# WPScan

WPScan is a Security Scanning product. It runs on-premises. Pricing is free.

WordPress security scanner for identifying vulnerabilities in WordPress websites.

Checked October 2026.

## What is WPScan?

WPScan is a WordPress security scanner that helps identify vulnerabilities in WordPress websites. It requires Ruby >= 2.7, Curl >= 7.72, and RubyGems to be installed. It is recommended to update the local database and WPScan itself regularly for the latest security information.

Tags: WordPress

## Where it fits in your security program (NIST CSF 2.0)

- [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks.

## Quick facts

- Category: [Exposure & Vulnerability Management](https://cybersectools.com/categories/exposure-vulnerability-management) · [Security Scanning](https://cybersectools.com/categories/security-scanning)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 9,178
- Website: github.com

## WPScan FAQ

### What is WPScan?

WPScan is a product in the Security Scanning category. It covers WordPress.

### What is the pricing for WPScan?

WPScan is free. Download and setup instructions are at https://github.com/wpscanteam/wpscan/.

### What are alternatives to WPScan?

Alternatives to WPScan listed on CybersecTools:

1. [Guardian360 Quickscan WP Plugin](https://cybersectools.com/tools/guardian360-quickscan-wp-plugin) - WordPress plugin for website security scanning via the Guardian360 API. (Free)
2. [Jsmon 2.0](https://cybersectools.com/tools/jsmon-20) - JavaScript security scanner for detecting vulnerabilities in third-party scripts (Commercial)
3. [RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/tools/roboshadow-owasp-zap-vulnerability-scanner) - Web app & network vulnerability scanner integrating OWASP ZAP, Shodan & Nmap (Commercial)
4. [Aikido EOL Scanner](https://cybersectools.com/tools/aikido-eol-scanner) - Detects end-of-life and outdated software in code and containers (Commercial)
5. [Intruder XSS Scanner](https://cybersectools.com/tools/intruder-xss-scanner) - XSS vulnerability scanner for web apps and APIs with automated scanning (Commercial)

Compare all WPScan alternatives at [https://cybersectools.com/alternatives/wpscan](https://cybersectools.com/alternatives/wpscan)

### What deployment and organization size does WPScan fit?

WPScan is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare WPScan with similar solutions

- [WPScan vs Guardian360 Quickscan WP Plugin](https://cybersectools.com/compare/guardian360-quickscan-wp-plugin-vs-wpscan)
- [WPScan vs Jsmon 2.0](https://cybersectools.com/compare/jsmon-20-vs-wpscan)
- [WPScan vs RoboShadow OWASP ZAP Vulnerability Scanner](https://cybersectools.com/compare/roboshadow-owasp-zap-vulnerability-scanner-vs-wpscan)

All alternatives to WPScan: [/alternatives/wpscan](https://cybersectools.com/alternatives/wpscan)

---

Source: https://cybersectools.com/tools/wpscan

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on WPScan: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md