FixSeal – Visual Feedback & Bug Reporter vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

FixSeal is the easiest way to collect visual feedback and bug reports from WordPress site owners and clients. A floating button appears on your site. Click it, draw a box over any problem area, describe the issue, and submit — your developer or agency gets a rich, actionable notification instantly. No back-and-forth emails. No vague “the site is broken” messages. Whether you’re a freelancer managing client sites, an agency running dozens of WordPress installs, or a site owner who wants a direct line to your developer, FixSeal turns visual feedback into structured fix requests your team can act on immediately. Visual User Feedback & Bug Reporting Draw a selection box over any element on the page — no guessing where the issue is 4 request types: Fix a Bug, Improve This, Add Something, Security Concern Urgency levels: Whenever / This Week / URGENT File upload: images, video, PDF — up to 10 MB Built-in screen recording via browser MediaRecorder API Auto-captures full site context: page URL, browser, device, viewport, PHP version, active theme, WordPress version All reports saved as private posts in WordPress admin — no external database Fix Request Management Fix Requests dashboard — every submission in one place with full context Rich HTML email notification with screenshot preview, browser info, and site details Submitter receives an instant confirmation email Reply-to is set to the submitter so you can reply directly from your inbox Filter, search, and track status of every request Site Health Monitoring Automatic background checks every 6 hours via WP-Cron Monitors: SSL certificate, PHP errors, site speed, WordPress core updates, form health, Elementor status Email alerts when a check changes from OK to warning or critical Status overview on the FixSeal dashboard Broken Links & 301 Redirects Automatic 404 error logging with URL, referrer, and hit count Set 301 redirects directly from the admin — no .htaccess editing needed Admin debug bar on 404 pages (visible to admins only) Site Tools Cache Manager — purge cache from W3 Total Cache, WP Rocket, LiteSpeed Cache, WP Super Cache, Autoptimize One-Click Quick Fixes — clear Elementor CSS cache, flush permalinks, reset Gravity Forms locks, clear transients WP-Cron Inspector — view upcoming scheduled jobs, spot overdue or stuck events Fix Report — email a professional site health summary to yourself or your client Server Environment — PHP version, memory limit, WP_DEBUG status, file editor state Email Delivery (Free) Default WordPress mail (wp_mail) — zero configuration needed Custom SMTP — use your own mail server with no external account required Optional Pro / Agency add-ons Separate add-on plugins and services are available at fixseal.dmitru.com. They are not required for this WordPress.org plugin to work. FixSeal Pro add-on — Mailgun and SendGrid delivery, project-management integrations, webhooks, and ticket push workflows FixSeal Agency add-on — white-label overlay branding, booking CTAs, central client reporting, and multi-site workflow tools Developer-Friendly Zero frontend dependencies — vanilla JS, no jQuery, no React Scoped CSS — no conflicts with Elementor, Divi, Beaver Builder, or the block editor Small JS payload, loads asynchronously Multisite compatible FixSeal is built for WordPress developers, freelancers, and agencies who want a professional, self-hosted alternative to tools like UserFeedback, BugHerd, and Marker.io. The WordPress.org plugin works without a subscription, without sending client data to third parties, and without complexity. Pro & Agency Add-ons The free plugin on WordPress.org is fully functional and includes all core features. For API email delivery, integrations, and agency white-labeling, separate add-on plugins are available at fixseal.dmitru.com. FixSeal Pro add-on adds: Advanced mail-provider adapters and delivery diagnostics Jira, Linear, GitHub Issues, Teamwork, and webhook integrations Automatic and manual ticket push workflows FixSeal Agency add-on adds: White-label overlay branding Booking CTAs in the feedback popup Central client reporting and multi-site workflow tools The add-ons are installed separately and extend this plugin through WordPress hooks. No feature in the WordPress.org plugin requires a license key. External Services FixSeal does not send data to third-party services by default. The core plugin stores bug reports in WordPress and sends email using WordPress mail or the SMTP server configured by the site administrator. Custom SMTP This plugin can optionally send notification and confirmation emails through a custom SMTP server configured by the site administrator. Data sent through the configured SMTP server: – Email recipient and sender addresses – Email subject and message body – Bug report title, description, metadata, and links to uploaded files when included in the email No email is sent through a custom SMTP server unless the administrator selects Custom SMTP and saves SMTP credentials in the plugin settings. The SMTP service is chosen by the site administrator and is governed by that provider’s terms and privacy policy. Teamwork This WordPress.org plugin does not contact Teamwork by itself. A separately installed FixSeal add-on can optionally integrate with Teamwork (teamwork.com) to allow bug reports to be sent directly to a Teamwork project as tasks, with optional file attachments. This integration is only active when the site administrator installs the add-on and explicitly configures Teamwork credentials in the add-on settings. It is never triggered automatically by this WordPress.org plugin. Data sent to Teamwork by the separate add-on: – Bug report title, description, and metadata (when creating a task) – Screenshot or attachment files (when file upload is enabled) – Teamwork account credentials (API key and site URL, used for authentication) No data is sent unless the add-on is installed, the integration is configured, and a bug report is submitted. Teamwork Terms of Service: https://www.teamwork.com/legal/terms-of-service/ Teamwork Privacy Policy: https://www.teamwork.com/legal/privacy-notice/

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!