ingobaab

BAAB Insights runs inside your WordPress admin. It builds an on-screen report (overview table, advisor tabs) and a JSON data block you can copy. For a more detailed report on the BAAB site, open https://baab.de/insights/ and paste your JSON there when you are ready (that step is optional and only happens if you copy data out of WordPress yourself).
What this version includes
<ul>
<li>Admin page under “BAAB Insights” (capability: <code>manage_options</code>)</li>
<li>One-click report generation (AJAX, same-site only) with database, object cache, media, and SSL advisors</li>
<li>Read-only JSON export with compact formatting for large lists</li>
<li>English source strings with German translations (<code>de_DE</code>)</li>
<li>Optional activation redirect to the plugin screen (single activation only)</li>
</ul>
Privacy and external connections
<ul>
<li>No phoning home: The plugin does not send analytics or telemetry to BAAB or any third party. No license pings, no usage tracking, no crash reporting.</li>
<li>Your data stays on your server unless you explicitly copy the JSON elsewhere.</li>
<li>Outbound HTTP(S) is limited to your own site’s URLs: optional HEAD requests to your configured home URL (HTTPS for HSTS detection, HTTP for redirect-to-HTTPS checks). This is not a call to the plugin author; it uses WordPress’s HTTP API to inspect your public responses.</li>
<li>For SSL details, the plugin may open a TLS connection to your site’s host to read the presented certificate (same host as your WordPress URL). By default, fields like certificate subject, SAN list, and full site URL are not included in the JSON export unless you opt in by defining <code>BAAB_DISABLE_SENSITIVE_OUTPUT</code> as <code>false</code> in code.</li>
</ul>
Optional commercial product
<ul>
<li>The admin screen may link to a PRO offering on the author’s site. The free plugin on WordPress.org remains fully functional for analysis; the PRO product is optional.</li>
<li>The web app for extended analysis based on your JSON export: https://baab.de/insights/</li>
</ul>

BAAB Insights

BAAB Insights analyzes your WordPress installation locally in the admin and helps you spot performance, database, cache, media, and SSL issues.

Rankology

Rankology SEO and Analytics Tool is a comprehensive WordPress SEO plugin that helps sites rank higher in search engines. Features include:
AI Content Generator: 
AI Content Genie is a powerful WordPress AI dashboard that lets you generate content using your own OpenAI or Gemini API keys. 
It includes model selection, real-time streaming output, usage logs with token tracking, cost monitoring, and error logging.
Core SEO Features: 
Meta titles & descriptions, focus keywords, canonical URLs, keyword density analysis, alt text optimization, internal linking detection, nofollow link management, last modified dates, and social media integration.
Advanced SEO: 
Content analysis with overall SEO scoring, Google autocomplete keyword suggestions, schema markup (Article, FAQ, Review, Organization, Local Business), robots.txt & .htaccess management, XML sitemap generation, and image SEO automation.
Rankology LinkFlow: 
Smart internal linking with suggestions from content, meta fields, and keywords. Includes analytics dashboards, broken/orphan link detection, engagement tracking, content keyword search, recommendations tables, interlinking graphs, and sitemap visualization.
Google Integration: 
Connect Google Analytics (GA4) and Search Console to unlock GA & Search Console Insights inside your Rankology dashboard. Configure your GA4 property + Search Console site, securely save your Service Account JSON (encrypted), and view at-a-glance performance metrics (sessions, engagement, clicks, impressions, CTR, position) with filters and reports.
Speed Optimization: 
HTML/CSS/JS minification, full-page caching, image compression & WebP conversion, server cache headers, GZIP/Brotli compression, and performance stats dashboard.
Web Performance & Core Web Vitals: 
Modern PageSpeed Insights dashboard with Lighthouse-style analysis. Measure LCP, FCP, CLS, INP, TBT, TTI, and TTFB. Includes report caching, history tracking, comparison tools, shareable public reports, email sharing, automatic mobile analysis, domain restriction security, and side-by-side report comparison.
