Falcon – Cache, Performance, Security, Cleanup, and Tweaks vs Feature Flipper

Falcon is a lightweight WordPress plugin that helps you speed up your site, harden security, clean up bloat, and fine-tune how WordPress works — without a heavy stack of separate tools. Toggle only what you need from a clear settings UI. Export and import settings to reuse the same setup across sites. Features Performance Make pages load faster and cut unnecessary front-end work. HTML page cache — serve static HTML and skip WordPress, themes, and plugins on cache hits Disable Heartbeat to reduce server load Remove ?ver= query strings from CSS/JS for better browser caching Disable emoji scripts and styles Remove jQuery Migrate on the front end Load selected CSS files asynchronously to reduce render-blocking Security Reduce common attack surfaces and protect your content. Limit login attempts (block an IP after 3 failed tries for 1 hour) Hide detailed login error messages Force login to view the site Disable the REST API for unauthenticated requests Disable XML-RPC Restrict upload file types (including WebP and AVIF when enabled) Comment spam protection with a simple honeypot Block common AI crawlers via robots.txt Use scheme-less asset URLs to avoid mixed content warnings Cleanup Strip unused markup and keep the database lean. Header Hide WordPress version Remove shortlink, REST API link, adjacent posts links, feed links, RSD link, and WLW manifest link Admin Use the site icon on the login screen Hide update nags Remove default dashboard widgets Remove admin footer text and the WordPress admin bar logo Frontend Disable embeds Clean up menu item classes and IDs Remove Recent Comments widget CSS Database Clean revisions, auto drafts, trashed posts, spam/trashed comments, expired transients, orphaned meta, unused terms, and optimize tables Content Control the editor, comments, media, and publishing behavior. Editor Disable the block editor (Gutenberg) and use the classic editor Disable post revisions Disable texturize (smart quotes and auto formatting) Comments Disable comments site-wide Remove the website field from the comment form Media Disable thumbnail generation Disable big image scaling Disable EXIF-based image rotation Publishing Limit front-end search to posts only Disable self pingbacks System Site-wide controls for maintenance and WordPress internals. Maintenance mode (customize the message with maintenance.php in the active theme) Block external HTTP requests Disable application passwords Disable auto-updates Disable WP-Cron (use a real server cron instead) Remove privacy tools from the admin menu Email Cut noisy notifications and send mail reliably. Notifications Disable admin email verification prompts Disable update notification emails Disable new user emails to admins Disable password change/reset emails Delivery Change the default from name and email address Send WordPress email via SMTP You might also like If you like this plugin, you might also like our other WordPress products: Meta Box – A powerful WordPress plugin for creating custom post types and custom fields. Slim SEO – A fast, lightweight and full-featured SEO plugin for WordPress with minimal configuration. GretaThemes – Free and premium WordPress themes that clean, simple and just work. Auto Listings – A car sale and dealership plugin for WordPress.

This plugin gives you the ability to manage core WordPress features like Comments, the Block Editor (Gutenberg), Emojis, XML-RPC, Feeds, Updates, Automatic Updates, Cron, Heartbeat, and more. If you don’t need certain features, you can easily toggle them off or customize their behavior. It also includes additional utility features, like showing your site’s environment type in the admin bar, enabling maintenance or private mode, or using random URLs for media pages, which you can enable or disable as needed. Features This plugin organizes these settings into sections so you can quickly find and manage what you need: General Tweak key WordPress features to fit your needs: Block Editor: Prefer the Classic Editor? Disable the Block Editor for all or specific post types. Block-based Widgets: Turn off the “Block Widgets Editor”. Comments: Disable comments and remove related elements in the admin area. Revisions: Disable or limit the number of post revisions to save to improve performance. Post Embed: Stop other sites from embedding your post content. Self-ping: Prevent pingbacks to your own site. Feeds: Disable RSS feeds if you don’t need them. Admin Customize your admin experience: Dashboard Widgets: Remove unwanted or all dashboard widgets. Footer Text: Get rid of the Thank you for creating with WordPress footer text. Update Nags: Hide update notices for WordPress, plugins, and themes. Admin Bar: Remove the admin bar on your site’s front end. Howdy Text: Replace the Howdy greeting in the admin bar. Environment Type: Display site’s environment type (e.g. Development, Staging, Production) in the admin bar. Media Adjust media-related settings: Attachment Page: Disable attachment pages or re-enable them on WordPress 6.4+. Attachment Slug: Use random URLs for media pages to avoid slug conflicts. Infinite Scroll: Restore infinite scroll in the Media Library. Big Image Size: Prevent WordPress to scale down big images. Image Quality: Adjust the quality of uploaded images (JPEG only). Site Control access and assets on your site: Search: Prevent use from using search on your site to find posts, pages, and other content. Sitemap: Disable built-in XML sitemaps in WordPress. Unload some of the assets that are not always necessary for your site: Emojis: Improve performance by removing emoji scripts and styles. Script Version: Remove version query strings from scripts and styles URLs. jQuery Migrate: Disable jQuery Migrate if it’s not needed. Clean-up some unused metadata from your site: RSD Link: Remove the Really Simple Discovery (RSD) tag. Generator Meta Tag: Remove the WordPress version meta tag. Shortlink: Remove the shortlink meta tag. Security Improve your site’s security by disabling or limiting access to certain features: File Edit: Disable the built-in file editor for themes and plugins. XML-RPC: Disable the XML-RPC endpoint. API Authentication: Require authentication for all REST API requests. Manage passwords policy on the site: Reset Password: Prevent users from resetting their passwords. Application Passwords: Disable Application Passwords and remove related UI elements. Advanced For advanced users, you may configure these following features, but do it carefully: Mailing: Prevent WordPress to send outgoing mail. Updates: Enable or disable updates for WordPress, plugins, and themes. Cron: Disable WP-Cron and use a real cron job. Heartbeat: Adjust or disable the Heartbeat API to reduce resource usage.