Log inStart free trial
Features

Everything UrKavach does

Security, uptime, SEO, speed, compliance and client reporting in one dashboard. Some features depend on your plan; see pricing.

Hack & malware detection

Finds injected spam, hidden links, malicious scripts, cloaking, new admin accounts and exposed files, and flags known-vulnerable plugins and themes.

  • Spam and hidden-link injection, malicious JavaScript
  • Cloaking (spam shown only to Googlebot) and conditional redirects for Google visitors
  • Exposed files: .env, .git, wp-config backups, debug.log, directory listings
  • User enumeration, XML-RPC and security-header checks
  • Known-vulnerable plugins, themes and WordPress core
  • Google Safe Browsing blacklist alert
  • Security scans as often as every 30 minutes, depending on plan

WordPress agent plugin (optional)

A small signed, read-only plugin adds deep checks: file integrity, malware signatures, admin-account changes and pending updates.

  • Core file integrity against official checksums
  • File-change monitoring that flags edits made without a plugin or theme update
  • Malware and web-shell signatures, PHP hidden in uploads, unknown root files
  • Suspicious .htaccess rules
  • New admin accounts, new plugins and mu-plugins
  • Every request signed with HMAC-SHA256 and expiring after five minutes

Uptime, SSL & domain watch

Checks your site every few minutes, confirms outages before alerting, and warns you before your SSL certificate or domain expires.

  • Uptime checks every 5 minutes with double-check before alerting
  • Down and recovered alerts, with an incident history
  • SSL certificate expiry monitoring
  • Domain registration expiry monitoring (RDAP)
  • Renewals page with 30, 14, 7 and 1-day reminders and a calendar file

Technical SEO audit

Crawls like a search engine and reports 60+ problems in Google Search Console terms, with a score per category and a ranked priority list.

  • Indexing, links and redirects, on-page, social and rich results, mobile and technical categories
  • Redirect chains and loops, broken links, 404s, soft 404s, noindex and canonical problems
  • Titles, descriptions, H1s, thin content, orphan pages, mixed content
  • Hreflang, structured data, share tags, duplicate content, image health
  • Top priorities ranked by the score points each fix wins back
  • Platform-specific fix steps and copy-paste code for every issue
  • Optional Google Search Console panel with traffic-drop alert

One-click SEO fixes

Download redirect maps or push redirects and meta fixes straight into WordPress with the agent plugin.

  • Redirect maps as CSV, .htaccess, Nginx or Redirection-plugin import
  • Title and description suggestions you tick and apply
  • Push fixes into Yoast, Rank Math or SEOPress, or served by the plugin
  • Re-crawl to verify each fix

Speed & Core Web Vitals

Measures load time, page weight and Lighthouse scores, then gives you specific, ordered steps to make the site faster.

  • Server response time, page weight, compression and caching headers
  • Image sizes and formats, render-blocking files, HTTP/2, third-party hosts
  • Google Lighthouse and Core Web Vitals through PageSpeed Insights
  • With the plugin: OPcache, page and object cache, autoloaded options, revisions, transients, database size
  • Daily tests or on demand, with a speed score on the dashboard

Accessibility & privacy (GDPR) scans

Screens pages for WCAG-style problems and privacy risks such as trackers, missing consent tools and unprotected cookies.

  • Missing alt text, unlabelled fields and buttons, empty links, heading order, language, zoom blocking
  • Trackers and session recorders, cookie-consent tool detection
  • Working privacy-policy link and forms collecting personal data without a notice
  • Google Fonts and other third-party embeds, unprotected cookies
  • A screening aid, not legal advice

Keyword rank tracking

Track keyword positions per country and device with a 60-day trend, competitor comparison and drop alerts.

  • Position, change, best position and 60-day trend
  • Country and device targeting
  • Alert on a drop of 5 or more places or when you leave the results
  • Competitor comparison

Backups & safe updates

Full or database backups pulled to your own storage and verified, plus one-click plugin, theme and core updates.

  • Full (database + files) or database-only backups, resumable and SHA-256 verified
  • Daily or weekly schedule with automatic retention and alerts on failure
  • One-click plugin and theme updates with automatic rollback if the site stops responding
  • Core updates that always take a database backup first and alert if the site fails afterwards

Alerts that respect your time

Slack, Discord, Google Chat and email alerts with severity filters, quiet hours and per-site routing.

  • Slack, Discord, Google Chat webhooks and email
  • Minimum severity per account or per site, and quiet hours
  • Per-site routing to the right people
  • Weekly digest every Monday listing which sites need you first
  • Pause or tune the schedule of any automation

Teamwork & issue tracking

A health score with 30-day trend for every site, plus issue owners, comments, snooze and verify-fix re-scans.

  • Health score and 30-day trend per site, and a Needs attention panel
  • Issue lifecycle: new, auto-resolved, reopened, ignored
  • Assign owners, comment, snooze, and re-scan to verify a fix
  • Plain-language "how to fix this" guide with steps, difficulty and time on every issue
  • Invite teammates by email

Client reports, portal & status pages

White-label PDF reports, read-only client logins, public status pages and weekly client emails.

  • Printable white-label security, SEO and speed reports with your logo, colours and footer
  • Read-only client logins limited to their own sites
  • Weekly plain-language email report to each client
  • Public status page with uptime, incident history and email subscriptions
  • CSV exports of issues, pages and rankings

Accounts & security

Email-verified sign-up, two-factor login, device management and protection against scanning private networks.

  • One-time email code to verify every sign-up
  • Two-factor login with an authenticator app and recovery codes
  • See and sign out your devices
  • Passwords checked against a common-password list
  • Scanner refuses private and internal addresses (SSRF protection)

Works beyond WordPress

Uptime, SSL, headers, exposed files, SEO, speed, accessibility and privacy checks work on any public website.

  • Detects WordPress, Shopify, Wix, Squarespace, Webflow, Joomla, Drupal, Magento, PrestaShop, Ghost, Laravel and Next.js
  • Platform-specific exposed-file probes and fix steps
  • Platform-aware fix guides, so Shopify steps are not WordPress steps

Free tools, no sign-up

Test any public website in about 30 seconds, or trace the redirect path of up to 10 URLs at once.

  • Free website check: security, SEO and speed in about 30 seconds
  • Redirect checker: every hop, status code, loop and chain for up to 10 URLs
  • No account or card needed

Start 14-day free trial