Nexter Extension – Security, Performance, Code Snippets & Site Toolkit vs Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)

Most WordPress sites run 20–40 plugins. That means 20–40 things that slow your site, conflict with each other, and need updating every week. Nexter Extension fixes that. One plugin. 50+ features. Every module is toggle on/off — nothing loads unless you need it. Pure Vanilla JS, zero jQuery. It’s the one WordPress plugin that handles your SEO, security, performance, email delivery, theme design, code management, and admin cleanup — all in one place, completely free to start. 👉 Website | All Features | Nexter SEO | Free vs Pro | Pricing | Docs | Roadmap | Support | Premium Support | AI Chat 🔍 Nexter SEO — Built-In WordPress SEO, Schema & AI Search Handle your on-page SEO, schema, XML sitemaps, redirects, and AI search from one plugin. Nexter SEO is a complete, lightweight WordPress SEO toolkit built into Nexter Extension — drop your standalone SEO plugin, with no extra page weight and no plugin conflicts. 100% free. SEO Site Audit — Scan your site for on-page and technical issues, with a 0-100 health score and a prioritized list of top fixes. Meta Title & Description Templates — Set site-wide title and meta description templates with dynamic variables and a live Google search preview. Social / Open Graph — Control how your pages look when shared, with a default share image and Facebook and X (Twitter) cards. Schema Builder — Add 18 structured-data types (Article, Product, FAQ Page, How-To, Local Business, Event, Recipe, Video, and more) with dynamic variables and display conditions. No code. XML Sitemaps — Generate XML sitemaps, plus optional image, video, news, and HTML sitemaps, with exclude lists. Robots & Robots.txt Editor — Set per-type index, follow, and archive rules and edit your virtual robots.txt right from the dashboard. Instant Indexing (IndexNow) — Push new and updated URLs to search engines that support IndexNow instantly, automatically or in bulk. LLMs.txt for AI Search — Generate an LLMs.txt file so AI engines like ChatGPT, Perplexity, and Google AI can find and cite your content. Site Verification — Verify your site with Google, Bing, Pinterest, and Facebook in one place. Redirects & 404 Monitor — Create 301, 302, and other redirects with flexible matching, and log broken URLs to fix. Image SEO — Add automatic alt text from the filename or title (no AI needed) and redirect attachment pages to their parent post. Import / Export — Move your entire SEO configuration between sites with a single JSON file. 🏗️ Theme Builder — Free for Elementor & Gutenberg Build custom headers, footers, 404 pages, single post templates, and archive pages using Elementor widgets or Gutenberg blocks — completely free, no premium page builder needed. Works with Astra, Hello Elementor, GeneratePress, Kadence, Blocksy, OceanWP, Neve, and Bricks Builder. Header Builder — Design sticky, transparent, or conditional headers with full page builder control. No coding. Footer Builder — Build any footer layout — multi-column, widgets, blocks — no template limits. Breadcrumbs Bar — SEO-structured breadcrumb navigation with full design control. 404 Page Builder — Custom-designed 404 pages that keep visitors on your site instead of bouncing. Single Post & Archive Templates — Unique layouts per post type, category, tag, or custom post type. Display Conditions — Show/hide templates by page, user role, device, login status, and 50+ more conditions (Pro). 💻 Code Snippets — PHP, CSS, JS & HTML Manager Add custom PHP, CSS, JavaScript, and HTML to WordPress without touching functions.php or creating a child theme. All snippets run as static files — zero extra database queries, faster than other WordPress code snippets plugins. PHP, HTML, CSS & JS Snippets — Manage all four code types with live syntax validation. Auto crash-protection stops bad code from breaking your site. File-Based Execution — Snippets compile to static files, not database queries — a speed advantage over traditional code manager plugins. 22+ Conditional Load Rules — Load code only on specific pages, post types, user roles, devices, WooCommerce pages, EDD, or MemberPress. Scheduling (Pro) — Set start/end dates for any snippet. Perfect for seasonal banners and timed scripts. Smart Placement (Pro) — Inject code before/after specific HTML elements, after X words, at a content percentage, or via shortcode. Import / Export & Tagging — Move snippets between sites in one click. Tag and annotate your whole snippet library. 