Plugin Check (PCP)
View on WordPress.orgScores higher than 71% of indexed plugins
About
Plugin Check is a WordPress.org tool which provides checks to help plugins meet the directory requirements and follow various best practices.
What It Does
Plugin Check (PCP) is a developer-focused WordPress.org tool that scans plugin code against the directory's submission guidelines and broader best practices, covering areas like security, accessibility, performance, and coding standards. It runs locally in the WordPress admin and produces structured reports flagging issues that could block approval or undermine plugin quality. In practice, it acts as a pre-submission checklist for authors preparing packages for the official repository.
Who It's For
This plugin is built for WordPress plugin developers, agencies producing client plugins, and open source maintainers who need to validate their code against WordPress.org's review standards before submission. Hosting providers and enterprise teams running internal plugin audits will also find it useful for enforcing quality baselines across multiple projects. It is not a general-audience tool and assumes the user is comfortable reading code and interpreting technical warnings.
Who Should Skip It
End users, non-technical site owners, and anyone not actively developing or reviewing WordPress plugins should skip this entirely, as it provides no value to a normal website. If you are looking for runtime security scanning, malware protection, or performance caching, this is the wrong category of plugin altogether.
The Bottom Line
Plugin Check earns a 78.91 overall quality score and fills a genuine gap for WordPress plugin authors heading toward the official directory. Its small install base and unresolved support threads are real concerns, but the strong maintenance record and positive ratings suggest it is a dependable utility rather than a risky bet. Treat it as a specialist developer tool, not a site-wide security or performance plugin.
Related Plugins
Choose this instead if your goal is runtime SSL and basic security hardening on a live site, not pre-submission plugin auditing.
Pick Wordfence when you need active malware scanning, a web application firewall, and login protection rather than static code checks.
Opt for LiteSpeed Cache if performance is your aim and you are running on LiteSpeed servers, as it addresses a completely different problem space.
Select Jetpack for an all-in-one bundle covering security, backups, and growth tools, trading depth for breadth against dedicated solutions.
Use Redis Object Cache when you want to accelerate backend database performance through object caching, which is unrelated to plugin compliance checking.