=== Ausculte – Site Health Check, Security & SEO Audit ===
Contributors: wpalab
Tags: site health, checkup, security, audit, performance
Requires at least: 5.9
Tested up to: 7.0
Requires PHP: 7.4
Stable tag: 1.0.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Instant health checkup for your WordPress site: security, performance and technical SEO checks, scored /100, with one-line fixes.

== Description ==

Ausculte (French for "listen with a stethoscope") runs 15 practical checks on your WordPress site and gives you a clear /100 health score, right in your dashboard. No external service, no account, no tracking: everything runs locally on your site.

**Security checks**

* WordPress core up to date
* PHP version support status
* HTTPS enabled
* Debug mode and error display leaks
* Theme/plugin file editor status (DISALLOW_FILE_EDIT)
* REST API user enumeration (/wp-json/wp/v2/users)
* XML-RPC exposure
* Default database table prefix
* "admin" username existence
* Directory listing on uploads

**Performance checks**

* Persistent object cache
* Post revisions limit
* WP-Cron configuration

**Technical SEO checks**

* Search engine visibility setting (noindex trap)
* Permalink structure

Each finding comes with a one-line explanation and the exact fix (wp-config constant, setting, or .htaccess rule). Critical issues are ranked first, so you know where to start.

**Dashboard widget**: score, counters and your top 3 problems at a glance. **Full report page**: all checks grouped by Security, Performance and Technical SEO, with a one-click re-run button.

**En français** : Ausculte réalise un audit complet de votre site WordPress — analyse de la sécurité, de la performance et du SEO technique — avec un score de santé sur 100 et un diagnostic clair. Chaque test livre son remède en une ligne.

Ausculte is built by WP Admin Lab, a French technical magazine about WordPress, security and web performance (https://wpadminlab.com).

== Installation ==

1. Upload the `ausculte` folder to `/wp-content/plugins/`, or install via Plugins → Add New.
2. Activate the plugin through the Plugins screen.
3. Open the Ausculte dashboard widget, or the Ausculte menu for the full report.

== Frequently Asked Questions ==

= Does Ausculte send any data outside my site? =

No. All checks run locally. The only HTTP requests are loopback requests (your site calling itself) to test public endpoints like the REST API or xmlrpc.php. Nothing is transmitted to third parties.

= Does it fix the problems automatically? =

No, and that is deliberate: most hardening fixes belong in wp-config.php or server configuration, which a plugin should not rewrite silently. Each finding includes the exact line or setting to apply.

= Will it slow down my site? =

No. Results are cached for 5 minutes, and checks only run in wp-admin when you view the widget or report page.

= Is Ausculte compatible with security plugins? =

Yes. It does not replace Wordfence, iThemes Security or Solid Security: it verifies their results and catches what is often left unconfigured.

== Screenshots ==

1. Dashboard widget with the /100 score and top problems.
2. Full report page: all 15 checks with severity badges and fixes.

== Changelog ==

= 1.0.0 =
* Initial release: 15 checks (security, performance, technical SEO), /100 score, dashboard widget, full report page.
