Free quick audit · Magento 2 and WordPress
Is your site up to date? Find out in 10 seconds
Nothing to install. Enter your store’s address and Tocsin24 tells you what needs fixing, in your free account.
- Version still supported?
- HTTPS certificate
- Response time
- Security headers
- Exposed sensitive pages
- Magento or WordPress detected
Passive checks, just like a browser visit · Free account, no commitment · Or start your 7-day free trial →
Audit complete
Your audit result is ready — create your account to see it
Your detailed report is waiting for you in your Tocsin24 space.
- Free account, no commitment
- History of your audits, to run again whenever you like
This link is only valid for a limited time.
Questions about the quick audit
What does the quick audit check?
The platform your site runs on (Magento 2, WordPress, WooCommerce), whether its version is still supported, the HTTPS certificate and the redirect to HTTPS, the home page response time, the security headers and the number of exposed sensitive pages (configuration files, Git repository, etc.).
Is it safe for my site?
Yes. These are passive checks, the equivalent of a browser visit: around fifteen read requests at most, never any data sent and never any attack attempt. The requests carry the “Tocsin24-Audit/1.0” user agent.
How can I find out the exact Magento version?
Magento only shows “2.4”. The audit compares a few of the store’s public files with the official Magento Open Source releases; if they are not enough, it says so rather than guessing. Once installed, the Tocsin24 module reads the exact version, patches included.
Why is the list of exposed pages not shown?
Because anyone can audit any site. Showing the list would help an attacker. The details, with how to fix each point, are reserved for the site owner, once the site is monitored by Tocsin24.
Why do I need an account to see the result?
So you can find your audits again and follow how your sites change from one audit to the next. The account is free with no commitment, and you do not have to choose a password straight away: we email you a link.
What happens to the address I enter?
The report waits for you to create your account for two hours at most, then it is deleted. Once linked to your account, it joins your audit history. An account with no monitored site and no sign-in for 45 days is deactivated, and the details of its audits are deleted. The address is not logged.