
Wordfence
WPScan
Sucuri
Patchstack
MalCare Security Service
iThemes Security
NinjaFirewall (WP Edition)
WordPress vulnerability monitoring — scans your plugins and themes against real CVE data, no agent installed on your site.

Git query language, for quickly searching git contents.

Which is more popular?
Based on our record, Gitql seems to be more popular. It has been mentioned 1 time since March 2021.
Website, pricing, platforms and company facts side by side.
|
|
|
|
|---|---|---|
| Website | vulncue.com | github.com |
| Pricing | — | |
| Platforms | — | |
| Company | Startup from Spain · 1 - 9 employees · 2026 | — |
| Listed in |
In their own words, as submitted to SaaSHub.


VulnCue scans a WordPress site's plugins and themes against public CVE/NVD data and flags what's actually exploitable, with a risk score and plain-language fixes. A free plan covers one site with a monthly scan; paid plans (from €5.95/mo) add more sites, faster scans and PDF reports. A companion...
No description of Gitql yet.
An editorial look at what each product does well and who it suits.


No analysis of VulnCue yet.
Overall verdict
Why this product is good
Recommended for
How often each product is chosen within a category, 0–100% relative to the other.


As answered by people managing VulnCue and Gitql.
VulnCue's answer
It matches your actual installed plugin/theme versions against public CVE data — it doesn't just say "a vulnerability exists in this plugin," it tells you whether your installed version is affected and whether a fix already exists. The free plan is genuinely usable (not a trial), and the companion WordPress plugin includes built-in two-factor authentication at no extra cost, so you don't need a separate security plugin just for that.
VulnCue's answer
VulnCue grew out of running WordPress hosting day to day and seeing the same pattern over and over: sites getting compromised through an outdated plugin nobody realized was vulnerable. Most scanners either required deep security knowledge to interpret or didn't check the version you actually had installed — so VulnCue was built to answer one simple question in plain language: "is my site actually at risk right now, and what do I do about it?"
VulnCue's answer
Yo lo dejaría en blanco o pondría algo así: "VulnCue is early-stage — our current users are independent WordPress site owners and small agencies rather than named enterprise accounts." ¿Prefieres dejarlo vacío directamente, o usar esa frase?
VulnCue's answer
Unlike firewall-style plugins (Wordfence, NinjaFirewall), VulnCue never intercepts traffic on your live site — it only runs when you open its screen, so there's zero risk of it blocking real visitors. Compared to other scanners, findings come with plain-language explanations and a concrete fix, not just a CVE code and a severity number.
VulnCue's answer
Two groups: independent WordPress site owners and freelancers who want to know if their site is genuinely at risk without needing security expertise, and agencies/developers managing several client sites who need one place to monitor all of them (the Agencia plan covers unlimited sites).
VulnCue's answer
PHP 8.3 and SQLite for the core engine, a WordPress plugin in plain PHP (no external dependencies), public CVE/NVD and OpenCVE feeds as the vulnerability data source, and Stripe for billing.
Share your experience with using VulnCue and Gitql. For example, how are they different and which one is better?
Recommendations tracked on public social media and blogs since March 2021.


Tracking VulnCue since Oct 2026.
How does this compare to https://github.com/filhodanuvem/gitql. Source: over 3 years ago
When comparing VulnCue and Gitql, you can also consider the following products.


WPScan is a free, for non-commercial use, black box WordPress security scanner written for security professionals and blog maintainers to test the security of their sites.
Compare WPScan to VulnCue or Gitql:

Website Protection, Malware Removal, and Blacklist Prevention
Compare Sucuri to VulnCue or Gitql:

Monitor all your WordPress sites for security vulnerabilities found by our community of ethical hackers.
Compare Patchstack to VulnCue or Gitql:

The “Only” WordPress Security Plugin with “Instant” WordPress Malware Removal.
Compare MalCare Security Service to VulnCue or Gitql:

Security plugin that provides over 30+ ways to secure and protect your WordPress site.
Compare iThemes Security to VulnCue or Gitql: