Security & privacy

Your site data stays on your site.

Every free check runs on your own server and sends nothing anywhere. The AI audits run only when you run them, and you can read exactly what they send first.

Is BoltAudit safe to run on a production site?

Yes. The Local Audit is read-only and runs entirely on your own server, and the SEO checks will work the same way when they ship, so nothing is modified while they scan and nothing leaves the site. BoltAudit does not change your site at all — it reports what to change and how — and no account is required to start.

One rule, both engines.

BoltAudit's performance engine and its SEO & AEO engine, arriving in the next version, follow the same rule: everything free runs locally, everything AI is opt-in per run. There is no background sending, no analytics reading, and no data leaving your site that you did not start yourself.

On your server
Local Audit
Run SEO Check
All findings
All local fixes

Nothing leaves the site.

Cloud, only when you run it
AI Deep Audit
AI Visibility Audit

You start it, and you see what it sends.

What leaves your site, exactly.

Feature Where it runs What leaves your site
Local Audit Your server Nothing. Reads plugins, database, and environment.
Run SEO Checkcoming soon Your server Nothing. Reads your public pages, robots.txt, and sitemap.
AI Deep Audit Cloud, only when you run it The performance findings being analyzed, listed in the disclosure you can read before it starts.
AI Visibility Auditcoming soon Cloud, only when you run it Page titles, metas, and the text of analyzed pages, to judge citability and draft fixes.
External crawler probe Cloud, optional One request to your homepage, made the way an AI crawler would. Off by default.
Email alerts Cloud Your email address and the alert numbers you enabled.

That is the complete list. If a feature is not here, it sends nothing.

What happens when you apply a fix.

Preview first

You see exactly what will change, and the evidence for it, before anything happens.

Backup taken

A restore point is captured before any change is written.

Recorded in Fix History

Every change, applied or rolled back, in plain words.

Read-only by default

Any applied fix reverses instantly, long after it was made.

AI-drafted content, like meta descriptions, never publishes without your review. There is no setting to skip it.

You hold the switches.

robots.txt editing

On by default so BoltAudit can unblock AI crawlers. Turn it off and those fixes become guided instructions instead.

External crawler probe

Off by default. Turn it on per site if you want an outside check of how your CDN answers AI crawlers.

Questions about your data

The SEO checks read your public pages on your own server and send nothing. Only the AI Visibility Audit sends page text, and only when you run it.

No. It never connects to your analytics, and it has no access to customer records. Loss figures are research-backed estimates, which is why every one is labeled estimated.

They run in BoltAudit's cloud using your weekly credits. The report comes back to your dashboard; the analyzed text is not used to train anything.

Never. BoltAudit reads your site and reports on it; it does not write to plugin or theme files.

The plugin's tables are removed on uninstall if you enable cleanup in Settings, and nothing remains on your server that you did not keep.

More questions? Visit our FAQ Contact Us

Read-only until you say otherwise.

Install the free plugin and see everything it finds before a single byte leaves your site.

Install the free plugin See how it works