SysWP

<p>SysRadar is a <strong>server-side, privacy-first</strong> alternative to Google Analytics and Plausible — built in Brazil, hosted in Brazil, fully LGPD/GDPR-compliant.</p>
<p>Unlike GA4 (which requires cookies and complicated LGPD setup) and Plausible (which only sees human visitors with JavaScript enabled), SysRadar captures <strong>100% of real requests</strong> to your server: humans, AI bots (ClaudeBot, GPTBot, PerplexityBot), SEO crawlers (Ahrefs, Semrush), attackers (sqlmap, nuclei, wpscan), RSS readers, uptime monitors — all categorized in real time.</p>
<h4>Why this matters in 2026</h4>
<ul>
<li><strong>30 to 60% of your traffic</strong> is bots. You never knew — because GA4 and Plausible filter bots automatically. But it’s your server serving those bots, your bandwidth, your cost.</li>
<li><strong>AI crawlers</strong> (Claude, GPT, Perplexity) are indexing your content right now. If you don’t know what they are reading, you can’t optimize. The first sites to appear in AI answers will win the next decade of SEO.</li>
<li><strong>Attackers</strong> are continuously scanning <code>/wp-admin/</code>, <code>/xmlrpc.php</code>, <code>/.env</code>. Wordfence Free does not block them. Cloudflare lets them through. You don’t even know they exist.</li>
<li><strong>Web Vitals</strong> (LCP, CLS, INP) — Google ranks search results by them. Lighthouse on your machine ≠ real user. SysRadar measures with <strong>RUM (Real User Monitoring) data</strong>.</li>
</ul>
<h4>What the plugin does</h4>
<ol>
<li><strong>Injects the tracker</strong> (one line of JS, ~2KB minified, async) into the <code><head></code> of all front-end pages via the <code>wp_head</code> hook</li>
<li><strong>Live Dashboard inside WordPress</strong> (since v1.2.0): your last 24h of traffic, AI crawlers, suspected attacks and a real-time live counter — all visible without leaving wp-admin. Cached locally for 5 min; the fetch fires ONLY when an administrator opens the SysRadar page (zero impact on visitor load times)</li>
<li><strong>Auto-detects</strong> WooCommerce, Elementor, Yoast SEO, Rank Math, Contact Form 7, BuddyPress, LearnDash, bbPress, All-in-One SEO</li>
<li><strong>Auto-excludes:</strong> admin pages, AJAX, REST API, cron jobs, and logged-in users with edit-posts capability (admins/editors)</li>
<li><strong>Honors</strong> <code>DNT: 1</code> (Do Not Track) optionally</li>
<li><strong>Compatible</strong> with cache plugins (WP Rocket, W3 Total Cache, LiteSpeed Cache, Cloudflare APO)</li>
<li><strong>Custom domain support</strong> (Pro+ plan): use <code>analytics.yoursite.com</code> to bypass aggressive ad-blockers</li>
<li><strong>Zero queries</strong> to the WordPress database (settings stored in <code>wp_options</code>)</li>
</ol>
<h4>Who is it for</h4>
<ul>
<li><strong>Bloggers and content creators</strong> — discover which AI crawlers are indexing your content (ChatGPT, Claude, Perplexity)</li>
<li><strong>E-commerce (WooCommerce)</strong> — real channel attribution, price-scraper detection, per-product Web Vitals</li>
<li><strong>Agencies</strong> — manage analytics for multiple client sites in a single dashboard (Agency plan)</li>
<li><strong>Developers</strong> — Web Vitals degradation alerts, automatic JS error capture, REST API access</li>
</ul>
<h4>Privacy & compliance</h4>
<ul>
<li><strong>IP anonymization runs in the plugin, before transmission</strong> — last octet zeroed (IPv4) / last 80 bits zeroed (IPv6) inside your WordPress install, so SysRadar never receives identifiable IP addresses</li>
<li>First-party cookies only (<code>_rdid</code>, <code>_rds</code>) — no cross-site tracking, no fingerprinting. Cookieless mode is available as a one-click toggle</li>
<li>Split tracking toggles (since v1.1.1) — disable the front-end pixel and the server-side beacon independently</li>
<li>GDPR/LGPD-friendly: no data brokers, no impression auctions, no persona-building</li>
<li>Optional Honor DNT (Do Not Track) support</li>
<li>Servers located in Brazil; data processed under LGPD</li>
<li>No dependency on Google, Facebook, or any ad-tech vendor</li>
</ul>
<h4>Privacy policy snippet for site owners</h4>
<p>You are the data controller for visitors of your site. The paragraph below is a starting point you can paste (and adapt) into your own privacy policy when this plugin is active. Replace the example placeholders with your specifics.</p>
<blockquote>
