danialpg

SpeeSeek looks at your site from the inside and surfaces the hidden, server-side 
things that hurt real-world user experience — the things external tools like 
Lighthouse or PageSpeed can’t see. It explains every finding in plain language as 
What → Why it hurts → How to fix, with a copy-paste-ready snippet.
SpeeSeek is advise-only. It is not an optimizer and it never changes your data 
or your settings. It diagnoses; you decide. There is zero front-end footprint — 
nothing is added to your site’s public pages, nothing is added to autoload, and scans 
run on demand from the admin only.
<h4>Why it’s different</h4>
<ul>
<li>Reads what external tools can’t: autoloaded options bloat, cron backlog, database 
overhead, object cache / OPcache / page-cache configuration, page-builder weight.</li>
<li>Its own transparent Site Weight grade across four categories — Server Response, 
Database Weight, Request Load, and Maintenance Health — instead of a single opaque 
Google score.</li>
<li>Lightweight by design: read-only, on-demand, and it refuses to be the bloat it detects.</li>
</ul>
<h4>It remembers, so it’s a keeper — not a one-time scan</h4>
<ul>
<li>History & regression alerts — every completed scan is snapshotted, so SpeeSeek 
can tell you what changed since last time and which plugin or update caused it.</li>
<li>Per-plugin cost attribution — the “who’s the culprit” finder attributes autoloaded 
weight back to the plugins that created it.</li>
<li>Consequence translator — not “1.2 MB of autoload” but “~16 ms added to every page 
load,” with the math shown under an Advanced toggle. Never fake precision.</li>
<li>A “✓ what we verified is healthy” panel, so you can trust the verdict.</li>
</ul>
<h4>Scanners included</h4>
<ul>
<li>Environment (PHP version / EOL, memory limit)</li>
<li>Autoloaded Options — size + top offenders loaded on every request (signature finding)</li>
<li>Cost by Plugin, Plugin Footprint</li>
<li>Database Weight (expired transients, orphaned metadata, table overhead)</li>
<li>Post Revisions (page-builder aware), Media Library, Comment Hygiene</li>
<li>Scheduled Tasks (overdue / duplicate cron, cron-on-page-load)</li>
<li>Caching (persistent object cache, OPcache, page cache)</li>
<li>WooCommerce (Action Scheduler backlog, stale sessions — when active)</li>
<li>Page builders: generic builder weight plus a dedicated Elementor scanner</li>
<li>Jet / Crocoblock (custom-table weight, SmartFilters indexer, widget packs)</li>
</ul>
<h4>Optional deep profiler</h4>
On demand, SpeeSeek can install a temporary, removable must-use drop-in to measure 
(rather than estimate) real server render time, database time, query count, peak memory, 
front-end asset weight, and outbound HTTP during a single anonymous loopback request to 
your own home page. It is removed when you’re done.
<h4>Translations</h4>
Ships ready in English, German (de_DE), and Persian (fa_IR), with full RTL support for 
Persian. The German and Persian translations are AI-drafted and welcome a native-speaker 
review pass.
<h3>External services</h3>
SpeeSeek connects to external services in two clearly-scoped cases. No personal data and 
no content from your site is ever transmitted.
<ol>
<li>
WordPress.org API (api.wordpress.org) — The “External HTTP” scanner performs a 
single test request to <code>https://api.wordpress.org/core/stable-check/1.0/</code> to measure 
your server’s real outbound latency to a known-good endpoint. Only a standard HTTP GET 
is made; no data about your site is sent. This request only happens while you run a 
scan in the admin, and it respects the <code>WP_HTTP_BLOCK_EXTERNAL</code> constant. 
WordPress.org terms: https://wordpress.org/about/privacy/ .
</li>
<li>
SpeeSeek Benchmark service (opt-in, OFF by default) — If — and only if — you 
explicitly enable “Compare against other sites” in SpeeSeek’s settings, the plugin 
sends a small set of anonymous numeric “weight” metrics (for example: total 
autoloaded bytes, query count, database overhead size) to the SpeeSeek Benchmark API 
so it can show you where your site sits relative to aggregate percentile bands of 
other sites. No URLs, no site identity, no personal data, and no content are sent — 
only whitelisted numbers. This happens at most once per day, and never while the 
setting is disabled. 
Endpoint: <code>https://benchmark-backend-cf.leoworking96.workers.dev</code> (hosted on 
Cloudflare Workers). Service privacy & terms: 
https://benchmark-backend-cf.leoworking96.workers.dev/privacy . 
Cloudflare’s terms: https://www.cloudflare.com/website-terms/ .
</li>
</ol>
<h3>Source code and build</h3>
SpeeSeek ships its full, human-readable source. The admin dashboard is written in 
React/JSX and lives in the <code>src/</code> directory, bundled inside the plugin alongside 
the compiled assets in <code>build/</code>. The PHP in <code>includes/</code> has no build step.
The compiled <code>build/</code> assets are generated with the official WordPress build 
tooling (<code>@wordpress/scripts</code>, which wraps webpack/Babel). To regenerate them 
from source:
<pre><code>npm install
npm run build:assets
</code></pre>
That compiles <code>src/</code> into <code>build/</code>. No other build step is required.

