Black Friday: 79% off every plugin Shop the sale →

Quick Start

From a fresh install to your first report in a few minutes.

  1. Install and activate the plugin, then enter your key under Tools > Ability Auditor License (see Installation and License).
  2. Go to Tools > Ability Auditor. Before the first audit you see a “No audit yet” message. The Inventory tab already lists every registered ability if you want a look.
  3. Click Run audit at the top of the screen. The audit takes a few seconds; it checks every ability’s permission callback as each role.
  4. You land on the Report tab with a success notice (“Audit complete: N findings”) and summary cards showing how many Critical, High, Medium, Low and Info findings there are.
  5. Click a severity card, or use the filters above the table, to narrow the findings. Start with Critical and High.
  6. Click an ability name to open its detail panel: who can run it, where it is exposed, why each finding matters and how to fix it.
  7. When you are done, use Export JSON, Export CSV or Print view to share the report.
  8. Open the Settings tab to confirm that the daily audit and email alerts are on (they are by default).
Report tab with severity cards and findings table
Report tab: severity summary cards and a filterable findings table, with three high findings from WooCommerce’s destructive abilities.

Run the first audit on a staging copy if you have many third-party plugins. Ability Auditor contains badly written permission callbacks as far as it can (output, notices and wp_die() are captured, execution is blocked), but a permission callback is still third-party code.

Was this article helpful?