Rampart WP Checker

One-command quality gate for WordPress plugins and themes.

Static analysis with zero WordPress runtime. Point it at a plugin folder and get a security report in seconds: WPCS, phpstan, phpunit, $wpdb prepare, escaping, nonce, capability and more.

php bin/wp-check /path/to/my-plugin --min-severity=error --fail-on=none --format=html

The Rampart family

Project	Focus	Repository	Documentation
Rampart	Laravel Artisan quality gate	thiennhant95/Rampart	Pages
Rampart PHP	Plain PHP + frameworks, PHP 7.4+	thiennhant95/Rampart-PHP	Pages
Rampart WP	WordPress plugins/themes	thiennhant95/Rampart-Wordpress	Pages

Start here

English documentation — install, rules, reports, CI.
日本語ドキュメント
Tài liệu tiếng Việt

Repository guides

Installation — Phar, Composer, source.
Rules — every WordPress rule with a true/false example.
CI recipes — GitHub Actions, GitLab.
Reports · Client reports
FAQ — troubleshooting and false positives.