Fazle Bari

<p>FBS Secure Optimize is a powerful WordPress plugin designed to improve your website’s performance and security. It combines essential optimization features with robust security measures to help you create a faster, more secure website.</p>
<h4>Performance Features</h4>
<ul>
<li><strong>Asset Optimization</strong>: Minify and combine CSS and JavaScript files to reduce file size and HTTP requests</li>
<li><strong>Lazy Loading</strong>: Implement lazy loading for images and iframes to improve page load times</li>
<li><strong>Database Cleanup</strong>: Clean up post revisions, auto-drafts, spam comments, and expired transients</li>
<li><strong>Automatic Cleanup</strong>: Schedule automatic database cleanup on a daily, weekly, or monthly basis</li>
</ul>
<h4>Security Features</h4>
<ul>
<li><strong>Login Security</strong>: Limit login attempts to prevent brute force attacks with IP blocking</li>
<li><strong>Security Headers</strong>: Add essential security headers like X-Content-Type-Options, X-Frame-Options, and more</li>
<li><strong>WordPress Version Hiding</strong>: Remove WordPress version information from your site’s head and RSS feeds</li>
<li><strong>IP Whitelisting</strong>: Whitelist trusted IP addresses to bypass login attempt limits</li>
</ul>
<h4>Key Benefits</h4>
<ul>
<li><strong>Improved Performance</strong>: Faster page load times through asset optimization and lazy loading</li>
<li><strong>Enhanced Security</strong>: Protection against common web vulnerabilities and brute force attacks</li>
<li><strong>Database Optimization</strong>: Clean up unnecessary data to improve database performance</li>
<li><strong>Easy to Use</strong>: Simple, intuitive interface with clear settings and real-time statistics</li>
<li><strong>WordPress Standards</strong>: Built following WordPress coding standards and best practices</li>
</ul>
<h4>Perfect For</h4>
<ul>
<li>Website owners looking to improve their site’s performance</li>
<li>Developers who need a comprehensive optimization solution</li>
<li>Anyone concerned about website security</li>
<li>Sites with large databases that need regular cleanup</li>
<li>WordPress sites that want to hide their version information</li>
</ul>
<h3>Support</h3>
<p>For support, feature requests, or bug reports, please visit our support forum or contact us through our website.</p>
<h3>Privacy Policy</h3>
<p>This plugin does not collect, store, or transmit any personal data. All settings and data remain on your server. The plugin only processes data locally to optimize your website’s performance and security.</p>
<h3>Technical Requirements</h3>
<ul>
<li>WordPress 5.0 or higher</li>
<li>PHP 7.4 or higher</li>
<li>MySQL 5.6 or higher</li>
<li>Sufficient server resources for asset optimization features</li>
</ul>
<h3>Performance Impact</h3>
<p>FBS Secure Optimize is designed to have minimal impact on your site’s performance. The plugin only loads necessary components and uses efficient caching mechanisms to ensure optimal performance.</p>
<h3>Security Considerations</h3>
<p>All user inputs are properly sanitized and validated. The plugin uses WordPress nonces for form security and follows WordPress security best practices throughout the codebase.</p>


FBS Secure Optimize

A comprehensive WordPress plugin for performance optimization and security enhancement. Features asset optimization, database cleanup, and security.

