GT Link Manager vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

GT Link Manager is a 100% free high-performance branded link manager for WordPress — no upsells, no premium tiers, no paywalls. It stores links in custom database tables (not custom post types), resolves redirects early on init, and keeps your site fast — even with thousands of links. Your links follow a clean URL pattern: yoursite.com/go/your-slug (the prefix is configurable and can even be removed on individual links). Official Page & Documentation | Free Training Course | REST API & AI Tools Guide Why GT Link Manager? Most link management plugins use custom post types, which means every redirect loads the full WordPress template stack. GT Link Manager takes a different approach — it intercepts the request early, looks up the slug in a UNIQUE-indexed database column, sends the redirect header, and exits. No theme loading, no unnecessary queries. Key Features Fast direct redirects — resolves links on init (priority 0) via direct DB lookup, no CPT overhead 301, 302, and 307 redirects — choose the right redirect type for SEO, temporary, or method-preserving redirects Rel attribute controls — set nofollow, sponsored, and ugc per link for proper SEO attribution Noindex support — sends X-Robots-Tag: noindex header to prevent search engines from indexing redirect URLs Categories and tags — organize links into categories with parent/child hierarchy and free-form tags Full admin list table — search, filter by category/status, sort by any column, and perform bulk actions Quick Edit — update URL, slug, redirect type, rel, category, and status inline without leaving the list Activate / Deactivate — disable a link without deleting it; inactive links stop redirecting but stay in the database Trash and restore — soft-delete links to trash with the option to restore or permanently delete CSV import and export — import links from CSV with column mapping preview, or export filtered links; includes LinkCentral and Pretty Links compatible presets, supports any CSV though as it allows you to map fields manually. Block editor integration — a toolbar button lets you search your links and insert them directly into post content Branded URL preview — see the full branded URL as you type, with one-click copy Normal and Regex Redirects supported too. Don’t want to use a prefix like /go/ ? Sure thing. Use the GT Link Manager as an alternative to Rank Math Redirections, Yoast Redirects, Redirection plugin etc. Tested to be faster than these top tools. Geolocation targeting — send visitors from different countries to different destinations on a per-link basis (e.g. India to amazon.in, the US to amazon.com). The country comes from the header your CDN already sends — Cloudflare, CloudFront, Vercel, App Engine, or an nginx/Apache GeoIP module — so there is no GeoIP database to install, no external API call, and no added latency. Adds roughly 20 microseconds to a geo-enabled redirect and nothing measurable to the rest. Click tracking — log clicks via the gtlm_before_redirect hook; integrate with GA4, Plausible, Fathom, and more Developer-friendly — actions and filters for redirect interception, URL modification, capability control, cache TTL, and more Developer Hooks GT Link Manager provides a comprehensive set of hooks for customization: gtlm_before_redirect — action fired before redirect (use for click tracking or logging) gtlm_redirect_url — filter to modify the destination URL gtlm_redirect_code — filter to modify the HTTP status code gtlm_rel_attributes — filter to modify rel attribute values gtlm_headers — filter to modify redirect response headers gtlm_prefix — filter to override the URL prefix gtlm_capabilities — filter to override the required user capability gtlm_cache_ttl — filter to set object cache TTL for link lookups gtlm_geo_country — filter the detected country code (plug in any detection method you like) gtlm_geo_sources — filter the list of request variables checked for a country gtlm_geo_country_groups — filter country groups usable in rules (ships with EU) gtlm_geo_matched_rule — filter the resolved geo rule before the redirect is sent gtlm_geo_blocked — action fired when a visitor is blocked by a geo rule’s 404 fallback Free Training Course The GT Link Manager Training is a free 25-lesson course (under 2 hours) covering everything from installation to advanced developer integrations: Getting Started — installation, admin interface, link creation, categories, and redirect configuration Configuration & Features — settings, redirect mechanics, block editor integration, and bulk import/export Developer Reference — REST API, hooks and filters, analytics integrations, webhooks, and advanced redirects Analytics & Advanced Integrations The Developer Reference includes step-by-step integration guides for: Analytics — Google Analytics 4 (GA4), Plausible Analytics, Fathom Analytics, Matomo, and Simple Analytics Tracking — custom click logging to a database table, dashboard widget, and UTM parameter passthrough Automation — webhook notifications for Zapier, Make, and n8n Advanced redirects — role-based redirects (route by user role) and geo-based redirects (route by location) Customization — custom response headers, hooks and filters reference REST API & AI Tools GT Link Manager has a full REST API that works with AI tools for programmatic link management. The REST API & AI Tools Guide covers authentication setup, all available endpoints, and integration with AI platforms including Claude Code, OpenAI Codex, WP-MCP, Novamira, Claudeus WordPress MCP, and WordPress MCP Adapter. Source Code The block editor assets (blocks/link-inserter/build/) are compiled from the source at blocks/link-inserter/src/ using @wordpress/scripts. The full source code is available in this plugin and on GitHub at https://github.com/wpgaurav/gt-link-manager. To build from source: cd blocks/link-inserter && npm install && npm run build

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!