PlugUpp Link & Image Health Audit

PlugUpp Link & Image Health Audit finds broken links, broken images and SSL problems by checking the links and images your visitors actually see. It renders each of your own pages through the normal front-end pipeline and inspects the final HTML – so it catches links and images injected by themes, menus, widgets, footers and page builders that database-only checkers miss.

Everything runs on your own server. There is no external crawler, no per-link quota, and nothing about your site is sent to a third-party service.

What you get on the free plan

• Rendered-page scanning – checks the links and images that actually ship to visitors, including those added by your theme, menus, widgets, footers and page builder that database-only checkers never see
• Links, images and resources – internal and external links, images, and page resources (CSS, JS, icons, fonts)
• All your content types – posts, pages, and any public custom post type, including WooCommerce products
• Unpublished content too – optionally scan drafts, scheduled, pending and private content, so links are checked before they go live
• Clear verdicts – broken links and images, SSL and certificate problems, permanent and temporary redirects, and “blocked, not broken” hosts (for example a Cloudflare challenge) told apart from genuine failures
• By URL and By page views – sorted worst-first, with separate Issues, Warnings and Notices counts so you can triage at a glance
• Drill-down with evidence – see exactly which pages a broken URL appears on, and open the page source with the offending link or image highlighted in context
• URL parameter handling – cache-busters and tracking tags (ver, utm_source, fbclid and the like) are ignored so the same resource is not counted as many different URLs; the common ones are pre-filled, and you can add your own
• Exclude and ignore – exclude pages from scanning individually, from the Exclusions screen, or in bulk from the standard Posts and Pages screens; ignore individual URLs
• Built-in log viewer – file-based logging with a viewer on the Logs tab
• No quotas, nothing leaves your site – scan as much as you like, entirely on your own server

Private and password-protected content is skipped automatically – visitors and search engines can never reach it, so there is nothing to check.

A premium version with additional automation and reporting features is available separately from https://plugupp.com/.

External services

This plugin connects to the following external services.

Link and image URLs found on your pages

Checking a link or image means requesting the URL to see whether it resolves. This is the core function of the plugin.

• When data is sent: during a scan, for every unique external link, image or resource URL found in your pages’ rendered output.
• What data is sent: nothing beyond the HTTP request to the URL itself, made only to read its response status (for example 200, 404, or a redirect). Only URLs that already appear on your own pages are contacted. Internal links are checked against your own server.

The plugin also renders your own pages by requesting them on your own server (a self-request); that is your site contacting itself, not a third-party service.

Google Safe Browsing (Premium, optional)

If you enable Safe Browsing checks and provide your own Google API key, the plugin checks external link destinations against the Google Safe Browsing threat lists.

• When data is sent: during a scan, only when you have entered a Google API key. With no key, this feature is off and nothing is sent.
• What data is sent: the external URLs found in your scan are sent to the Google Safe Browsing Lookup API to check them against Google’s malware and phishing lists.
• Terms of service: https://cloud.google.com/terms
• Privacy policy: https://policies.google.com/privacy

Freemius

The plugin uses the Freemius platform for licence activation, plan changes, plugin updates (for paid plans), and as the Merchant of Record for purchases.

• When data is sent: on first plugin activation as part of the user-consented opt-in flow, on licence activation or deactivation, on plugin update checks (paid plans), and on uninstall (for optional feedback). Sending the initial opt-in data is the user’s choice – declining the opt-in still lets the plugin work in full. Scanning is fully local and never requires the connection.
• What data is sent: standard Freemius opt-in data including site URL, administrator email address, WordPress version, PHP version, plugin version, and active theme name.
• Terms of service: https://freemius.com/terms/
• Privacy policy: https://freemius.com/privacy/