AI-powered evaluation using the Model Context Optimization BS Detection Framework, based solely on publicly available website content.
Based on 370 businesses audited.
WPScan has 20.5 points less BS than the average for Security, Surveillance & Cybersecurity.
Security, Surveillance & Cybersecurity BS: WPScan (wpscan.com)
WPScan is a rare example of a product-led security site where the substance actually outweighs the signal. It functions more as a technical utility than a marketing brochure, providing immediate access to the data it claims to catalog.
Implement Organization and Person schema to formally link the ‘crack team’ to their professional credentials and connect the site to Automattic’s corporate identity. Increase the number of external proof links pointing to CVE entries or third-party security audits to substantiate the ‘enterprise’ trust claims. Replace the slightly generic H1 with a data-driven heading that highlights the database’s live update frequency.
The site exhibits high information density, anchored by specific numbers like ‘73,239 WordPress core, plugin, and theme vulnerabilities’. While the H1 ‘It’s like having your own team of WordPress security experts’ is a power-word-heavy value prop, it is immediately followed by technical specifications such as ’25 API calls per day’ and ‘Webhooks: Slack & HTTP’. The ratio of fluff to substance is low, with substantive evidence dominating the sub-pages.
When chunking fails, embeddings degrade, retrieval collapses, and your content loses every competitive comparison. Generate your Semantic HTML Audit to quantify the structural friction that blocks AI comprehension.
There is virtually zero semantic drift between the homepage and sub-pages. The homepage promises a vulnerability database and scanner, and the sub-pages (themes and wordpresses) deliver precisely that through exhaustive, dated lists of security flaws. The transition from the marketing hero section to the technical terms of service is logically consistent with an enterprise software model.
Our Authority as a Service model transforms raw diagnostic data into high stakes results. Start your Clinical Strategic Diagnosis for 1 Euro to secure the strategic fixes required for growth.
The trust_theatre_flag is false across all pages, and while the review_count is low (5) relative to the claims of being used by ‘the world’s largest brands’, the site avoids anonymous praise. It provides named attribution to Mario Heiderich (CEO of Cure53), which carries significant weight in the security community, though the proof_links_count of 1 suggests a need for more external validation paths.
Proof density is high. Across the four pages, the site moves beyond vague assertions to provide specific proof points including historical longevity (10+ years), exact database counts, and granular API documentation. The list of vulnerabilities serves as its own proof of the product’s primary utility.
For a demonstration of entity driven retail architecture, open the Walmart Structured Data audit. View the Walmart Structured Data Audit to see how product, brand, and service entities are reconstructed for AI systems.
The commodity fingerprint is minimal because the core value proposition—a decade-old database of 73k+ specific vulnerabilities—is a high-barrier-to-entry asset that cannot be easily replicated by competitors. Template language is avoided in favor of functional data displays, although some generic claims like ‘stay ahead of threats’ appear in the meta descriptions.
The primary authority gap is technical; the schema_json is null across all crawled pages, which is a significant omission for a company claiming technical expertise. While the brand is tied to Automattic Inc. in the Terms of Service, the lack of Person schema for the ‘Crack team of WordPress security experts’ mentioned on the homepage prevents verification of individual authority.
There is no disconnect between marketing tone and demonstrated performance. The site claims to be a ‘comprehensive’ source of WordPress vulnerabilities and supports this by providing a searchable index with entries as recent as September 2025, which is within the 12-month currency window for the system date of May 2026.
Security, Surveillance & Cybersecurity BS: WPScan (wpscan.com)
The website perfectly aligns with the Security & Cybersecurity category, specifically focusing on vulnerability management and threat intelligence for the WordPress ecosystem. Technical indicators such as CVSS Risk Scores, API endpoints, and a database of 73,239 vulnerabilities confirm high industry specificity.
AI retrieval begins with one question: "What is this page?" Read the Structured Data Technical Guide to learn how correct entity typing and persistent identifiers prevent your site from collapsing into noise.
“The low score of 16 is driven by exceptional semantic coherence and high information density. The points accrued are primarily due to technical metadata failures (null schema) and standard marketing cliches in the hero section that do not reflect the high technical quality of the underlying content.”
Analysis Disclosure & Source Attribution
Snapshot Date: May 24, 2026
Purpose: This data is presented under “Fair Use” / “Educational Exception” for the purpose of forensic semantic analysis, allowing users to see how machine logic interprets digital signals.
Machine Perception Notice: This evaluation is generated by machine-read logic (MRL). The AI interprets the “Digital Ghost” of a website (code, metadata, and semantic structures), which may differ from what a human sees at the same moment. This is an automated technical diagnostic and not a statement of fact or human opinion regarding the real-world integrity or legitimacy of the business. Any missing or inaccessible elements in the snapshot are treated as machine-read signals, reflecting AI rendering limitations rather than intentional omission.
Notice to the Evaluated Business: This analysis is part of a non-adversarial audit. The results are intended as professional feedback to help improve machine-readability and authority signals. Any company can use these insights for free. When content is updated, a fresh audit can be requested at any time to reflect the current state.
To All Users: You are encouraged to visit the live site at WPScan to view the most current version of their content and see directly what the company offers.