Admin and Site Enhancements (ASE) vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Admin and Site Enhancements (ASE) helps you to easily enhance various admin workflows and site aspects while replacing multiple plugins doing it. Pro version with Lifetime Deal (LTD) is available at www.wpase.com. Here’s a quick walkthrough of ASE Free at v7.1.5 by Jakson. Here’s a detailed walkthrough of ASE Free at v7.0.3 by Pascal Claro. See more video reviews >> What Users Say “ASE easily replaces a dozen or more plugins I install on every website project. Super lightweight and easy to use.” ~NetzzJD “I bought the lifetime deal and was blown away by the quality, and the free version replaces SO many other plugins too. LOVE THIS!” ~Jacob Wonder “ASE is an amazing plugin! Time and money saver. Thank you!” ~Iulian Baciu See more reviews >> FEATURES & MODULES 78 modules in total: 60 free modules (32 has Pro features) | 18 Pro modules See all features >> Content Management [ASE Pro] Custom Content Types. Register custom post types (CPT), custom taxonomies, custom field groups and options pages that integrates with Bricks, Breakdance, Oxygen and Elementor, and compatible with various block themes and plugins. Also integrates with WPML and works with TranslatePress to create multilingual sites. An alternative for ACF Pro, Meta Box, Toolset, Pods, JetEngine or ACPT. [ASE Pro] Post Type Switcher. Switch the post type of one or more posts to a different post type. Content Duplication. Duplicate pages, posts and public CPTs. ASE Pro enables duplication only for certain user roles and certain public and non-public post types, and adds location option for duplication links. Content Order. Drag-and-drop custom ordering of hierarchical post types. ASE Pro enables ordering of non-hierarchical post types, including media / attachments, reordering and changing the parent of child posts is supported, as well as applying the custom order on the frontend. Also WPML compatible. [ASE Pro] Terms Order. Drag-and-drop custom ordering of terms and child terms from various taxonomies and apply the custom order on the frontend. WPML compatible. Media Files Visibility Control: Limit media files visibility so only administrators can see all media files. Non-administrator users will only see media files they uploaded themselves. ASE Pro adds an option to specify which non-administrator user roles will have such limitation. [ASE Pro] Media Categories. Hierarchical categories for the media library with drag-and-drop categorization. Compatible with WPML. Media Replacement. Replace any type of media file with a new one while ensuring no existing links will break. ASE Pro allows replacing media from the grid view of media library, replacing with a different file type and file name and replacing sub-sizes of image files inside posts and options. SVG Upload. Allow some or all user roles to upload SVG files with sanitization to keep things secure. AVIF Upload. Enable uploading AVIF files in the Media Library. [ASE Pro] Public Preview for Drafts. Public preview for draft and scheduled posts from some or all public post types. External Permalinks. Enable pages, posts and/or custom post types to have permalinks pointing to external URLs. ASE Pro allows enabling only on / except on certain post types, or on all post types. Open All External Links in New Tab. Force all links to external sites to open in new browser tab. ASE Pro allows excluding links with certain domains / subdomains from opening in a new tab and from getting the rel=”nofollow” attribute. Allow Custom Navigation Menu Items to Open in New Tab. Allow custom navigation menu items to have links that open in a new browser tab. Auto-Publish Posts with Missed Schedule. Trigger publishing of scheduled posts marked with “missed schedule”, anytime the site is visited. Admin Interface Clean Up Admin Bar. Remove various default elements from the admin bar. ASE Pro enables removal of admin bar items from other plugins. [ASE Pro] Admin Bar Custom Elements. Add custom menu and submenu items to the admin bar. Hide Admin Notices. Move notices into a dedicated panel accessible via the admin bar. ASE Pro enables completely hiding notices for non-admins. Disable Dashboard Widgets. Completely disable some or all widgets. Hide Admin Bar. Frontend hiding for all or some user roles. ASE Pro allows hiding on the backend and make frontend admin bar toggleable. [ASE Pro] Admin Logo. Show custom logo in the admin bar or the (top of) admin menu. Wider Admin Menu. Up to 300px wide. Admin Menu Editor / Organizer. Customize order for the admin menu. Change menu item title or hide some items. ASE Pro allows always hiding menu items for some or all user roles, adding custom menu and submenu items, reordering submenu items and always allowing eligible users to view and access a menu item. Navigation Menu Duplicator. Duplicate a navigation menu with one click from Appearance → Menus. [ASE Pro] Admin