By clicking “Accept All”, you agree to the storing of cookies on your device to enhance site navigation, analyse site usage, and assist in our marketing efforts
Essential
These cookies enable our website and App to remember things such as your region or country, language, accessibility options and your preferences and settings.
Analytics
Analytic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
Marketing
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
Origin masking is really useful when you know how to set it up It can be a a fantastic security measure since CF adds great features to block malicious traffic. However, when it's bypassable... pretty pointless. A good tip is not to leave your Swedish Privex servers origin IP open to all.
Facebook Marketplace is a good bet for the price range you've listed as people can't get rid of Proliant G7, G8, and even some G9 -- you might even pick up some for free. Might need to travel about to get them, though. G9 are still very usable, just use a lot of energy, the rest... probably not...
WPScan will do a very good job for the surface level scanning of existing common plugins with WP, but it won't tell you much about your own code.
It reads like you want a SAST solution (something checking the code rather than dynamic testing of the running application), some options here...