Bjorn Solstad

Devenia Speed Optimization scans local WordPress image and video attachments, finds oversized files that can slow pages, shows where they are used, and reports what should be reviewed first.
Version 0.3.61 addresses the initial WordPress.org review feedback and improves customer-facing service wording.
The plugin can be used for local reporting without connecting to Devenia or a payment provider. Paid Devenia service features are optional and require a site administrator to start or enable them.
<h3>Features</h3>
<ul>
<li>Manual and scheduled scans.</li>
<li>Scan scheduling after media, content, and theme changes.</li>
<li>Configurable image/video thresholds, scan limit, priority pages to check, scheduled scans, and optional email alerts.</li>
<li>Customer-controlled image/video format policy for preserving URLs, sidecar modern formats with fallback, or explicit modern-format URL changes.</li>
<li>File size, dimensions, generated sizes, upload data, and local-file reporting.</li>
<li>Frontend page evidence for content URLs, block references, and featured images.</li>
<li>Rendered-size checks for images used on real pages.</li>
<li>Customer report, Devenia review data, and repair plan.</li>
<li>Controlled repair plans for Devenia optimization service work.</li>
<li>Safe replacement with backup, restore, and a replacement check.</li>
<li>Tracked service requests from the customer report without automatic external email sending.</li>
<li>Redo request status tracking, Devenia review notes, keep-current close action, new-version preview/apply, manual review handling, and restore-original action.</li>
<li>Priority score and recommendation.</li>
<li>WP-CLI validation command: wp devenia-speed-optimization scan.</li>
<li>Optional automation tools for settings, scans, reports, repair jobs, replacement, restore, backups, service requests, and redo requests.</li>
</ul>
<h3>External services</h3>
The local scan, report, settings, scheduled scan, backup, restore, and WP-CLI features run on the WordPress site itself. They do not require an external Devenia connection.
Optional paid Devenia service features can connect to Devenia’s service API at <code>https://optiworker.devenia.com</code>. This happens only after a site administrator configures or starts a Devenia service action such as checkout, paid image handling, redo review, full automation, service status updates, or replacement delivery.
When these optional service features are used, the plugin may send the Devenia service API the site URL, site name, WordPress admin URL, plugin version, selected service request details, customer name/email entered for checkout, media attachment IDs, file names, file URLs, MIME types, file sizes, dimensions, file checksums, affected frontend page URLs, report findings, redo reason/notes, callback URLs, and site-specific service keys needed to deliver the requested service and update the local order status.
If embedded checkout is shown for an optional paid Devenia service request, the plugin loads Airwallex’s hosted checkout component from <code>https://static.airwallex.com/components/sdk/v1/index.js</code>. Payment creation and payment status are handled through Devenia’s service API and Airwallex. The plugin does not store Airwallex merchant API credentials.
Service links:
<ul>
<li>Devenia terms of service: https://devenia.com/terms/</li>
<li>Devenia privacy policy: https://devenia.com/privacy-policy/</li>
<li>Devenia website: https://devenia.com/</li>
<li>Airwallex terms: https://www.airwallex.com/global/terms/sign-up-terms</li>
<li>Airwallex website: https://www.airwallex.com/</li>
</ul>

Devenia Speed Optimization

Speed-focused diagnostics and guided optimization for oversized WordPress media.

npc01

NPC Maintenance Inspector performs 9-point health diagnostics on your WordPress site directly from the admin dashboard:
<ol>
<li>WordPress core updates — Detect missing core updates.</li>
<li>Plugin updates — List plugins with available updates.</li>
<li>Site Health issues — Extract critical issues from WP standard Site Health API.</li>
<li>PHP version — Warn on end-of-life PHP versions.</li>
<li>Error log analysis — Summarize debug.log entries and save a one-click backup to uploads/ for safe review.</li>
<li>File integrity — Detect suspicious code patterns in core files (eval / base64_decode / etc.) by comparing checksums against the WordPress.org Checksum API.</li>
<li>Suspicious files — Find unexpected PHP files in wp-content/uploads/, with built-in whitelist for known legitimate plugin files (Ajax Load More templates, WP STAGING index.php, AIOS firewall rules, etc.).</li>
<li>SSL certificate — Check days until expiration (warn under 30 days, critical at 0).</li>
<li>File permissions — Check critical files like wp-config.php, .htaccess, wp-content/.</li>
</ol>
Operational features:
<ul>
<li>History — Keep the last 10 diagnoses as a custom post type.</li>
<li>Scheduled auto-check — Run daily, weekly, or monthly via WP Cron.</li>
<li>Email notifications — Send alerts only on critical issues.</li>
<li>One-click debug.log clear — Truncate the log while preserving file permissions.</li>
<li>Optional AI report — Generate maintenance suggestions via Anthropic Claude API. Disabled by default; opt-in via a wp-config.php constant.</li>
</ul>
The plugin is locked to the user who activated it and to the original site URL, so it stays inert after backup restores to a different domain.
<h3>External services</h3>
This plugin can optionally connect to the Anthropic Claude API (<code>https://api.anthropic.com/v1/messages</code>) to generate AI-powered maintenance reports. This is the only external service the plugin ever contacts.
When is data sent?
<ul>
<li>When you manually click the “Generate AI Report” button in the admin.</li>
<li>When an automatic scheduled diagnosis detects a critical issue and notifications are enabled. In that case the AI report is generated once per critical run and attached to the notification email.</li>
</ul>
What data is sent?
<ul>
<li>The diagnosis result text only:
<ul>
<li>Site URL, site name, WordPress version, theme name</li>
<li>Counts of plugin updates / Site Health issues / error-log entries</li>
<li>PHP version, memory limit, max upload size</li>
<li>SSL expiration date and days remaining</li>
<li>File-permission status of critical files</li>
<li>Suspicious code patterns detected (function names like <code>eval</code>, <code>base64_decode</code>)</li>
</ul>
</li>
<li>No login data, no post content, no personal data of site visitors.</li>
</ul>
Is the data sent unconditionally?
No. The AI feature is completely disabled unless you define <code>NPCMI_API_KEY</code> in <code>wp-config.php</code>. Without that constant, no external connection to Anthropic is ever made.
Anthropic’s terms and privacy policy:
<ul>
<li>Consumer Terms of Service: https://www.anthropic.com/legal/consumer-terms</li>
<li>Privacy Policy: https://www.anthropic.com/legal/privacy</li>
<li>Commercial Terms of Service (if you use a paid API plan): https://www.anthropic.com/legal/commercial-terms</li>
</ul>
By enabling the AI report feature (i.e. by defining <code>NPCMI_API_KEY</code>), you agree to Anthropic’s applicable terms.

NPC Maintenance Inspector

WordPress maintenance health-check tool with 9-point diagnostics, history tracking, and optional AI-powered reports.

Devenia Speed Optimization vs NPC Maintenance Inspector