Themology

<p>SpeedForge is a performance optimization plugin for WordPress and WooCommerce websites. All optimization processes run locally on your server with no cloud dependencies, no external API keys, and no monthly subscription fees. SpeedForge helps improve Core Web Vitals scores and overall page load times through a comprehensive suite of optimization techniques.</p>
<h4>Page Caching</h4>
<p>SpeedForge generates static HTML files with <code>GZIP</code> compression for faster page delivery. The caching system creates separate cache files for mobile and desktop visitors to serve optimized content for each device type. Cache invalidation happens automatically when you update posts, pages, or products. SpeedForge also includes cache preloading to generate cached versions of your important pages before visitors arrive.</p>
<ul>
<li>Static HTML generation with <code>GZIP</code> compression.</li>
<li>Separate cache for mobile devices.</li>
<li>Automatic cache invalidation when content changes.</li>
<li>Cache preloading for important pages.</li>
<li>Compatible with managed hosting cache systems.</li>
<li>Tag-based cache invalidation for precise purging.</li>
<li>Stale-while-revalidate for zero-downtime cache rebuilds.</li>
<li>Adaptive cache TTL per content type.</li>
<li>Browser cache policy headers (Cache-Control, Vary).</li>
<li>Cache hit/miss statistics dashboard.</li>
<li>Smart warmup with priority queue and pause/resume.</li>
<li>WP-CLI commands for cache management.</li>
<li>HTML minification (conservative and aggressive modes).</li>
</ul>
<h4>CSS Optimization</h4>
<p>SpeedForge generates Critical CSS locally to eliminate render-blocking stylesheets. The Critical CSS extraction identifies above-the-fold styles and inlines them directly in the page head, allowing the rest of your CSS to load asynchronously. SpeedForge also minifies and combines CSS files to reduce HTTP requests and file sizes.</p>
<ul>
<li>Local Critical CSS generation.</li>
<li>CSS minification and combination.</li>
<li>Unused CSS removal per page.</li>
<li>Async loading for non-critical styles.</li>
<li>Self-host Google Fonts locally for GDPR compliance.</li>
<li>Self-host third-party CSS from popular CDNs.</li>
<li>Pre-built critical CSS templates for WooCommerce.</li>
</ul>
<h4>JavaScript Optimization</h4>
<p>SpeedForge defers render-blocking JavaScript to improve page load times and interactivity metrics. Third-party scripts like analytics, chat widgets, and social embeds can be delayed until the user interacts with the page. SpeedForge analyzes scripts to identify which files are safe to defer or delay without breaking functionality.</p>
<ul>
<li>Defer loading for render-blocking scripts.</li>
<li>Delay loading for third-party scripts until user interaction.</li>
<li>JavaScript minification and combination.</li>
<li>Smart script analysis to identify safe-to-delay files.</li>
<li>Self-host third-party JavaScript from popular CDNs.</li>
<li>Inline script grouping to reduce DOM parsing overhead.</li>
</ul>
<h4>Image Optimization</h4>
<p>SpeedForge converts images to WebP and AVIF formats using PHP <code>GD</code> or <code>ImageMagick</code> libraries available on your server. The compression algorithm analyzes image complexity to apply appropriate quality settings without visible degradation. SpeedForge implements native browser lazy loading with Low Quality Image Placeholder support to improve perceived performance.</p>
<ul>
<li>WebP and AVIF conversion using <code>GD</code> or <code>ImageMagick</code>.</li>
<li>Smart compression based on image complexity.</li>
<li>Native lazy loading with <code>LQIP</code> placeholders.</li>
<li>EXIF metadata removal.</li>
<li>Auto-resize large uploads.</li>
<li>LCP image preloading with responsive srcset for product, shop, and category pages.</li>
</ul>
<h4>WooCommerce Optimization</h4>
<p>SpeedForge includes specific optimizations for WooCommerce stores. Cart Fragments, which normally load on every page, are disabled when the cart is empty to reduce unnecessary AJAX requests. Variable product data preloads on hover so attribute changes feel instant. Checkout scripts defer until the payment step, and mini-cart content loads only when visitors hover over the cart icon.</p>
<ul>
<li>Smart Cart Fragments that disable when cart is empty.</li>
<li>Variable product data preloading on hover.</li>
<li>Checkout script deferral until payment step.</li>
<li>Mini-cart lazy loading on icon hover.</li>
<li>Store API response caching with ETag support.</li>
<li>HPOS-aware database maintenance (sessions, stock, order items, Action Scheduler).</li>