Columns Manager. Organize columns in the admin list tables. Supports columns for ASE, ACF and Meta Box custom fields. Show Custom Taxonomy Filters. Show additional filter(s) on list tables for hierarchical, custom taxonomies. ASE Pro allows showing additional filter(s) for non-hierarchical taxonomies. Enhance List Tables. Improve the usefulness of listing pages of various post types by adding / removing columns and elements, e.g. featured image, excerpt, last modified, ID, media file size columns. Various Admin UI Enhancements: Media Library Infinite Scrolling: Re-enable this in the grid view. Display Active Plugins First: On the plugins list. [ASE Pro] Preserve Taxonomy Hierarchy: Preserve the visual hierarchy of taxonomy terms checklist in the classic editor. [ASE Pro] Enable Dashboard Columns Settings: Set columns layout between 1 to 4 columns. [ASE Pro] Add User Role Slug(s) to Admin Body Classes. [ASE Pro] Add Usermame to Admin Body Classes. Custom Admin Footer Text: Customize the text you see on the footer of wp-admin. ASE Pro enables media insertion. Log In/Out & Register Change Login URL. Make the login URL more memorable and secure. ASE Pro adds compatibility with login process in WooCommerce pages, i.e. account and checkout, and custom 404 redirect on default login URLs. Login ID Type. Restrict login ID only to username or email address. [ASE Pro] Login Page Customizer. Easily customize the design of the login page. Site Identity on Login Page. Use the site icon and URL to replace the default WordPress logo on the login page. Log In/Out Menu. Enable log in, log out and dynamic log in/out menu item for addition to any navigation menu. ASE Pro allows customizing the “Log In” and “Log Out” text. Registration Column. Show users registration date. ASE Pro makes the column sortable. Last Login Column. Log last login datetime and show it in the users list table. ASE Pro makes the column sortable. Redirect After Login / Logout. Set custom redirect URL for all or some user roles after login / logout. ASE Pro allows setting separate redirect URL for each role. Disable User Account. Disable login for individual users while preserving their content and display name. Custom Code [ASE Pro] Code Snippets Manager. Manage CSS / SCSS, JS, HTML and PHP code snippets to modify your site’s content, design, behaviour and functionalities. Custom Admin CSS. Custom Frontend CSS. Insert , and Code. Easily insert , , and tags for tracking, analytics, etc. Custom Body Class. Manage ads.txt and app-ads.txt. Manage robots.txt. Disable Components Disable Gutenberg for some or all applicable post types. Optionally disable frontend block assets. ASE Pro allows disabling only on / except on certain post types, or on all post types, and adds optional always disable/enable on certain posts. Disable Comments. Disable comments for some or all public post types. ASE Pro allows disabling only on / except on certain post types, or on all post types. Disable REST API. Disable REST API access for non-authenticated users and remove URL traces from , HTTP headers and WP RSD endpoint. ASE Pro allows enabling access only for some, authenticated user roles, and adds a way to exclude certain API routes. Disable Feeds. Disable all RSS, Atom and RDF feeds. Disable Embeds. Prevent your site content from being embedded on other sites. Prevent embedding of non-whitelisted sites in your site. Disable all, related JavaScript. Removes support for the embed block. Disable All Updates. Completely disable core, theme and plugin updates and auto-updates. Will also disable update checks, notices and emails. Disable Author Archives. Return 404 (Not Found) error when trying to load author archives. Remove or disable links to author archives. Remove authors archives from the sitemap. Disable Smaller Components. Prevent smaller components from running or loading. Those are generator tag, version number, Windows Live Writer (WLW) manifest tag, Really Simple Discovery (RSD) tag, WordPress shortlink tag in , and also dashicons CSS and JS files, emoji support, jQuery Migrate, block-based widgets settings screen, native lazy load of images, application passwords, site admin email verification screen, user email notification after password change and plugin / theme editor. Security Limit Login Attempts. Prevent brute force attacks by limiting the number of failed login attempts allowed per IP address. ASE Pro adds IP whitelisting, which is also useful to unblock users. Password Policy. Enforce a minimum length and optional complexity rules (uppercase, lowercase, digits, special characters, unique characters) when users register, reset, or update their password. [ASE Pro] CAPTCHA Protection. Support for ALTCHA self-hosted version (GDPR-compliant, open source, free), Google reCaptcha v2 and v3, and Cloudflare Turnstile for WordPress and WooCommerce default forms (login, password reset, registration and comment forms). [ASE Pro] Two-Factor