=== Elevoire Website Audit ===
Contributors: elevoire, hassanraza
Tags: audit, security, performance, seo, accessibility
Requires at least: 6.8
Tested up to: 7.0
Requires PHP: 8.0
Stable tag: 1.0.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

A read-only website audit. It inspects your WordPress core, performance, security, SEO, and accessibility, and never modifies your site.

== Description ==

Elevoire Website Audit is a lightweight, read-only auditing plugin for WordPress. It runs a set of checks across five categories — WordPress core, performance, security, SEO, and accessibility — and gives you a clear health score plus plain-language explanations of what each finding means and how to fix it.

**This plugin never modifies your website.** It does not edit `wp-config.php`, does not touch `.htaccess`, does not change file or folder permissions, and does not install, activate, or deactivate any other plugin or theme. It only inspects and reports.

= What it checks =

* **WordPress**: core version, PHP version, database version, debug mode, cron, object cache, multisite status, auto-updates, plugin/theme counts, sample content, timezone, permalinks, and URL consistency.
* **Performance**: page caching, response compression, Heartbeat API frequency, autoloaded options size, database overhead, and image sizes.
* **Security**: HTTPS, XML-RPC exposure, the built-in file editor, directory listing, common HTTP security headers, and default-username detection.
* **SEO**: meta description, robots.txt, XML sitemap, and search engine indexing status.
* **Accessibility**: image alt text, the HTML language attribute, and heading structure.

Every result includes a status (Pass, Warning, Fail, or Info), a severity level, a plain-language summary, and — where relevant — a recommended fix and a link to learn more.

= Reports and exports =

Generate a printable report or export your latest scan as CSV or JSON, directly from the Reports page. Nothing is sent to any third-party server; exports are generated on your own site.

= Privacy =

This plugin does not collect analytics, does not use tracking or telemetry, and does not send data to Elevoire or any third party. A small number of checks fetch your own site's public homepage over HTTP (the same way a visitor's browser would) to verify things like security headers, compression, and sitemap availability — nothing about your scan results ever leaves your server.

= A note on the roadmap =

The About screen lists planned Pro modules for transparency. None of them are active in this plugin, none of the free functionality above is limited or nagged in order to promote them, and there are no ads.

== Installation ==

1. Upload the plugin files to `/wp-content/plugins/elevoire-website-audit`, or install the plugin through the WordPress plugins screen directly.
2. Activate the plugin through the 'Plugins' screen in WordPress.
3. Go to **Website Audit → Dashboard** and click **Run Scan**.

== Frequently Asked Questions ==

= Does this plugin change anything on my site? =

No. Every check is read-only. The plugin only stores its own scan results and settings in the WordPress options table; it never edits your content, configuration files, or other plugins/themes.

= Will this slow my site down? =

No. All checks run only in `wp-admin` when you click "Run Scan" or on a background maintenance schedule you control; nothing runs on front-end page loads for your visitors.

= Does it send my data anywhere? =

No. There is no tracking, telemetry, or external API usage beyond a check occasionally requesting your own site's public homepage, the same way a visitor's browser or a search engine would.

= How is the score calculated? =

Each category starts at 100 and loses points for warnings and failures, weighted by severity (low, medium, high, critical). The overall score is the average of the category scores.

== Screenshots ==

1. Dashboard with overall and per-category health scores.
2. Audit Results table with filters, search, and expandable details.
3. Settings screen for enabling categories and excluding individual checks.

== Changelog ==

= 1.0.0 =
* Initial release: 36 checks across WordPress, performance, security, SEO, and accessibility, with dashboard, results table, reports, tools, and settings screens.

== Upgrade Notice ==

= 1.0.0 =
Initial release.