Settings & Customization: 
Global meta settings per content type, social sharing buttons, breadcrumb navigation, header/footer code injection, import/export functionality, and Cloudflare CDN integration.
<h3>Additional Feature Highlights</h3>
<h3>Complete SEO Analysis</h3>
• Analyze every post and page for keyword use, title structure, meta descriptions, and content scoring so you can continuously tune optimization efforts with precise feedback.
<h3>Schema Markup</h3>
• Automatically generate schema for articles, FAQs, reviews, organizations, or local businesses and switch to manual configuration when you need full control over the structured data output.
<h3>Performance Optimization</h3>
• Minify HTML, CSS, and JavaScript with real-time cache rebuilding plus loader controls (defer/delay) so scripts don’t block rendering while your best content stays compliant with Core Web Vitals.
<h3>Full-Page Cache & Control</h3>
• Built-in full-page cache plus cache exclusions, Heartbeat throttling, and a cache status indicator give you complete visibility into what’s stored and how quickly visitors see the page.
<h3>Image Optimization</h3>
• Compress uploads, convert to WebP, and clean filenames automatically while preserving alt text hygiene so every media asset contributes to faster loads and better image SEO.
<h3>Internal Linking</h3>
• Smart linking suggestions, LinkFlow analytics, and engagement tables guide you to add relevant anchors, track orphan pages, and grow the internal link network without leaving the editor.
<h3>Google Integration</h3>
• Directly surface Google Analytics (GA4) and Search Console metrics per URL, submit pages for indexing, and monitor clicks, impressions, and engagement inside WordPress for faster data-driven decisions.
<h3>Social Media Optimization</h3>
• Manage Open Graph metadata, share buttons, and default sharing images to ensure every post displays perfectly on Facebook, X, LinkedIn, Reddit, and Pinterest.
<h3>Technical SEO</h3>
• Edit robots.txt, .htaccess, redirects, canonical tags, noindex/nofollow rules, and crawling options to maintain a clean, secure technical foundation for search engines.
<h3>Breadcrumb Navigation</h3>
• Enable customizable breadcrumbs per content type and embed them via a <code>[rankology_breadcrumb]</code> shortcode so visitors and search engines enjoy clear site structure.
<h3>Header/Footer Code</h3>
• Inject custom HTML, CSS, or JavaScript before or after key page segments, restrict it to devices or templates, and toggle the feature without editing theme files.
<h3>Cloudflare Integration</h3>
• Connect your Cloudflare account to purge cache, adjust security/performance rules, and view zone-level confirmation directly from the Rankology dashboard.
Server Settings: 
 • Add custom rules to the <code>.htaccess</code> file (for Apache servers only, not Nginx) via a manual input field.
Robots.txt Settings: 
 • Admins can manually add custom entries. 
 • Automatically append entries from the robots options table.
Sitemap Settings: 
 • Auto-generate XML sitemap. 
 • Exclude specific pages & posts from sitemap. 
 • Automatic sitemap updates on new content. 
 • Direct submission to Google & Bing.
Image SEO Settings: 
 • Automatically use the image filename as alt text on upload. 
 • Use the uploaded file’s name as the image title by default. 
 • Option to set the post title using the uploaded file’s alt text and title. 
 • Automatically clean uploaded media filenames for SEO and compatibility.
Crawling Options: 
 • Control site visibility in search results. 
 • Disable link crawling site-wide. 
 • Disable image indexing for the site. 
 • Disable descriptions for all pages in Google. 
 • Exclude paginated archive pages from indexing. 
 • Exclude attachment pages from indexing.
Enable/Disable Alert & Warnings: 
 • Enable Notice on Discourage search engines from indexing this site. 
 • Enable Robots Notice. 
 • Enable Robots Sitemap.
