Plugin category: Security & performance

Pages are served from files before WordPress even loads, purged automatically when you publish. HTML is minified, JavaScript deferred, iframes lazy-loaded, images delivered as WebP, browser caching and compression rules written for you, the database cleaned weekly. Measure, apply the one-click fixes, measure again. The AI explains the results in plain words if you ask.

Database and files zipped in the background on a schedule, kept with retention, copied to your SFTP/FTP server or a folder outside the web root, downloadable any time. Restore the database, the files or both with a safety copy made first; move to a new server by uploading the zip. A database backup runs before every update. An e-mail reports every run.

Lockouts after failed logins, two-factor authentication with any authenticator app, a request firewall against injection and scanner traffic, blocked and trusted IP lists, security headers, XML-RPC and user enumeration blocked. The integrity scan compares core files with the official checksums and looks for malware patterns. A score shows what is left to do; a weekly e-mail keeps you informed. Everything works without AI; the AI only writes the plain-language summary of the report.