Controlled scans
Admin-triggered, budget-limited checks use ephemeral anonymous carts and never place an order.
Free WordPress plugin · Version 1.0.5
CacheSafe 1.0.5 is available from WordPress.org. Review the release changelog for maintenance details and upgrade notes.
Run controlled anonymous cart sessions through your store’s public WooCommerce surfaces. CacheSafe gathers local evidence about cache behavior, cookies, headers, Store API responses, and whether the tested sessions remain isolated from each other.
Admin-triggered, budget-limited checks use ephemeral anonymous carts and never place an order.
Reports omit cookie values, cart tokens, nonces, authorization headers, raw bodies, secrets, and customer data.
Scan evidence stays on your WordPress site. CacheSafe does not phone home or require an account.
Product walkthrough
This walkthrough covers installation, preflight checks, test-product setup, a controlled live scan, sanitized findings, report formats, and the limits of the evidence CacheSafe provides.
Watch on YouTubeWhat it reviews
Simple workflow
Configure a test productChoose an approved simple product for temporary anonymous carts.
Run preflightConfirm WooCommerce surfaces, loopback access, Store API, and runner health.
Start a manual scanObserve the staged Store API and classic session checks.
Review the evidenceUse the findings and provider-aware guidance before changing cache or CDN settings.
Install and evaluate
Copy or download sanitized JSON, text, or HTML reports. By default, CacheSafe keeps the last five completed scans within 30 days, with shorter retention available.
Clear scope
CacheSafe reports what its controlled requests observe from the tested perspective. It does not change cache, CDN, DNS, or hosting settings, continuously monitor traffic, place orders, process payments, or guarantee that every customer session is safe under every route and condition.
View CacheSafe on WordPress.org →