TrustBeacon Email Delivery Auditor

Descripción

TrustBeacon Email Delivery Auditor identifies publicly visible DNS, email-authentication, and domain-configuration problems that can interfere with WordPress email transmission and delivery.

If WordPress messages are failing, being rejected, or landing in spam, TrustBeacon provides a single plain-English audit of the public configuration affecting your domain and email. Every finding includes an explanation, a recommendation, and the potential business impact.

The plugin checks email-delivery and domain-trust signals such as:

Email transmission and receipt

  • MX records
  • Public mail-domain configuration

Email authentication and deliverability

  • SPF records and enforcement strength
  • Common DKIM selectors
  • DMARC policies and enforcement strength

Supporting domain and website trust

  • SSL certificate availability
  • HTTP security headers
  • CAA records
  • DNSSEC indicators when supported by the server
  • Cloudflare indicators in public response headers
  • Public security plugin indicators visible in page HTML

The report includes:

  • An overall Trust Score
  • Separate category ratings
  • Passing, warning, failing, and informational findings
  • Plain-English explanations
  • Recommended corrective actions
  • Business-impact explanations

TrustBeacon is read-only. It reports findings and recommendations but does not automatically change DNS records, email settings, or website configuration.

Important: TrustBeacon evaluates publicly visible configuration and trust indicators. It does not send a test email, inspect private mail-server settings, guarantee inbox placement, or provide a security certification, penetration test, malware scan, or compliance audit.

Admin Dashboard

The Trust Auditor admin page presents results as a dashboard rather than a single wide table:

  • An overall Trust Score is shown as a circular gauge alongside the trust grade and counts of passing, warning, failing, and informational findings, all derived directly from the current audit’s findings.
  • Email Authentication, Website Security, Visitor Protection, and DNS Security are shown as separate summary cards using the plugin’s existing category ratings (Excellent, Good, Fair, Needs Attention, or Additional Review Recommended).
  • Findings are grouped by category. Each finding keeps its category, check, status, score, message, recommendation, and business impact; recommendation and business impact are available in an expandable «Recommendation and business impact» section.
  • Status is always shown as visible text (PASS, WARN, FAIL, INFO) in addition to color, and a small status dot is decorative only.
  • Before an audit has been run, an introductory panel explains what will be checked. It does not display a score or findings, so nothing can be mistaken for real results.
  • The dashboard styling loads only on the Trust Auditor admin page and does not affect the rest of the WordPress admin area.
  • The dashboard works without JavaScript. Recommendation and business impact sections use the browser’s native expand/collapse control.

External services

TrustBeacon Auditor performs remote HTTPS requests to websites selected
by the site administrator in order to audit publicly available trust
signals.

The plugin connects directly to the website being audited to inspect
information such as:

  • SSL certificate availability
  • HTTP response headers
  • Cloudflare detection
  • Security plugin indicators

Data transmitted:

  • The domain name entered by the administrator.
  • Standard HTTP request headers, including a User-Agent string.

These requests occur only when an administrator initiates an audit.

No personal visitor information is collected, stored, or transmitted.

The plugin does not use any third-party commercial APIs.

Privacy Policy:
https://itechguide.com/privacy-policy/

Terms of Use:
https://itechguide.com/terms-of-use/

Capturas

Instalación

  1. Upload the plugin folder to the /wp-content/plugins/ directory, or install the plugin ZIP through the WordPress Plugins screen.
  2. Activate the plugin through the Plugins screen.
  3. Open the Trust Auditor page in the WordPress admin menu.
  4. Click Run Audit.

FAQ

Does TrustBeacon send a test email?

No. TrustBeacon examines publicly visible DNS, email-authentication, and domain-trust configuration. It does not send a message through the WordPress mail system or guarantee delivery to a particular recipient.

Can TrustBeacon explain what needs attention?

Yes. Every finding includes a plain-English message, a recommended action, and an explanation of the potential business impact.

Does this plugin scan private files or private server data?

No. It checks public trust indicators for the installed site.

Does a high score prove my site is secure?

No. A high score means the checked public trust signals look good. It does not prove that the site is secure.

Does a low score prove my site was hacked?

No. A low score means that one or more public trust signals may be missing, weak, or unavailable.

Why does DKIM detection say no common selector was found?

DKIM selectors vary by mail provider. The plugin checks several common selectors, but some providers use custom selector names.

Why is DNSSEC sometimes informational?

Some PHP environments cannot query DNSSEC records reliably. In that case, the plugin avoids punishing the score for a check it cannot verify.

Reseñas

No hay reseñas para este plugin.

Colaboradores y desarrolladores

«TrustBeacon Email Delivery Auditor» es un software de código abierto. Las siguientes personas han colaborado con este plugin.

Colaboradores

Registro de cambios

0.1.10

  • Fixed the dashboard version display by synchronizing the internal version constant with the plugin release.
  • Updated the WordPress admin page title, menu label, dashboard heading, explanatory text, and limitation notice to reflect the email-delivery focus.
  • The displayed plugin version is supplied through the shared version constant rather than a separate dashboard value.
  • No changes to audit checks, scoring, category ratings, or stored data.

0.1.9

  • Repositioned the plugin around its primary benefit: identifying public configuration problems that can affect WordPress email transmission and delivery.
  • Improved the title, short description, tags, feature organization, and directory description.
  • Clarified that every finding includes a recommendation and business-impact explanation.
  • Clarified the distinction between public configuration auditing and sending an actual test email.
  • No changes to audit checks, scoring, category ratings, or stored data.

0.1.8

  • Redesigned the admin results page as a dashboard: a circular Trust Score gauge, finding-status counts, category summary cards, and findings grouped by category with expandable recommendation/business impact detail.
  • Added a dedicated pre-audit introductory panel explaining what the audit checks, shown before any audit has been run.
  • Added a scoped admin stylesheet that loads only on the Trust Auditor admin page.
  • No changes to audit checks, scoring, or category-rating calculations. This is a presentation-only update.

0.1.3

  • Revised scoring so INFO findings are excluded and WARN findings receive partial credit instead of harsh zero-point treatment.
  • Adjusted grade labels to better reflect public trust signals rather than full security certification.

0.1.1

  • Standardized plugin name, slug, text domain, prefix, contributor metadata, licensing, and WordPress.org readme format.
  • Replaced mixed class prefixes with TBAUD-prefixed classes.
  • Replaced raw HTTP header fetching with the WordPress HTTP API.
  • Added safer DNS lookup wrapper and defensive handling for unavailable DNS constants.
  • Added escaping, sanitization, nonce name, capability checks, and translatable admin strings.

0.1.0

  • Initial development version.