Authentication (2FA). Apply 2FA for some or all user roles with grace period settings and the option to apply different 2FA settings for each user role. Supported methods are authenticator app (TOTP), recovery codes and email. Obfuscate Author Slugs. Obfuscate publicly exposed author page URLs that shows the user slugs / usernames. Email Address Obfuscator. Obfuscate email address to prevent spam bots from harvesting them,. ASE Pro enables output of obfuscated mailto: link and also auto-obfuscation of email addresses in post content. Disable XML-RPC. Protect your site from brute force, DOS and DDOS attacks via XML-RPC. Also disables trackbacks and pingbacks. Optimizations Image Upload Control. Resize newly uploaded, large images to a smaller dimension and delete originally uploaded files. BMPs and non-transparent PNGs will be converted to JPGs and resized. ASE Pro enables setting custom JPG conversion quality and adds an option for conversion to WebP with custom conversion quality. You can also disable generation of some or all intermediate sizes. Revisions Control. Limit the number of revisions to keep for some or all post types. ASE Pro enables revisions control “only for”, “except for” or “for all” post types. Heartbeat Control. Modify the interval of the WordPress heartbeat API or disable it on admin pages, post creation/edit screens and/or the frontend. Utilities [ASE Pro] Site Backup and Migration. Backup files and database, restore from backups, and migrate or sync to another server. Email Delivery. Set custom sender name and email. Optionally use external SMTP service to ensure notification and transactional emails from your site are being delivered to inboxes. ASE Pro adds the option to specify a custom reply-to name and email, Bcc address(es), disable authentication and the option to log email delivery. Contact Form. A simple, customizable contact form (shortcode and block) with AJAX submission, built-in spam protection layers, submission entries management and notification email. [ASE Pro] Form Builder. Enable the drag-and-drop creation of various types of forms (contact, feedback, booking, application, proposal, admission, support, survey, etc.) on the frontend to collect information from site visitors or users or members. 33 field types are available, including Net Promoter Score (NPS), Likert, Matrix of Uniform and Variable Dropdowns and CAPTCHA fields. Support custom form styles, multi-columns layout, conditional logic, multi-step with saving progress, email notification, auto responder, entries management and webhooks for sending submission data to Zapier, n8n, etc. [ASE Pro] File Manager. A comprehensive file manager with folder tree navigation, file and folder operations, and code editing capabilities. [ASE Pro] Local User Avatar. Enable usage of any image from the media library as user avatars. Multiple User Roles. Assign multiple roles during user account creation and editing. Image Sizes Panel. Display a panel showing and linking to all available sizes when viewing an image in the media library. ASE Pro adds a copy button for the image URL on click. View Admin as Role. View admin pages and the site (logged-in) as one of the non-administrator user roles. Password Protection. Password-protect the entire site to hide the content from public view and search engine bots / crawlers. ASE Pro adds IP whitelisting and bypassing via URL parameter, and also applies design elements from the Login Page Customizer module. Maintenance Mode. Show a simple maintenance message. ASE Pro adds option to set custom page and browser tab title, use WYSIWYG editor, use pattern, image, solid color background, apply custom CSS, and also add the option to use an existing page created with the block / classic editor or a page builder as the maintenance page. It also adds an option to exclude certain URLs (wildcard support) and allow non-admins to access the frontend. [ASE Pro] Redirect Manager. Easily manage various types of redirects / redirections (3xx, 4xx, 5xx codes) with support for wildcards and regular expressions (regex). Redirect 404. Perform 301 (permanent) redirect to the homepage for all 404 (not found) pages. ASE Pro adds option to set custom redirect URL. Display System Summary. Show web server software, PHP version, database software and server IP address in the “At a Glance” dashboard widget. ASE Pro also shows the size of the site, database and root, wp-content, plugins, themes and upload folders. Search Engines Visibility Status. Show admin bar status and admin notice when search engines are set to be discouraged from indexing the site. ASE Pro adds a way to prevent dev / staging sites from having search engine visibility enabled. See all features >> ASE Pro Lifetime Deal (LTD) is available at www.wpase.com. LANGUAGES ASE has been translated into 30+ languages. You can help translate ASE into your language(s).

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!