<p><strong>Analytics — SysRadar.</strong> We use SysRadar (operated by SysWP, Brazil) for privacy-first server-side analytics. SysRadar receives the page URL you visit, the referrer URL, your user-agent, anonymized IP (last octet zeroed before it leaves our server), Web Vitals metrics (LCP / FCP / TTFB / CLS / INP), and security telemetry on suspicious requests. SysRadar never sets third-party cookies and is configured here in [cookieless mode / standard mode]. We process this data under [legitimate interest in security monitoring / your consent for analytics], depending on the feature. SysRadar privacy policy: https://radar.syswp.com.br/privacy/. To exercise your LGPD/GDPR rights, contact us at [your email].</p>
</blockquote>
<p>If you enable cookieless mode in the plugin settings, the <code>_rdid</code> and <code>_rds</code> first-party cookies are not set and you typically do not need a cookie consent banner for SysRadar.</p>
<h4>Data subject rights walkthrough</h4>
<p>Under LGPD (Brazil) Art. 18 and GDPR (EU) Art. 15–17, your visitors can request access to, correction of, deletion of, and portability of their personal data. Because SysRadar minimizes data at source (anonymized IPs, no names, no emails, no persistent cross-site identifier), most data subject requests are quick to answer:</p>
<ul>
<li><strong>Access:</strong> show the visitor the categories of data collected — see the table in the plugin’s Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> SysRadar page and the SysRadar privacy policy at https://radar.syswp.com.br/privacy/.</li>
<li><strong>Correction:</strong> SysRadar does not collect identifiable data that can be “corrected” in the LGPD/GDPR sense. If a visitor still requests correction, document the request and respond confirming the data is anonymized.</li>
<li><strong>Deletion:</strong> events are automatically purged after your plan retention window (7 to 180 days). For earlier deletion of events tied to a specific anonymized IP, the site owner can email contato@syswp.com.br with the timeframe and the IP prefix.</li>
<li><strong>Portability:</strong> the site owner can export all events for their site via the dashboard <span aria-hidden="true" class="wp-exclude-emoji">→</span> Account <span aria-hidden="true" class="wp-exclude-emoji">→</span> Export Data.</li>
<li><strong>Objection / withdrawal of consent:</strong> if the visitor enabled DNT in their browser and you have “Honor DNT” turned on in the plugin, they are automatically not tracked. They can also block first-party cookies in their browser.</li>
</ul>
<h4>Pricing</h4>
<p>Free permanent plan with 1 site. Automatic 7-day Pro trial on signup (no credit card). Full pricing and plan details at https://radar.syswp.com.br/pricing.</p>
<h3>Roadmap</h3>
<h4>v1.2 (Q3 2026)</h4>
<ul>
<li>Mini-dashboard in WP admin showing last 24h numbers</li>
<li>Web Vitals widget in the WP admin</li>
</ul>
<h4>v1.3 (Q3 2026)</h4>
<ul>
<li>Auto-detection of SysWP ecosystem siblings + single sign-on via SSO HMAC</li>
<li>Integration with SysRadar API to fetch config remotely</li>
</ul>
<h4>v1.4 (Q4 2026)</h4>
<ul>
<li>Server-side events (S2S) — captures even with the most aggressive ad-blockers</li>
<li>Block AI crawlers directly from the plugin (optional)</li>
</ul>
<h3>External services</h3>
<p>This plugin connects to the SysRadar service at https://radar.syswp.com.br. There are two distinct outbound transmissions, both fully disclosed below.</p>
<h4>(1) Front-end JS pixel</h4>
<ul>
<li><strong>When it fires:</strong> on every front-end page view from a non-excluded visitor (admins are excluded by default; logged-in users with edit-posts capability are skipped).</li>
<li><strong>Transport:</strong> an async <code><script></code> tag loaded from <code>https://radar.syswp.com.br/p/{site_id}.js</code> runs in the visitor’s browser and sends measurement events back to the same domain.</li>
<li><strong>Data sent:</strong> anonymized IP (last octet zeroed in your server before the script even runs, as the pixel is keyed to your site), page URL, referrer URL, user-agent string, browser locale and timezone, Web Vitals metrics (LCP, FCP, TTFB, CLS, INP).</li>
<li><strong>Cookies set:</strong> <code>_rdid</code> and <code>_rds</code> first-party cookies — unless cookieless mode is enabled in the plugin settings, in which case no cookies are set.</li>
