promptlesswp

Promptless Forms is a lightweight WordPress form plugin built for developers and design-system-aware sites. Configure forms via JSON in the admin UI or via PHP code, render them with a shortcode, and send submissions to webhooks, email, or both.
Core features
<ul>
<li>JSON or PHP form configuration</li>
<li>13 field types: text, email, tel, textarea, select, radio, checkbox, file, hidden, message, section, date, and address (with Google Places autocomplete)</li>
<li>Multi-step forms with progress indicators</li>
<li>Conditional field visibility based on other field values</li>
<li>Column layouts (1/2, 1/3, 2/3, 1/4, 3/4) and section grouping</li>
<li>Webhook delivery with HMAC-SHA256 signing and SSRF protection</li>
<li>Email notifications with template variables</li>
<li>Spam protection: honeypot, timing check, and rate limiting</li>
<li>CSV export of form entries</li>
<li>File upload handling with magic-byte verification</li>
</ul>
Integration
When the Promptless WP plugin is active, Promptless Forms automatically inherits design tokens (colors, typography, border radius) from the global brand settings. Forms also support dark mode through Promptless’s <code>theme_variant</code> setting. The plugin works fully standalone with sensible defaults when Promptless WP is not active.
For developers
<ul>
<li>Stable hook surface for extending behavior (<code>pforms_submission_complete</code>, <code>pforms_webhook_payload</code>, <code>pforms_field_display_value</code>, etc.)</li>
<li>Connector REST API for external integration (default-disabled, opt-in via admin toggle)</li>
<li>WordPress coding standards compliant</li>
<li>Transactional InnoDB storage for entries</li>
</ul>
<h3>External Services</h3>
This plugin can optionally connect to external services. Each service is opt-in and requires explicit configuration by a site administrator.
Webhooks (when configured per-form): 
Submission data is POSTed to a URL of your choosing. The URL, request payload, and signing secret are all configured by the site administrator on a per-form basis. No data is sent until a webhook URL is configured.
Google Places API (when the Address field is used): 
The Address field uses Google’s Places API to provide address autocomplete. Requires a Google Places API key configured in the plugin settings. Address queries are sent to Google when users type in the field. See <a href="https://developers.google.com/maps/terms" rel="nofollow ugc">Google’s Places API Terms</a> and <a href="https://policies.google.com/privacy" rel="nofollow ugc">Privacy Policy</a>.
Twilio API (when configured): 
The optional Twilio module sends SMS messages and handles missed-call text-back workflows. Requires Twilio account credentials configured in the plugin settings. Phone numbers and message content are sent to Twilio for delivery. See <a href="https://www.twilio.com/legal/tos" rel="nofollow ugc">Twilio’s Terms of Service</a> and <a href="https://www.twilio.com/legal/privacy" rel="nofollow ugc">Privacy Policy</a>.
Claude Cowork Connector (default-disabled, opt-in): 
The Connector exposes a REST API allowing AI agents (such as Anthropic’s Claude Cowork) to manage forms via WordPress Application Passwords. Default state is disabled. To enable, an administrator must explicitly toggle the connector on in Form Entries → Connector and generate a per-user Application Password. No external requests are made by the connector — it only responds to authenticated incoming requests.

Promptless Forms

Lightweight forms with webhooks, multi-step support, and conditional logic. Inherits brand styling when Promptless WP is active.

dessky

Dessky Security is the ultralight plugin for basic Security Hardening. It is specially designed not to drain any resources from your website. Once you enable all major security measures your input is no longer required. Features include upload directory restriction, disabling of plugin/theme editor, admin username check and more.
This plugin was developed by <a href="https://dessky.com/" rel="nofollow ugc">Dessky Team</a>.
Dessky Team does not provide support for the Dessky Security on the WordPress.org forums. In order to get support or make a suggestion from a Dessky Team you will have to Join Our Open Community and <a href="https://discuss.dessky.org/t/dessky-security" rel="nofollow ugc">Start a Discussion</a>.
<a href="https://discuss.dessky.org/t/dessky-security" rel="nofollow ugc">DISCUSS WITH THE DESSKY TEAM</a>
<a href="https://discuss.dessky.org/t/dessky-security" rel="nofollow ugc">JOIN OUR OPEN COMMUNITY</a>: The purpose of this open community is to have a collective place where the community can help each other, and we can get some feedback to improve Dessky Security as well. Joining the community is also a great way to connect with like-minded people and share your experience.
You can also <a href="https://dessky.me/" rel="nofollow ugc">GET THE PREMIUM SUPPORT</a>
<a href="https://dessky.org/" rel="nofollow ugc">User Documentation</a>: Although Dessky Security is already easy to set up, we’ve put together tutorials, guides, and some knowledge bases to help you set up and get started with it.
I have further questions, how do I contact you?
Please fill up the <a href="https://dessky.com/contact/" rel="nofollow ugc">contact form</a> and we would be more than happy to assist.
Credits: Dessky Security is based on the ‘Sucuri WordPress Security’ plugin developed by <a href="https://profiles.wordpress.org/ddsucurinet/" rel="nofollow ugc">Daniel Cid</a>.

Dessky Security

Dessky Security is the ultralight plugin for basic Security Hardening. It is specially designed not to drain any resources from your website.

Promptless Forms vs Dessky Security