</ul>
<h4>CDN Integration</h4>
<p>SpeedForge integrates with major CDN providers for automatic cache purging when content changes. URL rewriting serves static assets through your CDN for global performance. Provider-specific cache tag headers enable surgical CDN invalidation.</p>
<ul>
<li>Cloudflare API integration with URL and zone purging.</li>
<li>Fastly with Surrogate-Key and soft purge support.</li>
<li>Bunny.net pull zone purge API.</li>
<li>Generic Webhook with HMAC-SHA256 signatures.</li>
<li>Automatic CDN purge when local cache is cleared.</li>
<li>Provider-specific cache tag headers (Cache-Tag, Surrogate-Key, CDN-Tag).</li>
</ul>
<h4>Bloat Removal</h4>
<p>WordPress loads several features by default that many sites do not need. SpeedForge provides granular control to disable these unused features and reduce page weight. Each option can be toggled independently so you can keep features your site actually uses while removing the rest.</p>
<ul>
<li>Disable WordPress emoji scripts and styles.</li>
<li>Remove Gutenberg block library CSS for classic themes.</li>
<li>Disable jQuery Migrate legacy compatibility layer.</li>
<li>Remove Dashicons for non-logged-in visitors.</li>
<li>Disable oEmbed discovery and scripts.</li>
<li>Disable XML-RPC for improved security.</li>
<li>Remove RSS feed links from page headers.</li>
<li>Prevent self-pingbacks on internal links.</li>
</ul>
<h4>Heartbeat Control</h4>
<p>The WordPress Heartbeat API sends AJAX requests every 15-60 seconds for features like autosave and login session management. SpeedForge lets you control or disable Heartbeat in different contexts to reduce server load and improve admin performance.</p>
<ul>
<li>Disable Heartbeat on frontend pages.</li>
<li>Control Heartbeat frequency in the post editor.</li>
<li>Adjust or disable Heartbeat in the admin dashboard.</li>
<li>Set custom intervals from 15 to 120 seconds.</li>
</ul>
<h4>Preloading & Prefetching</h4>
<p>SpeedForge implements modern browser preloading techniques to speed up navigation. DNS prefetch resolves domain names before users click links. Preconnect establishes early connections to important third-party origins. The Speculation Rules API prefetches entire pages when users hover over links for near-instant transitions.</p>
<ul>
<li>DNS prefetch for external domains.</li>
<li>Preconnect to critical third-party origins.</li>
<li>Custom domain configuration for prefetch and preconnect.</li>
<li>Speculation Rules API for link prefetching on hover.</li>
<li>Configurable speculation eagerness levels.</li>
<li>Hover prefetch for near-instant navigation.</li>
</ul>
<h4>Cloudflare Integration</h4>
<p>SpeedForge integrates with Cloudflare to automatically purge cached content when you update your site. Connect your Cloudflare account using your Zone ID and API Token to enable automatic cache invalidation. Development mode can be toggled directly from the SpeedForge dashboard when you need to bypass Cloudflare caching temporarily.</p>
<ul>
<li>Automatic Cloudflare cache purging on content updates.</li>
<li>Purge entire cache or specific URLs.</li>
<li>Toggle Development Mode from WordPress admin.</li>
<li>Compatible with Cloudflare APO for WordPress.</li>
</ul>
<h4>Database Cleanup</h4>
<p>SpeedForge removes database bloat that accumulates over time. Post revisions, auto-drafts, trashed content, spam comments, and expired transients consume database space and slow down queries. SpeedForge provides manual cleanup tools and scheduled automatic cleanup to maintain database efficiency.</p>
<ul>
<li>Remove post revisions, auto-drafts, and trashed posts.</li>
<li>Clean spam and trashed comments.</li>
<li>Delete expired transients.</li>
<li>Schedule automatic cleanup routines.</li>
</ul>
<h4>Speed Testing</h4>
<p>SpeedForge integrates with Google PageSpeed Insights API to provide speed testing directly from your dashboard. Core Web Vitals metrics are tracked over time so you can measure the impact of optimization changes. SpeedForge maps PageSpeed audit results to specific features and offers one-click fixes for common issues. A/B testing lets you compare different optimization settings to find the best configuration for your site.</p>
<ul>
<li>Built-in Google PageSpeed Insights integration.</li>
<li>Core Web Vitals tracking with history.</li>
<li>Audit-to-feature mapping with one-click fixes.</li>
<li>A/B testing to compare optimization settings.</li>
</ul>
<h4>Managed Hosting Compatibility</h4>
