Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) vs Virfice –

Virfice is a self-hosted email marketing and automation plugin for WordPress and WooCommerce. Create newsletters, send targeted email campaigns, capture and manage subscribers, build automated workflows, customize transactional emails, and track campaign performance—all from your WordPress dashboard. Unlike subscriber-based email marketing platforms, Virfice keeps your contacts and campaign data on your own WordPress site. There is no per-contact pricing or artificial subscriber limit. Connect your preferred SMTP provider and retain control of your audience, sending infrastructure, and email marketing data. Get Virfice Pro | Documentation | Support What Can You Do with Virfice? 🎨 Create and send targeted email marketing campaigns 🧲 Capture subscribers with customizable signup forms 🗂️ Organize and segment contacts using lists, tags, and custom fields 🔍 Target audiences with include/exclude filters ⏰ Send campaigns instantly or schedule them for later 🔁 Resend campaigns to non-openers 🤖 Automate emails based on WordPress and WooCommerce events 🛒 Recover abandoned carts with automated follow-up emails 👋 Create welcome, birthday, post-purchase, and customer-engagement workflows 🛍️ Send WooCommerce-triggered emails based on purchases, carts, and customer actions 🧾 Customize and fully brand WooCommerce transactional emails 📧 Customize WordPress system emails 📦 Design emails using ready-made templates and reusable content blocks 📊 Track deliveries, opens, clicks, bounces, and failures ✉️ Connect, configure, and test your preferred SMTP provider—no additional SMTP plugin required A complete Self-Hosted Email Marketing Solution for WordPress Virfice brings email marketing into WordPress, giving you direct control over your audience and campaign data. Your contacts remain on your website instead of being locked inside a third-party email marketing platform. No per-subscriber or per-contact pricing. No artificial limit on the number of contacts you can manage. Send through your preferred SMTP or email delivery provider. Keep your audience, campaigns, and marketing data in WordPress. Manage newsletters, automations, forms, and transactional emails from one dashboard. Your practical sending volume, deliverability, and sending costs depend on your hosting environment and chosen email delivery provider. WordPress Newsletters and Email Campaigns Create, design, schedule, and send newsletters without leaving WordPress. Use the visual email builder and ready-made templates for product updates, company news, offers, announcements, and regular subscriber newsletters. Target the right audience using lists and tags, include or exclude specific subscriber groups, personalize email content, send immediately or schedule campaigns, and resend campaigns to contacts who did not open the original email. Visual Email Builder Create professional, responsive emails with a visual builder built directly into WordPress. Add and arrange content, personalize messages, apply global brand styles, and reuse sections to design faster while keeping your emails consistent. Visual email-building experience. Reusable ready blocks and content sections. Professionally designed email templates. Responsive email layouts. Brand-wide header, footer, colors, and styles. Dynamic placeholders for personalized content. Email preview and test-email options. Audience and Subscriber Management Manage your email marketing audience directly inside WordPress. Add and update contacts manually. Import contacts from CSV files. Export audience data. Organize contacts with lists and tags. Store custom contact fields. Include or exclude audience groups from campaigns. View and edit individual contact information. Manage subscription and unsubscribe status. Email Marketing Automation Build event-based email automation workflows using triggers, conditions, delays, and actions. Automatically welcome subscribers, engage WordPress users, follow up with customers, recover abandoned carts, and deliver timely messages based on activity across your website. Available Automation Triggers Forms Form Submitted Users & Customers New Signup User Birthday User Logged In WooCommerce Order Created Order Paid Order Processing Order Completed Order Cancelled Order On Hold Order Refunded Order Pending Payment Customer Account Created Cart Abandoned Use these triggers to create welcome emails, birthday emails, order follow-ups, post-purchase sequences, payment reminders, customer onboarding, cart-recovery campaigns, and other WordPress and WooCommerce email automations. Abandoned Cart Recovery for WooCommerce Recover potential sales with automated abandoned-cart emails. Virfice can initiate a workflow when a registered or guest customer’s cart becomes abandoned, allowing you to send timely reminders and guide the shopper back to checkout. When an abandoned cart is purchased or emptied, its queued recovery workflow is cleared automatically, helping prevent unnecessary follow-up emails. Lead Capture Forms Grow your email list with customizable, mobile-friendly signup forms—without installing a separate form plugin. Capture leads directly in WordPress, collect custom information, and connect form submissions to your email marketing automations. Email Analytics and Tracking Track campaign delivery, opens, clicks, bounces, and failures from a centralized dashboard. Review campaign performance, understand subscriber engagement, and use the results to improve future newsletters and email campaigns. Open and click tracking can be affected by recipient privacy features, email-client behavior, and other technical factors. WordPress and WooCommerce Transactional Emails Design and manage supported WordPress system emails and WooCommerce transactional emails from one visual interface. Apply your branding, customize the content, preview the result, and send test emails before using a design on your store. Supported Emails New Account Email – Welcome customers or WordPress users after account creation. Reset Password Email – Customize password-reset messages. New Order Email – Notify the store administrator when a new order is placed. Cancelled Order Email – Notify the store administrator when an order is cancelled. Failed Order Email – Notify the store administrator when an order fails. Order On Hold Email – Update customers when an order is placed on hold. Order Processing Email – Notify customers when an order is paid and processing. Order Completed Email – Notify customers when an order is completed. Order Refunded Email – Inform customers when an order is refunded. Customer Invoice Email – Send order details and payment links when applicable. Customer Note Email – Send notes added to a customer’s order. Built-In SMTP Configuration Connect your preferred SMTP service directly inside Virfice. Configure authentication, send a test email, and manage email delivery without installing an additional SMTP plugin. Virfice does not operate an email delivery network. Actual delivery is handled by your configured SMTP or email service provider. Virfice Free and Virfice Pro Virfice Free includes the core tools available in the plugin downloaded from WordPress.org. Virfice Pro extends the platform with additional email marketing, automation, WooCommerce, and audience-management capabilities. Feature availability may vary by plan and version. Visit the Virfice website for the current feature comparison. How to Use Virfice No coding or advanced technical knowledge is required. Install and activate Virfice. Open Virfice from your WordPress dashboard. Configure your sender information and preferred SMTP provider. Import or capture contacts and organize them with lists and tags. Design a newsletter, create a campaign, customize a transactional email, or build an automation workflow. Send a test email, review your settings, and activate or schedule your email.

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!