Site Cleanup Controls vs BaseCloud Security Manager

Abhishek Site Cleanup Controls gives developers and site owners fine-grained control over 35+ WordPress features that are often unnecessary. Each feature has a simple on/off toggle, organised into five logical groups inside Settings -> Site Cleanup Controls. No features are enabled by default — activate only what you need. Security User Enumeration — Block ?author=N redirect attacks that expose usernames. Author Archives — Return 404 for author archive pages. XML-RPC + Pingback — Fully disable the XML-RPC endpoint and remove the X-Pingback header. Plugin and Theme Editor — Set DISALLOW_FILE_EDIT to prevent in-admin file editing. Application Passwords — Disable the Application Passwords feature. REST API — Restrict REST API access to authenticated users only. Right Click — Disable the browser context menu on the frontend. Performance Emojis — Remove all emoji scripts, styles, and DNS prefetch hints. Embed Objects — Disable WordPress oEmbed and embed scripts. Dashicons — Prevent Dashicons from loading for non-logged-in visitors. Heartbeat — Deregister the Heartbeat API script. Block Library CSS — Remove wp-block-library and global-styles stylesheets on the frontend. Version Var (?ver=) — Strip ?ver= query strings from enqueued asset URLs. PDF Thumbnails — Skip thumbnail generation for uploaded PDF files. oEmbed — Remove oEmbed discovery links and disable autoembed. Remote Block Patterns — Stop WordPress fetching patterns from api.wordpress.org. Head Cleanup Generator Meta Tag — Remove the WordPress version meta tag from head. WLW Manifest — Remove the Windows Live Writer manifest link. Really Simple Discovery (RSD) — Remove the RSD link tag. Short Link — Remove the shortlink tag and HTTP header. Adjacent Posts Links — Remove prev/next link tags from single post heads. RSS Feeds — Redirect all feed URLs to the homepage. Admin Cleanup capital_P_dangit — Remove WordPress forced capitalisation filter. Screen Options and Help Tabs — Hide Screen Options and Help dropdowns. Howdy to Welcome — Replace “Howdy,” with “Welcome,” in the admin bar. Navigation Items in Admin Bar — Remove WP logo, site name, updates, and comments. Clean Dashboard — Remove all default dashboard widgets. Privacy Tools — Hide Export/Erase Personal Data from the Tools menu. Site Health Page — Hide Site Health from the Tools menu. WP Login Logo and Favicon — Hide the WordPress logo on the login page. Admin Email Verification Prompt — Disable the admin email confirm interstitial. Empty Trash (1 week) — Shorten automatic trash-emptying from 30 days to 7 days. Content Comments — Disable comments sitewide. Post Revisions — Disable revision storage. Search — Redirect all search queries to the homepage. WordPress Features Thumbnails / Featured Images — Remove post thumbnail support. Widgets — Disable all widgets and sidebars. Navigation Menus — Remove nav menu theme support. Tags — Unregister tags from posts. Categories — Unregister categories from posts. Post Formats — Remove post format theme support. Custom Fields — Remove custom fields meta box from editor. Excerpts — Remove excerpt support from posts and pages. Trackbacks — Remove trackback support from posts. Attachment Pages — Redirect attachment URLs to the file directly. Automatic Updates — Disable automatic core, plugin, and theme updates. Self Pings — Stop WordPress pinging your own site. jQuery Migrate — Remove jQuery Migrate script on the frontend.

Transform your WordPress site into a security fortress in under 2 minutes. BaseCloud Security Manager delivers enterprise-level security protection through advanced HTTP security headers – the same technology used by Fortune 500 companies to protect their websites. No technical expertise required. 🎯 Why Security Headers Matter: Security headers are your website’s first line of defense, instructing browsers on how to handle your content safely. Without them, your site is vulnerable to: • Cross-Site Scripting (XSS) attacks – 87% of websites are vulnerable • Clickjacking attacks that steal user credentials • Data theft through insecure connections • Privacy violations through referrer leaks • Malicious code injection ✨ What Makes BaseCloud Different: 🚀 One-Click Protection – Enable military-grade security with a single click 🔒 Zero Configuration Required – Smart defaults protect you instantly ⚡ Lightning Fast – No performance impact on your site 🎛️ Full Control – Advanced users can customize every setting 🛠️ Developer Friendly – Clean, well-documented code 🔧 No Server Changes – Works on any hosting provider 🛡️ Complete Security Arsenal: 🎯 Master Security Switch Enable all protections instantly – perfect for non-technical users who want maximum security without complexity. 🔐 Force SSL/HTTPS Everywhere Automatically redirect all HTTP traffic to HTTPS, ensuring all data transmission is encrypted. Protects against man-in-the-middle attacks. 🛡️ Content Security Policy (CSP) The gold standard of XSS protection. Controls exactly which scripts, styles, and resources can run on your site. Includes smart defaults that work with 99% of WordPress themes and plugins. 🔒 HTTP Strict Transport Security (HSTS) Forces browsers to communicate exclusively over HTTPS, preventing SSL stripping attacks. Includes preload support for maximum protection. 🕵️ Advanced Referrer Policy Protects user privacy by controlling what information is shared when visitors click links, preventing data leaks to third parties. 🎤 Permissions Policy (Feature Policy) Block unauthorized access to sensitive browser features like camera, microphone, geolocation, and payment APIs – preventing malicious sites from accessing these features. 🍪 Secure Cookie Protection Automatically applies HttpOnly and Secure flags to session cookies, preventing JavaScript access and ensuring cookies are only sent over HTTPS. 👻 Server Fingerprinting Protection Removes server signatures and version information that hackers use to identify vulnerabilities in your hosting setup. ⚡ Essential Security Headers Included: • X-Frame-Options: SAMEORIGIN (prevents clickjacking) • X-Content-Type-Options: nosniff (prevents MIME-type confusion attacks) • X-XSS-Protection: 1; mode=block (legacy XSS protection for older browsers) 💼 Perfect For: • Business owners who want enterprise security without technical complexity • Developers building secure WordPress applications • Agencies managing multiple client sites • Anyone serious about website security 🎯 Use Cases: • E-commerce sites handling sensitive customer data • Membership sites with user logins • Business websites with contact forms • Blogs that want to protect visitor privacy • Development sites that need security during testing BaseCloud Security Manager is lightweight, efficient, and designed to integrate seamlessly into your WordPress admin experience without clutter or intrusive advertising. Additional Information 🎯 Why Choose BaseCloud Security Manager? ✅ Instant Protection – Works immediately after activation ✅ Zero Learning Curve – No technical knowledge required ✅ Enterprise Grade – Same technology used by Fortune 500 companies ✅ Fully Customizable – Advanced users have complete control ✅ Regular Updates – Stay protected against emerging threats ✅ Expert Support – Professional team ready to help 🔗 Useful Links: • Documentation: BaseCloud Security Docs • Support: [email protected] • Security Testing: Mozilla Observatory • Header Verification: SecurityHeaders.com 🤝 Join Our Community: Connect with other security-conscious WordPress users, get tips, and stay updated on the latest security trends. ⭐ Love BaseCloud Security Manager? Help others discover enterprise-grade security by leaving a review. Your feedback helps us improve and helps other users make informed decisions about their website security. Made with ❤️ by the BaseCloud Team – Securing WordPress sites worldwide since 2024