<h4>Rankology Speed Booster</h4>
Boost your site’s loading speed using advanced optimization tools designed to enhance performance and Core Web Vitals. Organized in 5 intuitive tabs for complete control.
Feature Control Tab: 
 • Master toggle to enable/disable all caching features at once. 
 • Individual switches for HTML, CSS, and JavaScript minification. 
 • Quick overview of active optimization features with status indicators.
Cache Generation Tab: 
 • HTML Minification: Automatically compress HTML output by removing whitespace and comments. 
 • CSS Minification: Generate optimized lightweight CSS files without affecting originals. 
 • JavaScript Minification: Minify and optimize JS files with automatic AJAX-based cache rebuilding. 
 • One-click cache clearing for all minified assets without page reload.
Image Optimization Tab: 
 • Advanced image compression using multiple methods (Spatie, Imagick, GD, binary tools). 
 • Automatic WebP conversion for all uploaded images with smart browser detection. 
 • Lazy loading implementation to load images only when visible in viewport. 
 • Bulk optimization with chunk-based processing for entire media library. 
 • Real-time performance stats showing total images, optimized count, space saved, and WebP files created. 
 • Separate sub-tabs for settings and results/bulk actions. 
 • Support for all WordPress image sizes and thumbnails.
Server Configuration Tab: 
 • Server Cache Headers: Add Cache-Control, Expires, and Pragma headers for improved browser caching. 
 • GZIP/Brotli Compression: Auto-configure compression rules for Apache/LiteSpeed servers (.htaccess). 
 • Htaccess Header Cache: Enable .htaccess-based caching for static files. 
 • Object Cache: Enable object cache headers for faster server processing and database query optimization. 
 • Real-time compression detection showing GZIP/Brotli status on your server.
Performance Stats Tab: 
 • Visual dashboard displaying cache performance metrics. 
 • Hit rate statistics for optimized vs. non-optimized requests. 
 • Overall site performance score and optimization recommendations. 
 • Real-time insights into your speed optimization effectiveness.
Web Performance & Core Web Vitals Tab: 
 • Modern PageSpeed Insights dashboard with Lighthouse-style analysis. 
 • Core Web Vitals Analysis: Measure and visualize LCP (Largest Contentful Paint), FCP (First Contentful Paint), CLS (Cumulative Layout Shift), INP (Interaction to Next Paint), TBT (Total Blocking Time), TTI (Time to Interactive), and TTFB (Time to First Byte). 
 • Performance Score: Get detailed performance metrics with overall performance score (0-100) and grade ratings (A-F). 
 • Optimization Recommendations: View actionable optimization opportunities with potential savings, resource details, and improvement suggestions. 
 • Report Caching: Configurable cache duration (default 7 days) to reduce API calls and improve response times. Cached reports are stored in database with automatic expiration. 
 • Report History: View and manage all previous PageSpeed analyses with pagination, filtering, and quick access to historical reports. 
 • Report Comparison: Compare two PageSpeed reports side-by-side to track performance improvements over time, with detailed metric comparisons and opportunity analysis. 
 • Shareable Reports: Generate secure, token-based public URLs for sharing performance reports with stakeholders, clients, or team members without requiring WordPress admin access. 
 • Email Sharing: Send performance reports via email with custom HTML templates and public share links. 
 • Automatic Mobile Analysis: After successful desktop analysis, automatically trigger mobile analysis in the background for comprehensive performance insights. 
 • Force Refresh Option: Bypass cache and fetch latest data from API when needed for real-time analysis. 
 • Device Strategy Selection: Analyze performance for both desktop and mobile devices with separate reports and metrics. 
 • Public Report Access: Public reports render the full dashboard UI with all metrics, charts, and optimization recommendations accessible via clean URLs (no admin authentication required). 
 • Integration with Rankology API: Seamlessly connects to Rankology Laravel API for PageSpeed Insights data, eliminating the need for Google API keys.
