There's no rival plugin here — the real competitor is how most agencies police their standard today: a mental checklist, applied whenever someone remembers, by whoever happens to be logged in. Here's the honest breakdown against that.
Checking by hand means the standard lives in someone's head, gets applied inconsistently, and drift surfaces only when it breaks something — usually mid-ticket, on the client's clock. WP Drift Auditor (this site) writes the standard down as a baseline, ships it to every site as a JSON file, and turns conformance into a score you can read at a glance. Folklore versus a number.
| Feature | WP Drift Auditor | Checking by hand |
|---|---|---|
| Time to audit one site | ✓ Seconds, on the dashboard | ✗ 20+ minutes, when it happens |
| The standard is written down | ✓ A versionable baseline file | ✗ Tribal knowledge |
| Unapproved / banned plugins | ✓ Whitelist + blacklist, every audit | ✗ Noticed when something conflicts |
| Debug flags left on | ✓ Major finding, instantly | ✗ Found by a visitor or a crawler |
| Admin-account creep | ✓ Max count, banned names, email domain | ✗ Nobody counts admins |
| Update-policy conformance | ✓ Core & plugin posture vs the standard | ◐ Assumed, rarely verified |
| Same test on every site | ✓ One imported baseline | ✗ Author-dependent |
| Trackable over time | ✓ A score you can compare | ✗ "It seemed fine last month" |
| Client-ready evidence | ✓ Branded drift report | ✗ |
| Fixes the drift for you | ◐ Read-only, by design | ◐ If there's time |
| Cost | From $49/yr · $599 lifetime | Free — minus the drift you never caught |
You maintain three sites, you built all of them, and you're the only person who ever touches them. Your head is a perfectly good baseline at that scale.
You maintain a fleet, more than one person touches it, and you've been surprised by a site that quietly stopped matching your standard — a rogue plugin, a debug flag, a mystery admin. Write the standard down once, import it everywhere, and make drift a number. That's us.
The audit reflects what the site reports about itself at audit time. It measures conformance to your standard — it doesn't replace a security audit, and it never modifies a site.