<p>SpeedForge automatically detects managed hosting environments and adjusts its behavior accordingly. On hosts like WordPress.com, Pressable, WP Engine, Kinsta, SiteGround, Cloudways, and Flywheel that provide their own caching systems, SpeedForge disables its page cache feature to avoid conflicts. CSS, JavaScript, image, and WooCommerce optimizations continue to work alongside the host-provided caching.</p>
<h4>External Services</h4>
<p>SpeedForge connects to the following external services. All connections are initiated only by admin actions or explicit feature configuration. No data is sent without user consent, and no visitor tracking occurs.</p>
<p><strong>Google PageSpeed Insights API</strong></p>
<p>When you run a speed test from the SpeedForge dashboard, your site URL is sent to the Google PageSpeed Insights API to analyze page performance and Core Web Vitals metrics. This connection only occurs when you manually initiate a speed test from the admin dashboard. No data is sent automatically and no visitor data is transmitted.</p>
<ul>
<li>What the service does: Analyzes web page performance and provides Core Web Vitals metrics.</li>
<li>What data is sent: The public URL of the page being tested.</li>
<li>When data is sent: Only when an admin manually clicks “Run Speed Test” in the SpeedForge dashboard.</li>
<li>Service: <a href="https://pagespeed.web.dev/" rel="nofollow ugc">Google PageSpeed Insights</a></li>
<li>Terms of Service: <a href="https://policies.google.com/terms" rel="nofollow ugc">Google Terms of Service</a></li>
<li>Privacy Policy: <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a></li>
</ul>
<p><strong>Cloudflare API (Optional)</strong></p>
<p>If you enable Cloudflare integration and provide your API credentials (Zone ID and API Token), SpeedForge connects to the Cloudflare API to purge cached content and toggle development mode. This connection only occurs when you configure Cloudflare settings, when cache purging is triggered by content updates, or when you manually purge Cloudflare cache from the dashboard.</p>
<ul>
<li>What the service does: Manages Cloudflare CDN cache for your domain.</li>
<li>What data is sent: Your Cloudflare API credentials (stored locally), zone ID, and URLs to purge.</li>
<li>When data is sent: When content is updated (automatic cache purge) or when an admin manually triggers a Cloudflare action.</li>
<li>Service: <a href="https://www.cloudflare.com/" rel="nofollow ugc">Cloudflare</a></li>
<li>Terms of Service: <a href="https://www.cloudflare.com/terms/" rel="nofollow ugc">Cloudflare Terms of Service</a></li>
<li>Privacy Policy: <a href="https://www.cloudflare.com/privacypolicy/" rel="nofollow ugc">Cloudflare Privacy Policy</a></li>
</ul>
<p><strong>Self-Hosting Third-Party Assets (Optional)</strong></p>
<p>When the “Self-Host Google Fonts” or “Self-Host Third-Party CSS/JS” features are enabled, SpeedForge downloads font files, CSS, and JavaScript from external CDNs (such as Google Fonts, Font Awesome, jsDelivr, cdnjs, and similar public CDNs) and stores them locally on your server. This eliminates external requests from your visitors’ browsers, improving both privacy and performance. The download occurs once (server-side, not visitor-triggered) and the files are cached locally for subsequent page loads.</p>
<ul>
<li>What the service does: Provides publicly available font, CSS, and JavaScript files.</li>
<li>What data is sent: Standard HTTP GET requests to download public assets. No visitor data is sent.</li>
<li>When data is sent: When an admin enables self-hosting and a previously uncached asset is encountered during a page load.</li>
<li>Services: <a href="https://fonts.google.com/" rel="nofollow ugc">Google Fonts</a>, <a href="https://fontawesome.com/" rel="nofollow ugc">Font Awesome</a>, <a href="https://www.jsdelivr.com/" rel="nofollow ugc">jsDelivr</a>, <a href="https://cdnjs.com/" rel="nofollow ugc">cdnjs</a>, and other public CDNs.</li>
<li>Google Fonts Terms: <a href="https://developers.google.com/fonts/faq" rel="nofollow ugc">Google Fonts FAQ</a></li>
<li>jsDelivr Terms: <a href="https://www.jsdelivr.com/terms" rel="nofollow ugc">jsDelivr Terms</a></li>
</ul>
<p><strong>Gravatar Self-Hosting (Optional)</strong></p>
<p>When the “Self-Host Gravatars” feature is enabled, SpeedForge downloads Gravatar avatar images from <code>gravatar.com</code> and stores them locally on your server. This eliminates external Gravatar requests from your visitors’ browsers, improving both privacy and performance. The download occurs server-side when a page containing Gravatar images is first loaded and the avatars are cached locally for subsequent page loads.</p>
<ul>
