diff --git a/scripts/cpanel-wp-site-scan.sh b/scripts/cpanel-wp-site-scan.sh
index 827b7fe..c232c9a 100644
--- a/scripts/cpanel-wp-site-scan.sh
+++ b/scripts/cpanel-wp-site-scan.sh
@@ -1,5 +1,12 @@
 #!/bin/bash
-# Scan all WordPress sites for performance/stability issues
+# Purpose: Audit every cPanel account on a WHM/cPanel host — enumerate domains,
+#          detect WordPress installs + versions, and flag performance/stability
+#          issues. Emits ===SITE_START===-delimited records for downstream parsing.
+# Usage:   run as root ON the cPanel server (reads /var/cpanel/users/ and /home/*).
+# Origin:  graduated from tmp/site-scan.sh; produced the 2026-03-16 ix-server audit
+#          (clients/internal-infrastructure/reports/2026-03-16-ix-server-cpanel-wp-audit.md).
+# Author:  Mike Swanson
+# Created: 2026-03-16
 
 for user in $(ls /var/cpanel/users/ | grep -v system | sort); do
     domain=$(grep "^DNS=" /var/cpanel/users/$user 2>/dev/null | head -1 | cut -d= -f2)