On your sites and servers

Everything else CheckRoost does happens from the outside and needs nothing installed. These two report what only the machine itself can see — plugin updates and files that should not be public on a WordPress site, disk and memory on a server — and each says what it reads and what it refuses to do before it says how to install it, because that is where the decision to install is made. Both refuse an update that is not signed.

• WordPress pluginWhat it publishes, why it holds no administrator credential, and how a site connects.
• Server agentInstallation, what it collects, what it refuses to do, and rolling it out across a fleet.
• Next.js packageOne route that lets CheckRoost check the packages a deployed Next.js app ships.