SpeeSeek

Advise-only speed diagnostic scanner that finds the hidden, server-side things slowing your WordPress site and explains exactly how to fix each one.

npc01

NPC Maintenance Inspector performs 9-point health diagnostics on your WordPress site directly from the admin dashboard:
<ol>
<li>WordPress core updates — Detect missing core updates.</li>
<li>Plugin updates — List plugins with available updates.</li>
<li>Site Health issues — Extract critical issues from WP standard Site Health API.</li>
<li>PHP version — Warn on end-of-life PHP versions.</li>
<li>Error log analysis — Summarize debug.log entries and save a one-click backup to uploads/ for safe review.</li>
<li>File integrity — Detect suspicious code patterns in core files (eval / base64_decode / etc.) by comparing checksums against the WordPress.org Checksum API.</li>
<li>Suspicious files — Find unexpected PHP files in wp-content/uploads/, with built-in whitelist for known legitimate plugin files (Ajax Load More templates, WP STAGING index.php, AIOS firewall rules, etc.).</li>
<li>SSL certificate — Check days until expiration (warn under 30 days, critical at 0).</li>
<li>File permissions — Check critical files like wp-config.php, .htaccess, wp-content/.</li>
</ol>
Operational features:
<ul>
<li>History — Keep the last 10 diagnoses as a custom post type.</li>
<li>Scheduled auto-check — Run daily, weekly, or monthly via WP Cron.</li>
<li>Email notifications — Send alerts only on critical issues.</li>
<li>One-click debug.log clear — Truncate the log while preserving file permissions.</li>
<li>Optional AI report — Generate maintenance suggestions via Anthropic Claude API. Disabled by default; opt-in via a wp-config.php constant.</li>
</ul>
The plugin is locked to the user who activated it and to the original site URL, so it stays inert after backup restores to a different domain.
<h3>External services</h3>
This plugin can optionally connect to the Anthropic Claude API (<code>https://api.anthropic.com/v1/messages</code>) to generate AI-powered maintenance reports. This is the only external service the plugin ever contacts.
When is data sent?
<ul>
<li>When you manually click the “Generate AI Report” button in the admin.</li>
<li>When an automatic scheduled diagnosis detects a critical issue and notifications are enabled. In that case the AI report is generated once per critical run and attached to the notification email.</li>
</ul>
What data is sent?
<ul>
<li>The diagnosis result text only:
<ul>
<li>Site URL, site name, WordPress version, theme name</li>
<li>Counts of plugin updates / Site Health issues / error-log entries</li>
<li>PHP version, memory limit, max upload size</li>
<li>SSL expiration date and days remaining</li>
<li>File-permission status of critical files</li>
<li>Suspicious code patterns detected (function names like <code>eval</code>, <code>base64_decode</code>)</li>
</ul>
</li>
<li>No login data, no post content, no personal data of site visitors.</li>
</ul>
Is the data sent unconditionally?
No. The AI feature is completely disabled unless you define <code>NPCMI_API_KEY</code> in <code>wp-config.php</code>. Without that constant, no external connection to Anthropic is ever made.
Anthropic’s terms and privacy policy:
<ul>
<li>Consumer Terms of Service: https://www.anthropic.com/legal/consumer-terms</li>
<li>Privacy Policy: https://www.anthropic.com/legal/privacy</li>
<li>Commercial Terms of Service (if you use a paid API plan): https://www.anthropic.com/legal/commercial-terms</li>
</ul>
By enabling the AI report feature (i.e. by defining <code>NPCMI_API_KEY</code>), you agree to Anthropic’s applicable terms.

NPC Maintenance Inspector

WordPress maintenance health-check tool with 9-point diagnostics, history tracking, and optional AI-powered reports.

SpeeSeek vs NPC Maintenance Inspector