<li>What the service does: Gravatar provides user avatar images based on email address hashes.</li>
<li>What data is sent: Standard HTTP GET requests to download public avatar images from <code>gravatar.com</code>. No visitor personal data is sent beyond the Gravatar URL hash that is already present in the page HTML.</li>
<li>When data is sent: When the self-host Gravatars option is enabled and a page with Gravatar images is loaded for the first time (or when the local cache has expired).</li>
<li>Service: <a href="https://gravatar.com/" rel="nofollow ugc">Gravatar</a> (operated by Automattic)</li>
<li>Privacy Policy: <a href="https://automattic.com/privacy/" rel="nofollow ugc">Automattic Privacy Policy</a></li>
<li>Terms of Service: <a href="https://wordpress.com/tos/" rel="nofollow ugc">WordPress.com Terms of Service</a></li>
</ul>
<p><strong>DNS Prefetch and Preconnect (Optional)</strong></p>
<p>When DNS Prefetch or Preconnect features are enabled, SpeedForge adds resource hints to your page HTML headers. These hints tell visitors’ browsers to perform early DNS resolution or connection establishment to common third-party origins (such as Google Analytics, Google Tag Manager, Facebook, and popular CDNs). No data is sent from your server; the browser handles these connections natively. These hints only affect page load performance for visitors.</p>
<ul>
<li>What happens: HTML <code><link rel="dns-prefetch"></code> and <code><link rel="preconnect"></code> tags are added to the page head.</li>
<li>What data is sent: None from your server. The visitor’s browser performs standard DNS/connection operations.</li>
<li>When it happens: On every frontend page load when the feature is enabled.</li>
</ul>
<p><strong>Varnish Cache Purging (Automatic, Localhost Only)</strong></p>
<p>When SpeedForge detects a Varnish reverse proxy on the server, it sends HTTP PURGE requests to <code>127.0.0.1</code> (localhost) to clear cached pages after content updates. These requests never leave the server — they are sent to the local Varnish instance running on the same machine. No external network calls are made and no visitor data is involved.</p>
<ul>
<li>What the service does: Varnish is a local reverse proxy cache running on the same server.</li>
<li>What data is sent: HTTP PURGE requests to <code>127.0.0.1</code> containing the URL path to purge.</li>
<li>When data is sent: Automatically when post/page content is updated or when an admin manually clears the cache.</li>
<li>Note: These are strictly localhost requests that do not leave the server.</li>
</ul>
<p><strong>Nginx Cache Purging (Automatic, Same-Server Only)</strong></p>
<p>When SpeedForge detects an Nginx FastCGI cache or proxy cache setup, it sends HTTP purge requests to the server’s own domain to clear cached pages. These requests are directed at the server itself via its own hostname. No external services are contacted and no visitor data is involved.</p>
<ul>
<li>What the service does: Nginx cache is a local caching layer running on the same server.</li>
<li>What data is sent: HTTP GET requests to the server’s own purge endpoint containing the URL path to purge.</li>
<li>When data is sent: Automatically when post/page content is updated or when an admin manually clears the cache.</li>
<li>Note: These requests are directed at the same server and do not contact external services.</li>
</ul>
<h4>Privacy</h4>
<p>SpeedForge processes all optimization locally on your server. CSS minification, image compression, Critical CSS generation, and all other optimization features run entirely on your hosting environment with no external dependencies.</p>
<p>The only external connections are:</p>
<ul>
<li>Google PageSpeed Insights API when you manually run a speed test.</li>
<li>Cloudflare API if you enable and configure Cloudflare integration.</li>
<li>External CDN servers when self-hosting feature downloads assets to serve locally.</li>
<li>Gravatar servers when self-host Gravatars feature downloads avatar images to serve locally.</li>
</ul>
<p>SpeedForge does not include any tracking, analytics, or telemetry. No visitor data is collected or transmitted by the plugin.</p>


SpeedForge


SpeedForge is a great caching plugin for WordPress. It is very easy to set up, even for beginners. The interface is clean, and the settings are simple to understand. After installing it, my website speed improved noticeably. Lightweight, stable, and very user-friendly. Highly recommended!


Great and User-Friendly Caching Plugin

Speed up WordPress with page caching, critical CSS, image optimization, lazy loading, and more.

FBS Secure Optimize vs SpeedForge