<li><strong>Legal basis:</strong> consent (cookie + analytics) or legitimate interest depending on your jurisdiction. See the “Privacy & compliance” section above.</li>
</ul>
<h4>(2) Server-side beacon (new in v1.1.0+)</h4>
<ul>
<li><strong>When it fires:</strong> only for requests the JS pixel cannot see — unauthenticated requests to <code>/wp-json/</code>, <code>xmlrpc.php</code>, <code>admin-ajax.php</code>, <code>wp-login.php</code>, and direct probes of <code>/wp-admin/</code>. Skipped for cron, WP-CLI, and excluded users.</li>
<li><strong>Transport:</strong> a fire-and-forget <code>wp_remote_post</code> to <code>https://radar.syswp.com.br/api/v1/pixel/server-beacon</code>, dispatched on the WordPress <code>shutdown</code> action AFTER the page response is delivered, using <code>fastcgi_finish_request()</code> + <code>blocking => false</code> for zero added page latency.</li>
<li><strong>Data sent:</strong> site ID, HTTP method, request URI (truncated to 500 chars), anonymized IP (last octet zeroed inside this plugin before transmission), user-agent (truncated to 1000 chars), referer (truncated, escaped), HTTP response status code, request-type label (rest / xmlrpc / ajax / login / admin_unauth / other), plugin version, DNT header value, cookieless-mode flag.</li>
<li><strong>Data NOT sent:</strong> logged-in user identities, post content, form submissions, payment data, cookies, session tokens — none of these ever transit the beacon.</li>
<li><strong>Legal basis:</strong> legitimate interest in security monitoring under LGPD Art. 7º IX / GDPR Art. 6(1)(f). No visitor consent is required for security telemetry of suspicious unauthenticated requests, per regulator guidance. Disclosure remains mandatory and is provided in the privacy policy snippet above.</li>
</ul>
<h4>(3) Install / deactivation ping (new in v1.3.0)</h4>
<ul>
<li><strong>When it fires:</strong> twice in the lifetime of an install — once on <code>register_activation_hook</code> (plugin activation) and once on <code>register_deactivation_hook</code> (plugin deactivation). Never on uninstall (most plugins cannot make HTTP calls during the uninstall hook). No periodic pings, no per-request pings, no scheduled pings.</li>
<li><strong>Transport:</strong> a fire-and-forget <code>wp_remote_post</code> to <code>https://radar.syswp.com.br/api/v1/plugin/install-event</code> (activation) or <code>/api/v1/plugin/install-deactivate</code>, with <code>blocking => false</code> so it never delays activation/deactivation.</li>
<li><strong>Data sent:</strong> anonymous install ID (UUID v4 generated locally on first activation and stored in <code>wp_options</code>; not derived from any user data), site domain (e.g. <code>example.com</code>), plugin version, WordPress version, PHP version, multisite flag.</li>
<li><strong>Data NOT sent:</strong> no admin email, no usernames, no user data, no visitor data, no IP, no cookies, no site title, no post content. The ping is strictly an installed-base counter for the plugin.</li>
<li><strong>How to disable:</strong> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> SysRadar <span aria-hidden="true" class="wp-exclude-emoji">→</span> “Plugin telemetry” <span aria-hidden="true" class="wp-exclude-emoji">→</span> check “Disable plugin telemetry” <span aria-hidden="true" class="wp-exclude-emoji">→</span> Save. Once disabled, no further activation/deactivation pings are sent.</li>
<li><strong>Legal basis:</strong> legitimate interest under LGPD Art. 7º IX / GDPR Art. 6(1)(f) — knowing roughly how many installs are active and on which WordPress/PHP versions is necessary to keep the plugin compatible and supported. No visitor consent is involved (the ping originates from the WordPress site itself, not from any visitor).</li>
</ul>
<h4>Common to all three</h4>
<ul>
<li>Servers are located in Brazil.</li>
<li>Data is processed in compliance with LGPD/GDPR.</li>
<li><code>sslverify</code> is always <code>true</code> on outbound HTTP — never relaxed.</li>
<li>No personally identifiable information (no name, no email, no full IP, no cross-site identifier) leaves your WordPress install.</li>
</ul>
<h4>Service links</h4>
<ul>
<li>Service URL: https://radar.syswp.com.br</li>
<li>Privacy policy: https://radar.syswp.com.br/privacy/</li>
<li>Terms of service: https://radar.syswp.com.br/terms/</li>
<li>Plugin setup + LGPD guide: https://radar.syswp.com.br/docs/plugin-setup/</li>
</ul>