🖼️ Image Optimizer — WebP, AVIF & Bulk Compress A fully built-in wordpress image optimizer — convert, compress, and bulk-optimize images without any API key, external account, or monthly subscription. Everything runs on your own server. WebP Conversion — Auto-convert JPG/PNG uploads to WebP. Up to 35% smaller files, zero quality loss. AVIF Support — Next-gen format, up to 50% smaller than JPEG. Built-in AVIF conversion at no extra cost. Bulk Image Compression — Compress your entire media library in one go. No image-by-image processing. Auto Resize on Upload — Automatically shrink oversized images on upload and delete the original to save disk space. No API Key. No Account. No Monthly Fee. — Enable the module, and it just works. ⚡ WordPress Performance & Page Speed Optimization Granular WordPress speed optimization toggles — disable only what your site doesn’t need. No all-or-nothing switches that break things. Disable Bloat Scripts — Individual toggles for Emoji scripts, Embeds, Dashicons, Pingbacks, Feed Links, Shortlink tag, and more — each one separate. Defer CSS & JS — Defer non-critical stylesheets and scripts to improve First Contentful Paint and page load scores. Self-Host Google Fonts — Host Google Fonts on your own server. Eliminates the external Google request and makes your site GDPR-compliant. Heartbeat Control — Throttle or disable the WordPress Heartbeat API — a common cause of high CPU on shared hosting. Revision Control — Cap post revisions to prevent database bloat on content-heavy sites. Disable Comments — Turn off WordPress comments site-wide or per post type. Removes all comment scripts from page output. Disable Unused Image Sizes & Elementor Icons — Stop generating thumbnails and loading Font Awesome on pages that don’t use them. 🔒 WordPress Security Plugin — Hardening, Login Protection & More A layered WordPress security plugin with individual on/off toggles. Covers the most-used hardening and login protection features without adding a heavy security daemon to every page load. Security Hardening — Disable XML-RPC, hide WP version, remove REST API head links, block file editor, add XSS headers, and more — each as a separate toggle. Limit Login Attempts (Freemium) — Block brute-force attacks by locking out IPs after failed logins. No separate brute force protection plugin needed. CAPTCHA Spam Protection — Add Google reCAPTCHA v2/v3 or Cloudflare Turnstile to login, registration, comments, password reset, and WooCommerce checkout. Two-Factor Authentication (2FA) (Pro) — Email-based two-step verification with role-based enforcement. Replaces standalone two factor authentication plugins. Change WP Admin Login URL — Move your login page from the default wp-login.php to a custom URL. Stops automated bot scanning cold. Login Email Notifications (Pro) — Get alerted by email on every login with role-based filters and custom email content. Content Protection (Pro) — Disable right-click, text selection, image drag, copy-paste, and developer console access. SVG Upload — Let trusted roles upload SVG files with automatic sanitization. Clean icon uploads, no malicious payload risk. Last Login & Registration Tracking — See the last login date and registration date of every user right in the Users table. 📧 WordPress SMTP Email Fix WordPress emails going to spam in minutes. The built-in WordPress smtp plugin routes your contact forms, order notifications, and password resets through a real mail provider — so they actually arrive. Gmail SMTP — Connect Google Workspace or Gmail via OAuth or App Password. Mailgun, SendGrid & Custom SMTP — Works with any provider: Brevo, Amazon SES, Postmark, Mailchimp Mandrill, or your host’s SMTP. Test Email Tool — Send a test email from inside the settings panel to confirm delivery before you go live. 🔧 WordPress Utilities — Replace a Dozen Single-Use Plugins Custom Font Uploads — Upload TTF, WOFF, WOFF2 and variable fonts. Apply in any page builder without a separate WordPress custom fonts plugin. Adobe Fonts Integration — Connect your Adobe Creative Cloud via Project ID and load any Typekit font in WordPress. Redirect 404 (Freemium) — Auto-redirect all broken 404 pages to your homepage (Free) or any custom URL (Pro). Post & Page Duplication — Clone any post or page with full layout and metadata preserved. No separate post duplicator plugin needed. Bulk Text & URL Replacement — Find and replace any string across your entire database in one click. Essential after domain migrations. Thumbnail Regeneration — Regenerate all image thumbnails after changing image sizes. No extra plugin. Rollback Manager — Downgrade