Link Invader finds broken links, dead images, and bot-blocked URLs across your whole site, and keeps watching so you know when something breaks.
Everything runs locally on your own site. There is no account to create, no credit card to enter, no monthly link quota, and none of your content is sent to anyone's cloud.
Local first
- All scanning happens inside WordPress. Your links, your server, your data.
- Works on staging sites, intranets, and password-protected sites that cloud crawlers cannot reach.
- Unlimited links and unlimited scans. There is no quota, because there is no cloud bill behind it.
Host safe
- The scanner works in small, strictly budgeted slices with hard time and memory limits, so it stays friendly to shared hosting.
- Throttled, per-host-limited checking. Never floods any server, including yours: internal links are resolved through WordPress itself instead of HTTP.
- WP-CLI runner for very large sites:
wp link-invader scan.
Accurate
- "Blocked" is not "broken." Sites that refuse robots (403, bot challenges, rate limits) get their own status instead of a false positive.
- Nothing is flagged broken on first sight. Dead links are confirmed on a second, later check before you are told.
- Every verdict carries a confidence level, and one click dismisses a link you know is fine.
Works with page builders
- Divi, Elementor, Beaver Builder, Bricks and WPBakery all keep your page somewhere other than the post content. Link Invader reads the finished page, so links inside builder modules are checked like any other link.
- If a page cannot be read that way, it fetches the page properly rather than guessing.
- If your host or firewall blocks that too, it reads the addresses out of the builder's own fields, and says in the log that it did.
- It never reports a link it did not actually find. A builder page is never padded out with results that are not on your site.
Complete coverage
- Scans the RENDERED content of every public post type, products and portfolios included, so links added by page builders, shortcodes, and blocks are seen. Choose what to scan in Settings.
- Menus, widgets, and footer links are covered. Broken images too.
- Every broken link says how long it has been failing, because a link that broke an hour ago may be a server restart and one that has been failing for a week is a link to fix.
- A link you have deleted stops being reported. It is marked as no longer on your site for one scan so you can see the fix worked, then removed.
- Visitor watch: when someone visits a page, its links are quietly bumped to the front of the recheck queue, so your busiest pages have the freshest results. This never runs checks during a page view and stores nothing about the visitor.
1.0.3
- Improved the safe, one-time migration from the former LinkCanary plugin name to Link Invader.
1.0.2
- Added one contextual Link Invader Pro link to the end of free completed-scan emails for people who want scheduled reports with affected URLs.
1.0.1
- When a scheduled Pro summary is enabled, it is now the single authoritative email. The count-only completed-scan email is suppressed to avoid conflicting snapshots.
1.0.0
First public release.
- Finds broken links, images, and redirects across every public post type, reading the finished page your visitors see so links added by page builders, shortcodes, and blocks are all included.
- Spots the link that redirects instead of failing: a page quietly swept to a search box, or a crowd of links all landing on the same place. It answers 200, so most checkers call it healthy. Reported as something to look at, never as broken, because the page does load.
- Never flags a link on one bad response. Everything is re-checked before it is reported, and links that are merely blocked to bots (403, 401, rate limits, bot challenges) are shown as blocked rather than broken.
- Verifies https certificates. Expired, self-signed, and wrong-host certificates get their own warning instead of being quietly accepted.
- Built for shared hosting. No long-running process at all: work happens in short slices with hard time and memory limits, requests to any one host are capped, internal links are resolved through WordPress rather than over HTTP, and nothing runs during a visitor page view.
- A live monitor that tells you the truth. If checking stops for any reason, the dashboard says so and offers a one-click restart, instead of showing yesterday's results as though nothing were wrong. A dropped background request, which shared hosts do routinely, is retried on its own before you are told anything at all.
- Reads Divi, Elementor, Beaver Builder, Bricks and WPBakery pages, and never invents a link it did not find.
- Fix links without leaving the results: change a URL everywhere it appears, remove a link but keep the wording, re-check, or dismiss. Content edits are saved as revisions, and by default they do not change the post's modified date.
- Pages whose links live somewhere it cannot safely edit are reported as skipped, with a count. It never claims a fix it did not make.
- Rechecks the pages your visitors are actually reading first, and re-checks everything weekly.
- WP-CLI for large sites: wp link-invader scan, wp link-invader status.
- Your content never leaves your site. All results are stored locally, and uninstalling removes every table, option, scheduled job, and log.
Pro adds:
- A domain inventory: every other site you link to, how many links each has, and where those links actually end up.
- Catches a link that still works but no longer goes where you sent it, which is what happens when a domain you link to changes hands.
- Scan scheduling with a quiet window, so all checking happens overnight in your own timezone, and stops completely outside it rather than competing with your visitors.
- Instant alerts when a link breaks, plus daily or weekly summaries that are sent even when nothing is wrong, so silence never has to be interpreted. Slack, Discord, and plain JSON webhooks.
- Bulk re-check, dismiss, and unlink across every result.
- Replace one domain with another everywhere it appears, with a preview of every change before anything is written.
- Fixes links inside Elementor pages in place, backing up the page's data first.
- A WordPress Multisite dashboard listing every site in the network: broken counts, last scan, and whether each site's scanner is actually running, with a restart button for any that has stopped.