SysRadar

Server-side analytics. Sees 100% of traffic (including bots and attackers), real Web Vitals, UTM attribution, rage clicks. Privacy-first.

speedien

Nestify

<p><strong>This plugin only supports WordPress sites hosted on https://nestify.io. You can signup for a free trial subscription at https://nestify.io</strong></p>
<p>Speedien optmizes your site for best performance on desktop and mobile devices automatically. No coding required. We start by prioritizing resources needed for above-the-fold content and deferring everything else. This helps improve core web vitals metrics automatically and help with search engine rankings.</p>
<p>This plugin enables a high speed global CDN that automatically optimizes site’s static assets, images, and videos. CDN also converts images to WebP format to reduce the file size. Images are automatically resized according to visitor’s screen size.</p>
<p>This core web vitals booster plugin is used to link your speedien.com account and WordPress. After the plugin is installed and activated, your site’s contents are automatically optimized on our cloud servers. These optimized content are then served by WordPress from the cache, which minimizes the response time or TTFB.</p>
<p>This plugin also optimizes your site for marketing campaigns as well as paid traffic or CPC. Usually email marketing campaigns and Facebook or Google Ads add unique query parameters to each visitor’s request. This causes typical cache plugins to bypass cache, making them ineffective in real-world usage. With Speedien, all marketing tags, ad click IDs are automatically ignored and your visitors receive instant response from cache.</p>
<p>This plugin intelligently excludes visitors from cache when they are making any WooCommerce transactions. If you update your site, blog posts, or pages from wp-admin, these pages are automatically removed from the cache and preloaded again with fresh content.</p>
<p>Speedien service includes 24×7 support with 1 hour response time or less. If you run into any issues or need help optimizing your site further, our web performance experts are ready to assist. We also monitor core web vitals of your website each day and send you a report. If your site’s score changes by more than 10 points, it automatically starts a review process on our end.</p>
<p>Using this plugin along with a Speedien.com subscription helps you stay on top of your site’s performance and improve conversions as well as SEO rankings.</p>
<p>Speedien optmizes your site for best performance on desktop and mobile devices automatically. No coding required. We start by prioritizing resources needed for above-the-fold content and deferring everything else. This helps improve core web vitals metrics automatically and help with search engine rankings.</p>
<p>Speedien is a cloud based service that performs the heavy lifting on remote servers. This approach ensures that your hosting performance plays a very little role in overall site speed.</p>
<p>This plugin enables a high speed global CDN that automatically optimizes site’s static assets, images, and videos. CDN also converts images to WebP format to reduce the file size. Images are automatically resized according to visitor’s screen size.</p>
<p>This core web vitals booster plugin is used to link your speedien.com account and WordPress. After the plugin is installed and activated, your site’s contents are automatically optimized on our cloud servers. These optimized content are then served by WordPress from the cache, which minimizes the response time or TTFB.</p>
<p>This plugin also optimizes your site for marketing campaigns as well as paid traffic or CPC. Usually email marketing campaigns and Facebook or Google Ads add unique query parameters to each visitor’s request. This causes typical cache plugins to bypass cache, making them ineffective in real-world usage. With Speedien, all marketing tags, ad click IDs are automatically ignored and your visitors receive instant response from cache.</p>
<p>This plugin intelligently excludes visitors from cache when they are making any WooCommerce transactions. If you update your site, blog posts, or pages from wp-admin, these pages are automatically removed from the cache and preloaded again with fresh content.</p>