any plugin to a previous version instantly if a new update causes conflicts. Admin Role Switcher — Switch between any WordPress user role without logging out. Perfect for testing permissions. Disable Gutenberg — Restore Classic Editor on specific post types without an extra plugin. WP Debug Mode — Toggle WP_DEBUG on/off from your dashboard. No wp-config.php editing. Content Post Order — Drag-and-drop reorder posts and pages. No code, no custom fields. Public Preview for Drafts (Pro) — Share a preview link for any unpublished post without requiring a login. Replace Media (Pro) — Swap any file without changing its URL or breaking existing links. Taxonomy Term Order (Pro) — Drag-and-drop reorder categories, tags, and custom taxonomies on the frontend. 🎨 WordPress Admin Customization & Dashboard Cleanup Branded Admin Interface / White Label WordPress (Pro) — Replace the WordPress login page with your agency logo and colors. Full white-label WordPress admin for client sites. Admin Menu Organizer (Pro) — Reorder, rename, or hide sidebar menu items per user role. Show clients only what they need. Elementor Ad-Free — Hide all Elementor upgrade banners, AI popups, and upsell buttons from the editor. Clean workspace, focused editing. Clean Admin Bar — Remove any item from the WordPress toolbar: WP logo, site name, comments counter, Howdy greeting, plugin nodes, and more — each as a separate toggle. Disable Admin Notices & Dashboard Widgets — Hide update nags, plugin notices, At a Glance, Quick Draft, WooCommerce setup panel, and the WordPress Events feed — individually. Wider Admin Menu — Expand the sidebar so long menu labels display fully without truncation. Display Active Plugins First (Pro) — Pin active plugins to the top of the plugins list for faster access. User Profile Clean (Pro) — Remove unnecessary fields from user profiles for a cleaner client-facing backend. 🔁 Import / Export Settings Export your full WordPress Customizer configuration and all Nexter Extension settings to a file — then import on any site instantly. Zero re-configuration for agencies managing multiple client sites. ⚡ Upgrade to Nexter Extension Pro → 🏆 Our Other WordPress Products The Plus Addons for Elementor — 120+ Elementor widgets. Pairs perfectly with Nexter Extension’s free Theme Builder. Nexter Blocks — 90+ Gutenberg blocks. Zero jQuery. Built for speed. NexterWP Theme — Lightest, fastest starter theme for Elementor and Gutenberg. No jQuery. UiChemy – Figma to WordPress — Convert Figma designs into live Elementor pages with a free Figma plugin. WDesignKit — 1000+ WordPress templates, widget builder, block converter, and cloud storage. External services Nexter Extension may connect to external services below only when the related feature is enabled: api.posimyth.com — usage analytics. Off by default; submitting the deactivation feedback form also sends it, plus your admin email if you tick the contact box. Terms · Privacy · what’s shared store.posimyth.com — Pro licence, template library, newsletter opt-in. Terms · Privacy api.wdesignkit.com, etemplates.wdesignkit.com — templates and preview images. Terms · Privacy api.indexnow.org — sends a post URL when you save it, to notify search engines. Terms api.openai.com — AI content, using your own API key. Terms · Privacy generativelanguage.googleapis.com — AI content, using your own API key. Terms · Privacy fonts.googleapis.com, fonts.gstatic.com, google.com/recaptcha, accounts.google.com, oauth2.googleapis.com — self-hosted fonts, CAPTCHA, SMTP OAuth. Terms · Privacy typekit.com, use.typekit.net — Adobe Fonts, using your own project ID. Terms · Privacy challenges.cloudflare.com — Turnstile CAPTCHA, using your own site key. Terms · Privacy api.wordpress.org, themes.svn.wordpress.org — Rollback Manager lookups and downloads. Privacy

Easily improve site security with WordPress Hardening, Two-Factor Authentication (2FA), Login Protection, Vulnerability Detection and SSL certificate. Really simple, Effective and Performant WordPress Security Really Simple Security is the most lightweight and easy-to-use security plugin for WordPress. It secures your WordPress website with SSL certificate generation, including proper 301 https redirection and SSL enforcement, scanning for possible vulnerabilities, Login Protection and implementing essential WordPress hardening features. We believe that security should have the absolute minimum effect on website performance, user experience and maintainability. Therefore, Really Simple Security is: Lightweight: Every security feature is developed with a modular approach and with performance in mind. Disabled features won’t load any redundant code. Easy-to-use: 1-minute configuration with short onboarding setup. Security Features Easy SSL Migration Migrates your website to HTTPS and enforces SSL in just one click. 