Staatic – Static Site Generator for WordPress
Staatic turns WordPress into a practical static site generator. Keep editing posts, pages, menus, media, and settings in WordPress, then publish a static copy made of HTML, images, CSS, JavaScript, and other assets. The public site can be served without WordPress, PHP, or a database in the visitor request path. That can improve performance, reduce origin load, and shrink the public attack surface while preserving the familiar WordPress editing workflow. This is especially useful for a private-origin, public-static setup: WordPress remains available for editors and publication work, while visitors receive prebuilt files from your chosen hosting target. Staatic includes the publication workflow and deployment methods needed to run a self-hosted static WordPress site. Features of Staatic include: Crawls your WordPress site and builds a static publication from the pages and assets it discovers. Publishes from WordPress Admin, with publication status, logs, resource details, and downloadable output. Deploys to Local Directory, Amazon S3 or S3-compatible storage, GitHub, Netlify, SFTP, or a zip archive. Supports redirects, custom 404 pages, additional URLs and paths, exclude rules, and HTTP headers. Includes a WP-CLI command for command-line publication workflows. Works with WordPress Multisite, WPML, and HTTP Basic Auth protected WordPress origins. Helps separate the public site from WordPress admin, plugin runtime, and database-backed page generation. Provides integration hooks and compatibility improvements for common WordPress setups. Staatic Premium and Staatic Cloud add features such as forms integration, search integration, scheduled publications, change-based publications, and managed static WordPress hosting. The Community edition remains suitable when you want to generate and deploy a static version of a WordPress site yourself. Staatic Premium Staatic Premium supports ongoing development and adds functionality for teams that need more than the Community edition. Premium features include forms integration, search integration, scheduled publications, change-based publications, additional automation, and Staatic Cloud deployment options. For more information, visit Staatic.
Performance & Security
A self-hosted site manager’s toolkit: the security hardening, performance tuning, admin cleanup, content controls and email handling you’d otherwise install half a dozen micro-plugins for — as independent modules on a single settings page (Settings → Site Toolkit). Every module is off by default and registers no hooks while disabled, so the plugin changes nothing until you opt in. 🔐 Security — disable XML-RPC, hide the WordPress version, disable user enumeration (author scans, sitemaps, oEmbed, author archives), block the REST users endpoint, disable the file editors, block readme/license files, security headers (with optional HSTS), disable application passwords, session management, a failed login log (with optional file logging for fail2ban), and an admin audit log. 🔓 Login Page — change the login URL, login rate limiting, hide detailed login errors, username-only sign-in, disable the language switcher, record each user’s last login, and login screen branding (use your site identity automatically or a custom logo from the media library). 🚀 Performance — control autosave and post revisions, remove asset version query strings, throttle the Heartbeat API, remove wp_head bloat and generator tags, dequeue unused default assets (emoji, jQuery Migrate, Block Library CSS), disable self-pings, scheduled database maintenance, DNS prefetch/preconnect hints, and manage generated image sizes. 🛠️ Admin / UX — hide the front-end toolbar, change the WordPress greeting, replace the account menu with a logout button, dashboard widget manager, custom admin footer, maintenance mode, media library user isolation, environment indicator, suppress update notices on non-production, control the admin email verification screen, trim the WordPress toolbar menu, and an “All Settings” menu item. 📝 Content & Editorial — customize excerpts, disable the block editor per post type, disable trackbacks, targeted comment controls (media comments, plain-text links, minimum length), disable comments entirely, disable oEmbed, and restore the Links Manager. 📧 Email & Notifications — disable selected notification emails, and redirect or block all outgoing email on non-production environments. If you have further suggestions, please contact us via the plugin support page. If this plugin is useful for managing your WordPress settings, please leave a review. Developed by JMR.codes.