<p>Speedien service includes 24×7 support with 1 hour response time or less. If you run into any issues or need help optimizing your site further, our web performance experts are ready to assist. We also monitor core web vitals of your website each day and send you a report. If your site’s score changes by more than 10 points, it automatically starts a review process on our end.</p>
<p>Using this plugin along with a Speedien.com subscription helps you stay on top of your site’s performance and improve conversions as well as SEO rankings.</p>
<p><strong>Features:<br />
Cloud Based Optimization</strong><br />
Your site’s frontend code is optimized on our cloud servers and delivered using our global CDN</p>
<p><strong>HTML & CSS Optimization</strong><br />
Speedien automatically optimizes your site’s code, generate critical path CSS, and reorder third-party scripts</p>
<p><strong>Image Optimization</strong><br />
All plans include responsive image sizing, lazy loading, and automatic WebP conversion</p>
<p><strong>Daily Speed Reports</strong><br />
Receive daily report of core web vitals including alerts if the score changes by more than 10 points</p>
<p><strong>Priority Support</strong><br />
All paid subscriptions have access to 24×7 priority support with 1 hour response time or less</p>
<h3>Known incompatible plugins</h3>
<p>This plugin contains functionality that overlaps with the following plugins. It is recommended that you deactivate these plugins when using core web vitals booster.</p>
<ul>
<li>Autoptimize</li>
<li>Breeze</li>
<li>Cloudflare</li>
<li>Comet Cache by WP Sharks</li>
<li>EWWW Image Optimizer</li>
<li>Hummingbird</li>
<li>Imagify</li>
<li>JetPack</li>
<li>Lazy Load</li>
<li>Litespeed Cache</li>
<li>Nitropack</li>
<li>PageSpeed Ninja</li>
<li>Perfmatters</li>
<li>PhastPress </li>
<li>SG Optimizer</li>
<li>ShortPixel</li>
<li>Smush</li>
<li>Swift Performance</li>
<li>W3 Total Cache</li>
<li>WP Cloudflare</li>
<li>WP Fastest Cache</li>
<li>WP Optimize</li>
<li>WP Rocket</li>
<li>WP Super Cache</li>
</ul>
<h3>3rd Party Services Used By The Speedien Plugin</h3>
<p>This plugin acts as a wrapper to our page optimization service. It communicates with our cloud infrastructure using HTTP API over TLS encrypted layer. To learn more about Speedien.com, the data we collect, and information about our service, please visit the following links:</p>
<ul>
<li>Speedien website – <a href="https://speedien.com/" rel="nofollow ugc">https://speedien.com/</a></li>
<li>Speedien Terms of Service – <a href="https://speedien.com/terms-of-service/" rel="nofollow ugc">https://speedien.com/terms-of-service/</a></li>
<li>Speedien Privacy Policy – <a href="https://speedien.com/privacy-policy/" rel="nofollow ugc">https://speedien.com/privacy-policy/</a></li>
</ul>
<p>Speedien uses Nestify.io for WordPress hosting and optimization services. For more information about Nestify, please visit:</p>
<ul>
<li>Nestify website – <a href="https://nestify.io/" rel="nofollow ugc">https://nestify.io</a></li>
<li>Nestify Terms of Service – <a href="https://nestify.io/terms-of-service/" rel="nofollow ugc">https://nestify.io/terms-of-service/</a></li>
<li>Nestify Privacy Policy – <a href="https://nestify.io/privacy-policy/" rel="nofollow ugc">https://nestify.io/privacy-policy/</a></li>
</ul>
<p>Speedien uses Bunny CDN for some of our optimization functionality. For more information about Bunny CDN, please visit:</p>
<ul>
<li>BunnyCDN website – <a href="https://bunnycdn.com/" rel="nofollow ugc">https://bunnycdn.com/</a></li>
<li>BunnyCDN Terms of Service – <a href="https://bunnycdn.com/tos" rel="nofollow ugc">https://bunnycdn.com/tos</a></li>
<li>Bunny CDN Privacy & Data Policy – <a href="https://bunnycdn.com/privacy" rel="nofollow ugc">https://bunnycdn.com/privacy</a></li>
</ul>


Core Web Vitals Booster

This plugin appears to work flawlessly.
It increased the site's score up by a couple points.

It's a good substitute for NitroPack.
The best plugin to optimise page speed instantly.

Elevates Site's Page Speed score

Core web vitals booster for Nestify.io. This plugin will optimize pagespeed of your sites hosted on Nestify.

SysRadar vs Core Web Vitals Booster