301 redirect via PHP or .htaccess Secure cookies Let’s Encrypt: Install an SSL Certificate if your hosting provider supports manual installation. Server Health Check: Your server configuration is every bit as important for your website security. WordPress Hardening Tweak your configuration and keep WordPress fortified and safe by tackling potential weaknesses. Prevent code execution in the uploads folder Prevent login feedback and disable user enumeration Disable XML-RPC Disable directory browsing Username restrictions (block ‘admin’ and public names) and much more.. Vulnerability Detection Get notified when plugins, themes or WP core contain vulnerabilities and need appropriate action. Login Protection Allow or enforce Two-Factor Authentication (2FA) for specific user roles. Users receive a two-factor code via Email. Improve Security with Really Simple Security Pro Protect your site with all essential security features by upgrading to Really Simple Security Pro. Advanced SSL enforcement Mixed Content Scan & Fixer. Detect files that are requested over HTTP and fix them to HTTPS, both Front- and Back-end. Enable HTTP Strict Transport Security and configure your site for the HSTS Preload list. Firewall Really Simple Security Pro includes a performant and efficient WordPress firewall, to stop bots, crawlers and bad actors with IP and username blocks. 404 blocking – Blocks crawlers as they trigger unusual numbers of 404 errors. Region blocking – Only allow/block access to your site from specific regions. Automated and customisable Firewall rules. IP blocklist and allowlist. Security Headers Security headers protect your site visitors against the risk of clickjacking, cross-site-forgery attacks, stealing login credentials and malware. Independent of your Server Configuration, works on Apache, LiteSpeed, NGINX, etc. Protect your website visitors with X-XSS Protection, X-Content-Type-Options, X-Frame-Options, a Referrer Policy and CORS headers. Automatically generate your WordPress-tailored Content Security Policy. Vulnerability Measures When a vulnerability is detected in a plugin, theme or WordPress core you will get notified accordingly. With Vulnerability Measures, you can configure simple but effective measures to make sure that a critical vulnerability won’t remain unattended. Force update: An update process will be tried multiple times until it can be assumed development of a theme or plugin is abandoned. You will be notified during these steps. Quarantine: When a plugin or theme can’t be updated to solve a vulnerability, Really Simple Security can quarantine the plugin. Advanced Site Hardening Choose a custom login URL Automated File Permissions check and fixer Rename and randomize your database prefix Change the debug.log file location to a non-public folder Disable application passwords Control admin creation Disable HTTP methods, reducing HTTP requests Login Protection Secure your website’s login process and user accounts with powerful security measures. Two-Step verification (Email login) 2FA (two factor authentication) with TOTP Passwordless login with passkey login Enforce strong passwords and frequent password change Limit Login Attempts With Limit Login Attempts you can configure a threshold to temporarily or permanently block IP addresses or (non-existing) usernames. You can also throw a CAPTCHA after a failed login (hCaptcha or Google reCaptcha) Access Control Restrict access to your site for specific regions. Add specific IP addresses or IP ranges to the Blocklist or Allowlist. Useful Links Documentation Security Definitions Translate Really Simple Security Issues & pull requests Feature requests Love Really Simple Security? If you want to support the continuing development of this plugin, please consider buying Really Simple Security Pro, which includes some excellent security features and premium support. About Really Simple Plugins Our mission is to make complex WordPress requirements really easy. Really Simple Security is developed by Really Simple Plugins. For generating SSL certificates, Really Simple Security uses the le acme2 PHP Let’s Encrypt client library, thanks to ‘fbett’ for providing it. Vulnerability Detection uses WP Vulnerability, an open-source initiative by Javier Casares. Want to join as a collaborator? We’re on GitHub as well!