# Plugevity > Plugevity makes WordPress plugins built to last: free tools that tell you which plugins are risky and when an update breaks your site, backed by a public continuity pledge. Every page is also available as Markdown: add .md to its path (https://plugevity.com/pledge.md, https://plugevity.com/plugins/health-score.md, https://plugevity.com/index.md for the home page). The whole site in one file: https://plugevity.com/llms-full.txt. Plugevity plugins are free (GPL), read-only, send no data to Plugevity and are covered by a public continuity pledge: 90 days of notice before any change of ownership, and the code and name go to the community if a plugin is discontinued. ## Plugins - [Plugevity Health Score](https://plugevity.com/plugins/health-score.md): Free WordPress plugin that scores every installed plugin from 0 to 100 for longevity and emails you when a plugin is closed on WordPress.org or changes owner. - [Plugevity Update Watch](https://plugevity.com/plugins/update-watch.md): Free WordPress plugin that logs every core, plugin and theme update and checks up to 5 key pages about a minute later, alerting you by email or Slack only when something broke. ## Services - [Free WordPress update risk check](https://plugevity.com/risk-check.md): we test pending updates and the next PHP version on a private copy of a site and send a one-page report. - [Update Guard](https://plugevity.com/update-guard.md): planned service that tests updates on a copy before production. Waitlist only; not available yet. ## Case studies - [Display Widgets (2017): what Health Score would have shown](https://plugevity.com/cases/display-widgets-2017.md): Display Widgets was sold in May 2017 and shipped a backdoor a month later. Replaying its public history, Health Score would have flagged the change of hands on the day of the sale. - [Essential Plugin backdoor: what Health Score would have shown](https://plugevity.com/cases/essential-plugin-backdoor.md): We replayed the public history of the 31 Essential Plugin plugins through Health Score. Its first email would have gone out 12 to 16 May 2025, about 12 weeks before the backdoor shipped. - [Seven ways an update breaks a site: what WordPress and Update Watch catch](https://plugevity.com/cases/update-breakage-lab.md): A lab test with seven kinds of broken plugin updates. WordPress caught one on its own. With three pages and a check text set up, WordPress and Update Watch together caught four. ## Blog Guides and WordPress release testing, with sources for every claim. Feed: https://plugevity.com/blog/feed.xml - [How to tell if a WordPress plugin is abandoned (and what to do about it)](https://plugevity.com/blog/how-to-tell-if-a-wordpress-plugin-is-abandoned.md): Six public signs that a WordPress plugin is abandoned or changing hands, where to find each one, and what to do for each: from waiting and watching to replacing it. ## Policies - [Who maintains Plugevity](https://plugevity.com/about.md): Plugevity is a small, independent WordPress plugin maker run by one person in Brazil. Here is how it works and why it exists. - [Continuity pledge](https://plugevity.com/pledge.md): What Plugevity promises about the future of every plugin it publishes, including notice before any change of ownership. - [Privacy](https://plugevity.com/privacy.md): What data plugevity.com and the Plugevity plugins collect, why, and how to have it deleted. - [Security](https://plugevity.com/security.md): How to report a security vulnerability in a Plugevity plugin or site, and how we respond. ## Health Score: questions ### How do I know if a WordPress plugin is abandoned? Look at three things on its WordPress.org page, the date of the last release, the "tested up to" WordPress version and whether the plugin is still listed. Health Score reads the same public data for every plugin on your site once a day and turns it into a 0 to 100 score with plain reasons, so you do not have to check each page by hand. ### What happens when a WordPress plugin changes owner? The new owner can ship any code in the next update, and your site installs it like any other update. In April 2026 WordPress.org closed 31 plugins after the buyer of a plugin portfolio planted a backdoor in their updates. Health Score records who owns each plugin on WordPress.org and emails you when that changes, so you can review the next update before installing it. ### What does it mean when a plugin is closed on WordPress.org? A closed plugin gets no more updates through WordPress.org, often because of an unfixed security issue or a guideline violation. WordPress does not warn you about it in the dashboard. Health Score shows closed plugins with a score of 0 and the closure reason, and adds a Site Health test for them. ### Does Health Score slow down my site? No. It talks to WordPress.org only from WP-Cron, in batches of 15 plugins, never while a page loads. The admin screen, Site Health and the abilities read cached results. ### Does it check premium plugins? No. Premium plugins and plugins whose Update URI points outside WordPress.org have no public data to score, so they are shown as "Not checked" and are never sent anywhere. ### Is Health Score free? Yes. It is free, licensed under the GPL, sends no data to Plugevity and has no upsells in the dashboard. ## Update Watch: questions ### How do I find out if a WordPress update broke my site? Check the pages that matter right after the update, and look for PHP fatal errors written at the same time. Update Watch does this for you about a minute after every batch of updates, on up to 5 pages you choose, and emails you only if something failed. ### Does WordPress roll back a broken update? Only partly. Since WordPress 6.6, a plugin auto-update is rolled back when it causes a fatal error right away. A broken checkout, a form that stops loading or an error on one template is not caught, and manual updates are not rolled back at all. ### How do I see which plugins were updated and when? Update Watch keeps a log of every WordPress, plugin and theme update with the old and new version, the time, and who ran it, including automatic updates and WP-CLI. Version changes made by FTP, Git deploys or host tools are logged as "detected". ### Does Update Watch roll back updates? No, on purpose. An automatic rollback can fail halfway or undo a security fix. Every alert lists what was updated just before and the steps to roll back by hand. ### Can I get the alert in Slack? Yes. Add a Slack incoming webhook, or a Zapier, Make or n8n webhook. The webhook gets the checked pages and recent updates, never PHP error messages. ### Is Update Watch free? Yes. It is free, licensed under the GPL, sends no data to Plugevity and has no upsells in the dashboard.