<h3>External Services</h3>
This plugin connects to the following external services:
<ol>
<li>Rankology API Services
<ul>
<li>Purpose: Fetch Google Analytics and Search Console data, submit URLs for indexing, provide SEO insights, and analyze PageSpeed performance</li>
<li>Data Sent: Website URL, API key (encrypted), requested metrics, and PageSpeed analysis requests</li>
<li>When: When loading analytics dashboards, submitting URLs for indexing, or analyzing page performance</li>
<li>Endpoints:
<ul>
<li>https://app.rankology.io/api/rankology/url-inspection/single</li>
<li>https://app.rankology.io/api/rankology/submit-urls</li>
<li>https://app.rankology.io/api/rankology/google-analytics/google-insights</li>
<li>https://app.rankology.io/api/rankology/google-search-console/google-insights</li>
<li>https://app.rankology.io/api/rankology/connect-app</li>
<li>https://app.rankology.io/api/rankology-pagespeed/wordpress/get-site-speedinsight (PageSpeed Insights analysis)</li>
</ul>
</li>
<li><a href="https://rankology.io/privacy-policy/" rel="nofollow ugc">Rankology Privacy Policy</a></li>
<li><a href="https://rankology.io/terms-of-service/" rel="nofollow ugc">Rankology Terms of Service</a></li>
</ul>
</li>
</ol>
1a. Rankology Webhook System (Plugin Lifecycle) 
 * Purpose: Secure communication with Rankology servers for plugin activation and deactivation events 
 * Data Sent: 
 – On Activation: Site URL, site name, WordPress version, PHP version, plugin version, timestamp, nonce, and HMAC-SHA256 signature (if webhook secret exists) 
 – On Deactivation: All activation data plus stored API key (if available) 
 * When: 
 – Plugin Activation: Sends blocking request to receive webhook secret and API key from server 
 – Plugin Deactivation: Sends non-blocking request to notify server of deactivation 
 * Security Features: 
 – HMAC-SHA256 signature verification for request authenticity 
 – Nonce generation for request validation 
 – Rate limiting (5-second cooldown between requests) 
 – SSL certificate verification 
 – Secure storage of webhook secret and API key in WordPress options 
 * Endpoints: 
 – https://app.rankology.io/api/rankology-pagespeed/wordpress/plugin-install (activation) 
 – https://app.rankology.io/api/rankology-pagespeed/wordpress/plugin-uninstall (deactivation) 
 * Data Storage: Webhook secret and API key are stored securely in WordPress options table and only sent to Rankology API endpoints 
 * Note: The webhook system ensures seamless integration with Rankology services and automatic API key provisioning upon plugin activation 
 * <a href="https://rankology.io/privacy-policy/" rel="nofollow ugc">Rankology Privacy Policy</a> 
 * <a href="https://rankology.io/terms-of-service/" rel="nofollow ugc">Rankology Terms of Service</a>
<ol>
<li>
Cloudflare API
<ul>
<li>Purpose: Manage CDN cache, security settings, performance rules, and analytics data</li>
<li>Data Sent:
<ul>
<li>API credentials (API key/token and optionally email address for Global API Key authentication)</li>
<li>Zone ID (identifier for your Cloudflare zone/domain)</li>
<li>Cache management commands (purge all cache, purge specific URLs)</li>
<li>Security settings (WAF status, security level, bot fight mode, browser integrity check)</li>
<li>Performance settings (cache level, browser cache TTL, auto minify settings, rocket loader, polish, WebP)</li>
<li>Page rule configurations (URL patterns, cache rules, security rules)</li>
<li>Analytics queries (time range parameters for performance and security analytics)</li>
</ul>
</li>
<li>When:
<ul>
<li>When testing Cloudflare connection (sends zone ID to verify credentials)</li>
<li>When purging cache (manually or automatically after content updates)</li>
<li>When updating security settings (WAF, security level, bot protection)</li>
<li>When updating performance settings (cache level, minification, optimization)</li>
