Basic Optimization vs GhostGate

Basic Optimization provides simple on/off controls for common WordPress cleanup and performance-related tweaks. It is intentionally small, dependency-free, and designed for site owners who want practical optimization controls without a large performance suite. The plugin adds a Basic Optimization admin screen where administrators can enable or disable each feature independently. It also includes a child Email Notifications settings page for disabling selected WordPress core auto emails. Basic Optimization supports regular single-site WordPress installs and WordPress Multisite. On multisite, when the plugin is network activated, Super Admins configure the plugin only from Network Admin and all sites use the network settings. Features Multisite Support – Adds Network Admin settings pages and stores network-wide settings with WordPress network options. Network-Only Mode – When network activated, subsite admin pages are not added and every site uses the Network Admin settings. Disable Emojis – Removes WordPress emoji scripts, styles, filters, and emoji DNS prefetch output. Remove Shortlink – Removes the shortlink tag from the document head. Remove CSS/JS Version – Removes the ver query argument from enqueued stylesheet and script URLs. Remove RSD Links – Removes the Really Simple Discovery link from the document head. Disable Embeds – Removes WordPress oEmbed discovery links and dequeues the default wp-embed frontend script. Disable XML-RPC – Disables XML-RPC requests and removes the X-Pingback response header. Remove WLW Manifest Link – Removes the Windows Live Writer manifest link from the document head. Disable Self Pingback – Prevents self pingbacks when content links to the same site. Hide WordPress Version – Removes the WordPress generator meta tag from the document head. Disable Heartbeat – Deregisters the WordPress heartbeat script on the frontend. Email Notifications – Adds dropdown controls to disable selected WordPress core auto emails, including new user registration, password changed, comment moderation, and automatically approved comment notifications. Multisite Behavior On a multisite network, the plugin can be network activated. When network activated, only the Network Admin settings pages are shown. Subsite admin pages are not added, and all sites use the network-level settings. Network settings are available under Network Admin > Basic Optimization. Subsite dashboards do not receive a Basic Optimization admin menu while the plugin is network activated. Notes Some features can affect integrations that rely on WordPress defaults. For example, disabling XML-RPC can affect external publishing clients and services that still depend on XML-RPC. Disabling auto emails can also affect administrator awareness of user and comment activity. Disable only the features that match your site requirements.

GhostGate is a lightweight yet powerful WordPress security plugin that eliminates the login page as an attack surface. Instead of just defending, it erases the entrance entirely with dynamic login URLs and multi-layer access verification. 🔒 Hide your login URL with a custom slug and time-based code 🔑 Built-in 2FA via email verification 🚫 Auto-block brute force attacks by IP 🧱 Disable/limit unused endpoints like XML-RPC and REST API 👤 Prevent user enumeration via REST, RSS, and author queries 🔍 Visualize security status and detect conflicts 📜 Activity logs with optional file rotation GhostGate doesn’t just defend — it disappears. Invisible to bots. Intuitive for users. 👉 Full features / screenshots / pricing / docs: https://arce-experience.com/product/ Privacy GhostGate can store the following data locally on your site to provide rate-limiting and security auditing: – IP addresses (for temporary throttling / block lists) – Timestamps and event metadata (login attempts, REST/XML-RPC hits) – Optional log files under wp-content/uploads/ghostgate/logs (if enabled) No data is sent to third-party services. Site owners are responsible for informing users/visitors where required by local laws. You can clear blocks/logs from the admin UI or by deleting the log files.