Changelog

• Hardening from the WordPress.org review: every screen escapes its output as it prints it, every database query uses placeholders for table names, and robots.txt paths come from WordPress.
• Server-log import reads plain and gzipped logs the same way.

Get version 2.2.3 on WordPress.org or download the zip from WordPress.org

• Documentation and Support links on the Plugins screen, in the screen footers and under Settings → Advanced.

• The getReport menu now sits in the usual place for plugins, below Settings, instead of at the top.

• Help on every screen: a link to that screen's section of the new documentation at getreport.app/wordpress/docs.
• When getreport.app cannot confirm your site, a link explains how to fix it.

• Connect: the automatic key no longer fails with "Unsupported Media Type".

• Connect now confirms the site is yours and gets it a free key automatically: Check now, re-tests after fixes and the weekly email work from WordPress, without emailing for a key. The key can only check your own site.

• Website report: sites at www.… now find their getreport.app scores (getReport files them without www.).
• Clearer message when getreport.app has no finished check yet; it is re-asked after a minute instead of ten.

• New getReport menu with Overview, AI audit, AI crawlers, AI referrals, Fixes, Website report and Settings.
• AI audit of every post, with a live getReport panel and paragraph dots in the block editor, and an AI score column in post lists.
• AI crawler analytics verified against published IP lists, robots.txt rules per bot, access test, firewall hints and server-log import.
• AI referral tracking without cookies, and a GA4 channel regex.
• New fixes: "Updated" dates, author box, AI bot rules in robots.txt, IndexNow, organisation facts in the markup, optional llms.txt. Every fix is logged.
• Requires WordPress 6.2.

• First release: scores in the dashboard, "Check with getReport", eight one-click fixes with Undo, re-tests and the weekly email.