Security audit results and indexed domain inventory for WordPress infrastructure utilizing ONATI.
Security snapshot
Across 4 ONATI WordPress sites indexed by TLDWP, compared to the all-WordPress average.
Security metrics currently cover 3 matching records in the cached metrics snapshot.
What stands out
TLDWP currently associates 4 indexed WordPress sites with ONATI, equivalent to 0% of the current WordPress dataset.
The largest measured difference is username enumeration: 0% versus 38.6% overall (-38.6 percentage points).
Sensitive-file exposure is 33.3% vs 1.8% overall (+31.5 pp); Header-grade F is 100% vs 82.6% overall (+17.4 pp); HTTPS adoption is 100% vs 96.3% overall (+3.7 pp).
These are observational associations among sites where TLDWP detected ONATI, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.
| Domain | Exposures | Headers | Last Checked |
|---|---|---|---|
| a*u*.pf (WP 7.1) | F | Sep 9, 2026 | |
| c*i*i*u*m*m*o.pf (WP 7.1) | F | Sep 7, 2026 | |
| m*h*n*.pf (WP 7.0.4) | F | Sep 6, 2026 | |
| p*p*r*.pf (WP 7.1) | F | Sep 6, 2026 |