jonbullock

Applies the following simple search engine optimisations to your blog:
<ul>
<li>Shows “Site Title” in page title always no matter what content your viewing</li>
<li>Shows any content descriptor (page/post title etc.) first in page title</li>
<li>Uses post excerpt as value of “description” meta tag</li>
<li>Uses post tags as value of “keywords” meta tag</li>
<li>Uses tag name as value of “keywords” meta tag when viewing posts for a tag</li>
<li>Uses category name as value of “keywords” meta tag when viewing posts for a category</li>
<li>Uses date as value of “keywords” meta tag when viewing posts for a date</li>
</ul>
That’s it really, pretty simple stuff.

Basic-SEO

Applies basic search engine optimisations to your WordPress powered site.

Marc Armengou

Security Hardener is inspired by the official WordPress hardening guide (Advanced Administration / Security / Hardening). It uses the platform’s standard functions and does not override core. Applies a prudent set of defenses:
<ul>
<li>Security headers: <code>X-Frame-Options</code>, <code>X-Content-Type-Options</code>, <code>Referrer-Policy</code>, <code>Permissions-Policy</code>, <code>COOP/CORP</code>. </li>
<li>HSTS (optional; HTTPS only). </li>
<li>Basic nonce-based CSP (optional; requires testing). </li>
<li>Disable XML-RPC and pingbacks (optional; enabled by default). </li>
<li>Hide the WordPress version in the <code><head></code>. </li>
<li>Block user enumeration via <code>/?author=</code> by returning 404. </li>
<li>Generic login errors (prevents information leakage). </li>
<li>IP-based login rate limiting with transients (configurable threshold and window). </li>
<li>Restrict the REST API to authenticated users, with a minimal allowlist for oEmbed/index.</li>
</ul>
<blockquote>
⚠️ Important: The restrict REST API option and CSP can affect integrations and plugins. Test it in staging first.
</blockquote>
Privacy: the plugin does not send data to external services or create new tables. It only uses transients to count failed login attempts.

Security Hardener

Basic hardening: secure headers, enumeration blocking, generic login errors, IP-based rate limiting, and optional restriction of the REST API.

Basic-SEO vs Security Hardener