About
The early-warning system for WordPress plugins
PluginCanary warns WordPress agencies and site owners when a plugin changes owner, gets closed, stops being maintained or ships an unpatched vulnerability.
What we do
We check every plugin on wordpress.org on a schedule, keep the history that wordpress.org does not keep, and turn changes into risk signals. Each plugin gets a Canary Score from fixed, published rules. If you connect your sites, we alert you only about the plugins you actually run.
What we are not
PluginCanary is not a security scanner, not a plugin directory and not a review site. We do not scan your files or your site. We only read public data about plugins.
Who builds it
PluginCanary is built by the team behind WPFactory and WooBeWoo, makers of WordPress plugins used on 200,000+ sites. We know how plugins are built, sold and abandoned, because we ship them ourselves.
Independence
No plugin author can pay for a better score or a better position. There is no sponsored placement and there are no affiliate links. Our own plugins are scored by the same rules as everyone else's.