Staatic – Static Site Generator for WordPress
Staatic turns WordPress into a practical static site generator. Keep editing posts, pages, menus, media, and settings in WordPress, then publish a static copy made of HTML, images, CSS, JavaScript, and other assets. The public site can be served without WordPress, PHP, or a database in the visitor request path. That can improve performance, reduce origin load, and shrink the public attack surface while preserving the familiar WordPress editing workflow. This is especially useful for a private-origin, public-static setup: WordPress remains available for editors and publication work, while visitors receive prebuilt files from your chosen hosting target. Staatic includes the publication workflow and deployment methods needed to run a self-hosted static WordPress site. Features of Staatic include: Crawls your WordPress site and builds a static publication from the pages and assets it discovers. Publishes from WordPress Admin, with publication status, logs, resource details, and downloadable output. Deploys to Local Directory, Amazon S3 or S3-compatible storage, GitHub, Netlify, SFTP, or a zip archive. Supports redirects, custom 404 pages, additional URLs and paths, exclude rules, and HTTP headers. Includes a WP-CLI command for command-line publication workflows. Works with WordPress Multisite, WPML, and HTTP Basic Auth protected WordPress origins. Helps separate the public site from WordPress admin, plugin runtime, and database-backed page generation. Provides integration hooks and compatibility improvements for common WordPress setups. Staatic Premium and Staatic Cloud add features such as forms integration, search integration, scheduled publications, change-based publications, and managed static WordPress hosting. The Community edition remains suitable when you want to generate and deploy a static version of a WordPress site yourself. Staatic Premium Staatic Premium supports ongoing development and adds functionality for teams that need more than the Community edition. Premium features include forms integration, search integration, scheduled publications, change-based publications, additional automation, and Staatic Cloud deployment options. For more information, visit Staatic.
WP Scanner – Performance and Security
Monitor your site’s load time, performance and security using WP Scanner. Gain an insight into how quickly your site loads for visitors over time and receive suggestions on how to improve performance. Ensure your site is secure by monitoring file changes, permissions, server headers and other security concerns. Metrics View important metrics about your WordPress install, including: Load time WordPress version PHP version Plugin updates Content breakdown Performance The following performance rules are checked when scanning your site: Use PHP 7 or HHVM Enable object caching Minimize HTTP Requests Use a Content Delivery Network Avoid empty src or href Add an Expires or a Cache-Control Header Gzip Components Put StyleSheets at the Top Put Scripts at the Bottom Avoid CSS Expressions Make JavaScript and CSS External Reduce DNS Lookups Minify JavaScript and CSS Avoid Redirects Remove Duplicate Scripts Configure ETags Make AJAX Cacheable Use GET for AJAX Requests Reduce the Number of DOM Elements No 404s Reduce Cookie Size Use Cookie-Free Domains for Components Avoid Filters Do Not Scale Images in HTML Make favicon.ico Small and Cacheable Security The following security rules are checked when scanning your site: Verify WordPress Core Files Verify Directory and File Permissions Serve Site Over HTTPS Keep Plugins Updated Keep WordPress Updated Keep PHP Updated Disable Debug Display Disable File Editing Remove Accounts with “Admin” Username Change the Default Table Prefix Configure Public-Key-Pins Header Configure Content Security Policy Header Configure X-Frame-Options Header Configure X-Content-Type-Options Header Configure X-Xss-Protection Header Configure Strict-Transport-Security Header Disable Server Header Disable X-Powered-By Header
