Marwan Hatem

SPM by Marwan is a professional-grade diagnostics and intelligence platform designed for WordPress administrators and developers. It provides deep visibility into your WordPress ecosystem, offering real-time monitoring, security auditing, and performance profiling to ensure your site remains fast, secure, and stable.
<h3>The Problem</h3>
Managing a modern WordPress ecosystem is inherently complex. Site owners and developers frequently struggle with:
<ul>
<li>Slow Extensions: Identifying which specific extension is degrading page load times or consuming excessive server resources.</li>
<li>Hidden PHP Errors: Unseen warnings and fatal errors that silently break functionality or create vulnerabilities.</li>
<li>Security Risks: Unmaintained, abandoned, or vulnerable code exposing the site to potential exploits.</li>
<li>Trust Issues: Uncertainty regarding an extension’s origin, development standards, and code quality.</li>
<li>Update Degradation: Performance regressions and unexpected conflicts introduced immediately after updates.</li>
</ul>
<h3>Core Features</h3>
<ul>
<li>Real-Time Monitoring Engine: Actively tracks resource consumption, database queries, and execution times for every active extension. Identifies performance bottlenecks as they happen, preventing systemic slowdowns.</li>
<li>Performance Diagnostics: Deep-dive profiling for individual extensions. Analyzes memory footprint and script execution to provide actionable intelligence on resource utilization.</li>
<li>Security & Integrity Scanner: Proactively audits installed extensions against known vulnerability databases, flags high-risk code patterns, and verifies WordPress core files against official checksums to detect malicious tampering.</li>
<li>Japanese SEO Spam Auto-Fix Engine: A specialized, deep-scanning engine designed to detect and eradicate the notorious “Japanese Keyword Hack”. Features a one-click Auto-Fix that intelligently restores or quarantines hijacked posts to protect your Google ranking without destroying your original content.</li>
</ul>
<h3>Advanced Security: Defeating the Japanese SEO Keyword Hack</h3>
The “Japanese Keyword Hack” is a devastating black-hat SEO attack where hackers exploit vulnerabilities in outdated plugins to inject massive amounts of auto-generated Japanese text and malicious links into your database and core files. This causes Google to flag your site as “hacked,” instantly destroying your SEO ranking.
SPM by Marwan includes a highly specialized engine specifically built to defeat this attack:
<ul>
<li>Deep Database Scanning: Actively crawls your <code>wp_posts</code> and <code>wp_options</code> tables, utilizing advanced Unicode block detection to find injected Japanese Hiragana, Katakana, and Kanji spam hidden within your legitimate content.</li>
<li>Intelligent Auto-Fix (No Data Loss): When you click “Auto-Fix”, the scanner doesn’t just blindly delete your hijacked posts. Instead, it scans the WordPress Revision History for each infected post. It finds the last “clean” version of your post (before the hacker touched it) and seamlessly restores it.</li>
<li>Fail-Safe Quarantining: If a post was created entirely by the hacker (meaning no clean revision exists), or if you have revisions disabled, the engine will safely quarantine the post by setting its status to Draft. This instantly removes the spam from the public internet—stopping the SEO bleed—while preserving the draft in your admin panel so you don’t lose any data.</li>
<li>Orphaned File Detection: Scans your entire server structure to locate and quarantine backdoor PHP scripts that hackers leave behind to reinfect your site after you clean it.</li>
<li>Core Checksum Verification: Verifies every single WordPress core file against the official WordPress.org cryptographic checksums to detect hidden cloaking scripts.</li>
<li>Trust Verification: Evaluates code based on developer reputation, update frequency, repository standing, and code integrity. Establishes a trust score to help you make informed decisions about your technology stack.</li>
<li>Historical Analytics: Maintains a robust ledger of performance and security metrics over time. Visualizes trends to help you understand the long-term impact of specific extensions and updates.</li>
<li>Action Layer (Scan / Safe Mode / Reporting): Provides immediate remediation tools. Execute targeted scans, isolate problematic extensions using Safe Mode, and generate comprehensive diagnostics reports.</li>
</ul>
<h3>External Services</h3>
This plugin utilizes the WordPress.org Plugins API (https://api.wordpress.org) to verify plugin licenses and retrieve information about installed plugins. 
* What data is sent: The names and slugs of your active plugins are sent in the API request. 
* When it is sent: Data is sent when the plugin performs a scheduled background scan or when you manually click “Deep Scan” or “Refresh Now” on the dashboard. 
* Why it is used: To verify that the plugins running on your site are authentic, properly licensed, and available on the official WordPress.org directory, which enhances your site’s security and trust metrics.
For more information, please refer to the <a href="https://wordpress.org/about/privacy/" rel="ugc">WordPress.org Privacy Policy</a>.