<li>When creating or deleting page rules</li>
<li>When fetching analytics data (performance metrics, security events, top statistics)</li>
<li>When toggling development mode</li>
</ul>
</li>
<li>Endpoints:
<ul>
<li>https://api.cloudflare.com/client/v4/ (REST API for cache, security, and settings management)</li>
<li>https://api.cloudflare.com/client/v4/graphql (GraphQL API for analytics and advanced queries)</li>
</ul>
</li>
<li>Note: All API credentials are stored securely in WordPress options and only sent to Cloudflare API endpoints. No user data or website content is sent to Cloudflare.</li>
<li><a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a></li>
<li><a href="https://www.cloudflare.com/website-terms/" rel="nofollow ugc">Cloudflare Terms of Service</a></li>
</ul>
</li>
<li>
Google Autocomplete API
<ul>
<li>Purpose: Fetch real-time keyword suggestions for SEO optimization</li>
<li>Data Sent: Search queries (keywords), locale, and country data</li>
<li>When: When using the “Get Suggestions” button in SEO fields</li>
<li>Endpoint: https://www.google.com/complete/search</li>
<li><a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a></li>
</ul>
</li>
<li>
Google Analytics Data API (GA4) & Google Search Console API
<ul>
<li>Purpose: Fetch Google Analytics (GA4) reporting metrics and Google Search Console performance data (and URL Inspection, if enabled) inside the Rankology dashboard</li>
<li>Data Sent:
<ul>
<li>Your configured GA4 Property ID and/or Search Console Property URL</li>
<li>Requested date range, filters (e.g., country/device), dimensions/metrics, and URL(s) used for reporting</li>
<li>Authentication data required to obtain an access token (service-account based OAuth2 flow)</li>
</ul>
</li>
<li>When: When you enable Google Analytics / Search Console integration and load GA/SC dashboards, reports, or URL inspection features</li>
<li>Endpoints:
<ul>
<li>https://oauth2.googleapis.com/token (token exchange)</li>
<li>https://analyticsdata.googleapis.com/v1beta/ (GA4 Data API)</li>
<li>https://searchconsole.googleapis.com/webmasters/v3/ (Search Console Search Analytics)</li>
<li>https://searchconsole.googleapis.com/v1/urlInspection/index:inspect (Search Console URL Inspection)</li>
</ul>
</li>
<li>Note: Rankology uses the bundled Google API Client Library for PHP (<code>google/apiclient</code>) to handle authentication and requests.</li>
<li><a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a></li>
</ul>
</li>
</ol>
<h3>Source Code</h3>
This plugin includes minified JavaScript and CSS files for performance. The source code and build process are available at:
<ul>
<li>Plugin Source Code: https://github.com/rankology/rankology-seo-wordpress-plugin</li>
<li>Third-party Libraries:
<ul>
<li>DataTables: https://github.com/DataTables/DataTablesSrc</li>
<li>Chart.js: https://github.com/chartjs/Chart.js</li>
<li>vis-network: https://github.com/visjs/vis-network</li>
<li>cytoscape.js: https://github.com/cytoscape/cytoscape.js</li>
<li>Select2: https://github.com/select2/select2</li>
<li>Tagify: https://github.com/yaircohen/tagify</li>
<li>html2pdf.js: https://github.com/eKoopmans/html2pdf.js</li>
<li>Google API Client Library for PHP (google/apiclient): https://github.com/googleapis/google-api-php-client</li>
</ul>
</li>
</ul>
Note: Some JavaScript files (vis-network.min.js, cytoscape.min.js) are minified for performance. The source code is available at the GitHub links above. The plugin uses build tools (npm/composer) to generate production files. To build from source, clone the repository and run the build commands as documented in the repository.

Rankology SEO and Analytics Tool

Rankology SEO and Analytics Tool is a powerful, fast, and easy-to-use SEO plugin that helps WordPress sites rank higher in search engines.

BAAB Insights vs Rankology SEO and Analytics Tool