, WooCommerce, and Shopify setups: how they’re configured, what might break, and what needs attention. Then I write up what I found and walk you through it.
Start an auditWhat I look for
I look at how the pieces fit together: plugins, hosting, access, backups, and the day-to-day work of running the site. I want to understand what happens when something fails, as well as how things work on a normal day.
- Surface technical, security, performance, and operational risk in one place
- Understand what is likely to break, leak, slow down, or cost money
- Turn fuzzy concerns into a prioritised list of fixes
- Get a practical second opinion before investing in larger changes
What's covered in a WordPress audit
Plugin & Theme Hygiene
Plugin bloat, abandoned plugins, overlapping features, risky extensions, theme setup, and code paths that add avoidable fragility.
Hosting & Server Setup
PHP, database, server config, caching layers, CDN setup, and infrastructure decisions that affect cost, speed, and reliability.
WordPress Security
Vulnerabilities, user roles, access controls, login hardening, known exploits, and anything that increases the chance of a serious incident.
Backups & Recovery
What exists, how reliable it is, where backups are stored, and how long a real restore would actually take if something breaks.
Performance & Core Web Vitals
Load times, server response, Core Web Vitals, render-blocking assets, query efficiency, and bottlenecks that affect users or conversions. In roughly one in three audits, this reveals 20-25%+ load time or resource-use improvements that can often be implemented in less than a day.
WooCommerce & WordPress Ops
Store-critical flows, operational workflows, scheduled tasks, admin friction, checkout risk, and the maintenance habits around the site.
Recommendations
A prioritised list of what to fix, in what order, and why, so the report becomes a practical roadmap.
What you get
I go through the setup myself and document what I find. We then walk through the report together: what needs fixing first, what can wait, and what the fixes involve.
Platforms
WordPress, WooCommerce, and Shopify sites.
Turnaround
A few hours to 2-3 days, depending on the size and complexity of the site.
Pricing
Usually €250-€1,000 depending on scope, urgency, and how deep the review needs to go.
Output
A detailed written report you can hand to your team or use as a roadmap yourself.
How the audit works
We agree on what needs reviewing, I inspect it, and we discuss the findings. If I find something critical, I tell you straight away.
- 01Access & questionsWe clarify what worries you and collect access to the systems that need review.
- 02Hands-on reviewI inspect the setup directly and flag critical issues immediately if something cannot wait.
- 03Report & walkthroughYou get a written report, a prioritised action list, and at least one walkthrough call.
Example report sections
A WordPress audit usually includes these areas, adjusted to the size and risk profile of the site.
- WordPress Setup & Config
- Hosting & Network
- Security & Backups
- WordPress Ops
- Performance Analysis
- Risk Assessment
- Prioritised Recommendations
FAQ
What do I need to prepare before the audit?
Bring your questions - all of them. I also need access to the systems that matter: admin panel, hosting, analytics, CDN, backup tooling, and any relevant third-party services. The more complete the access, the more useful and specific the audit can be.
How quickly can the audit start?
Message me and we will figure it out. I prioritise urgent situations, especially when something is actively broken, traffic is affected, or there is a security concern. For normal reviews, timing depends on current workload and the size of the site.
Do you help with fixing things after the audit?
Often partially, depending on the client and the findings. I can help with the higher-priority fixes, advise your team, or turn the report into a practical implementation plan. If you need ongoing support after the audit, that can be arranged separately.
How much does an audit cost?
Between €250 and €1,000 depending on the size and complexity of the site, the systems involved, and how deep the review needs to go.
If you find a critical security issue, do you wait until the end to tell me?
No. If I find something critical, I flag it immediately. You should know about serious security or availability risks as soon as I have confirmed them, not after the final report is polished.
Is the deliverable just a report, or do we also talk through it?
Always at least one walkthrough - usually two or more if the audit is larger. That is where the value becomes clearer: we discuss what matters, what can wait, what is risky, and how to move from findings to decisions. A report should create action, not just sit in an inbox.
Should audits be done regularly?
For sites with over 5,000 monthly visits, I recommend at least once every 12 months. Plugins change, traffic patterns shift, integrations get added, and hosting setups drift. A site that was fine a year ago may not be fine now.
Need a clear read on your site?
Send me what is worrying you, what changed recently, and what systems are involved. I will help you figure out the right audit scope. If you need ongoing help after the audit, that can continue through consulting services. For a narrower speed-only scope, see performance audits.