Bought this for ongoing WordPress security audits across client sites, and it's held up well beyond the checklist-scanning basics. What really impressed me was reporting a couple of false positives and a confusing auto-fixer bug directly to the developer. They responded within less than 24 hours, and the fixes shipped in the very next update.

As someone who isn't a security specialist by trade, having a tool that's both genuinely useful for surfacing real issues, AND backed by a developer who's actively maintaining and improving it based on real user reports, made a big difference in how much I trust it now. Good value, and even better support behind it!