SPM by Marwan

Tracks load time and PHP errors for each active extension, storing logs in a custom database table.

nintechnet

bruandet

<h4>A profiler to measure the performance of your WordPress plugins and themes.</h4>
Code Profiler helps you to measure the performance of your plugins and themes at the PHP level and to quickly find any potential problem in your WordPress installation.
You can profile the frontend and backend of WordPress, as well a cron events, a custom URL, send a POST payload, custom cookies and HTTP headers to profile a contact form, a checkout process or an AJAX action among many other possibilities.
It generates an extremely detailed and easy to read analysis in the form of charts and tables that shows not only which plugin or theme, but also which PHP script, class, method and function is slowing down your website. It displays many useful additional information such as database queries, file I/O operations and disk I/O usage as well.
It makes it very simple to locate any bottleneck problem in your themes or plugins in order to solve it and speed up your website. 
Install, activate it and you can start profiling your site right away.
<iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/3PLDk-ZvQtU?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe>
<h4>Features</h4>
<ul>
<li>Plugins & themes performance profiling.</li>
<li>[Pro] Scripts performance profiling.</li>
<li>[Pro] Methods & functions performance profiling.</li>
<li>[Pro] Database queries performance.</li>
<li>[Pro] Remote connections monitoring.</li>
<li>[Pro] File I/O operations monitoring.</li>
<li>File I/O statistics.</li>
<li>Disk I/O monitoring.</li>
<li>WP-CLI integration.</li>
<li>Export charts in PNG image format.</li>
<li>GET/POST methods, custom cookies and HTTP headers.</li>
<li>[Pro] Export all tables and charts in CSV file format.</li>
<li>[Pro] Filtering options</li>
</ul>
Learn more about <a href="https://nintechnet.com/codeprofiler/" rel="nofollow ugc">Code Profiler Pro</a>.

Code Profiler – WordPress Performance Profiling and Debugging Made Easy

Kudos to this amazing plugin. This was a dream, and now it's real!

The dream of many developer is now real


I am a developer of premium plugins, and I was able to discover a real bottleneck in our own plugin with this profiling tool. I use the PRO version for this, worth any money, and the breakdown by script file / method / execution time is great!



I don't know what magic is behind this (probably the calculation based on the backtrace), but it's awesome and doesn't require another PHP extension.


This is truly amazing!


This plugin is not much good without the pro upgrade. Seems unfair that I need to buy an annual subscription so I can run this plugin once or twice to fix issues and then never use it again. I understand the product  needs to be maintained but the fee is way too high for a single use. 


Pro is too expensive


This worked surprisingly well! Very useful settings. Much better than the old P3 profiler.  


Worked surprisingly well


I love Code Profiler, with it I can figure out which plugins have a poor performance and I can think about if this plugin is really that important to have or if I can just throw it out.



After having a specific problem with my site I posted a feature request in the forum, they were working on it quickly and the support was very good! I bought the premium version and I am impressed. I could lower the loading speed of some of my sites by 50-70% because Code Profiler helped me identify the problems.


I love it sooo much


Having looked at the screenshots before installing this plugin, I was dismayed to find that most of them refer to the premium version. 



I don't think it's acceptable that the screenshots attached to the free version of the plugin should be for the paid-for pro version - this is false advertising in my eyes. 


Deceptive advertising practices


Great support that goes far beyond supporting the plugin itself 🙏😊


Great support


Thanks, bought premium after free version showed a problem with WP Offload Media plugin. Pro version showed much more, glad I purchased.


Excelent


It's hard to believe you get all this for free. I can't even imagine what the paid version could offer more than the free. Thanks a lot.


Perfect

Very nice plugin and coded well!

So good

A profiler to measure the performance of your WordPress plugins and themes.

SPM by Marwan vs Code Profiler – WordPress Performance Profiling and Debugging Made Easy