Forms and lead capture: A reliable form plugin connected properly to your CRM or email tool is essential infrastructure for a SaaS marketing site — this is worth investing in a quality option rather than a bare-minimum free plugin.

Security monitoring: One security plugin covering firewall rules and basic monitoring is valuable, layered on top of (not instead of) isolated hosting infrastructure — avoid stacking multiple security plugins that duplicate functionality.

A simple way to run this audit is checking each plugin’s last-updated date and comparing it against how recently anyone on the team actually configured or referenced it. A plugin nobody has touched in months, paired with a maintainer who hasn’t shipped an update recently either, is a strong candidate for removal — both from a performance and a security standpoint, since unmaintained plugins are a common source of vulnerabilities.

It’s also worth involving whoever manages the marketing site directly in this review, since they often know which tools are genuinely still part of active workflows versus leftovers from a project that wrapped up months ago. A technical audit alone can miss this context that only the day-to-day site operator would have.