One plugin that optimizes Core Web Vitals and hardens security — with a real PageSpeed Insights monitor and a transparent Security Score, not vague promises.
Built to work alongside what you already run
Image optimization, script cleanup, security hardening, and the Core Web Vitals Monitor all work with zero license. Pro unlocks more — it doesn't unlock "working."
The Monitor calls Google's actual PageSpeed Insights API for genuine Lighthouse metrics — First Contentful Paint, LCP, TBT, CLS, Speed Index — not a simulated guess.
Most tools make you choose. This one hardens your site and speeds it up from the same dashboard, with a transparent Security Score you can actually explain.
Every optimization is independently toggleable, risk-tiered, and designed to degrade gracefully — a misconfiguration reports as "off," it doesn't take your site down.
Automatic WebP conversion, LCP image prioritization, and JPEG quality tuning — the levers that move your Largest Contentful Paint the most.
Render-blocking cleanup, CSS minification, self-hosted fonts, and over a dozen WordPress bloat-removal toggles.
Hide your WordPress version, block user enumeration, disable file editing, and get a transparent Security Score with a real SSL certificate checker.
Real Lighthouse data on demand or on a schedule, color-coded against Google's own thresholds, with history tracked over time.
Delay JavaScript execution, a live Script Manager, CDN rewriting, Speculative Loading, and WooCommerce-specific optimization.
Automatically steps aside for WP Rocket, LiteSpeed Cache, and other caching plugins — no double-caching conflicts.
This plugin is new, so we won't invent customer case studies. Here's what's true about the techniques it uses — independent of any specific site.
Typical file-size reduction converting JPEG/PNG images to WebP at equivalent visual quality — a well-documented, general image-compression fact, not a specific claim about your site.
Removed per toggle for things like emoji scripts, embed scripts, and Dashicons — small individually, additive across a dozen+ free toggles.
Server response time is usually the single biggest lever outside any plugin's control — the Diagnostics panel says this plainly instead of promising a guaranteed score.
Website speed optimization isn't one setting — it's a stack of layers, each with its own specific fixes. Here's exactly what this plugin does at every layer, and which Core Web Vitals metric each one moves.
Time to First Byte is usually the single biggest lever on Core Web Vitals that's within a plugin's reach. Every time WordPress serves a page, it runs PHP, queries the database, and assembles the HTML from scratch — for a logged-out visitor viewing a page nobody has edited since the last visit, that's wasted work. This plugin's optional page cache stores a static, pre-built copy of each page and serves that instead, skipping WordPress's full bootstrap entirely for repeat visits. It automatically detects WP Rocket, LiteSpeed Cache, W3 Total Cache, and other caching plugins and steps aside rather than double-caching. Database housekeeping (cleaning expired transients, limiting bloated post-revision history) keeps the underlying queries fast as your site grows, and one-click browser caching and GZIP/Brotli compression headers reduce how much has to travel over the network on every request, cache plugin or not.
Images are the most common Largest Contentful Paint bottleneck on real websites. This plugin converts uploaded JPEG/PNG images to WebP automatically — typically 25–35% smaller at equivalent visual quality — and specifically identifies whichever image actually renders first on any given page (homepage, post, archive, regardless of theme structure) to remove lazy-loading from it, add fetchpriority="high", and preload it, which is the exact combination Google's own guidance recommends for LCP images. JPEG quality is also tuned to a sensible default that's visually near-identical but meaningfully smaller.
First Contentful Paint and responsiveness both suffer when the browser has to download, parse, and execute a large amount of CSS/JS before it can paint or respond to input. This plugin minifies local stylesheets (a string-aware minifier that never corrupts content inside quotes), removes render-blocking resources WordPress loads by default that most sites never use (emoji scripts, oEmbed discovery, Dashicons on the frontend), defers non-essential JavaScript so it loads after the page has already painted, and loads stylesheets without blocking render using the standard preload-and-swap pattern. The separate Pro edition adds delaying JavaScript execution entirely until a visitor actually interacts with the page — the single biggest lever available for Total Blocking Time and Interaction to Next Paint, since most third-party scripts (analytics, chat widgets, marketing pixels) have no real reason to compete for main-thread time before a visitor has engaged at all.
Loading web fonts from a third-party domain adds a DNS lookup and a new connection to the critical rendering path before any text can render in that font — a real, measurable FCP cost. This plugin downloads any Google Fonts your theme or plugins enqueue once, and serves them from your own domain afterward, removing that third-party connection and improving visitor privacy in the same move.
Page builders are convenient but frequently load their full asset library (icon fonts, animation libraries, slider scripts) on every single page, whether or not that specific page uses them. This plugin detects Elementor specifically, reports on Elementor's own built-in optimization settings, and can dequeue Elementor's global assets on any page that wasn't actually built with it — reducing bytes and requests on ordinary blog posts and archive pages without touching pages that genuinely need those assets.
Technical SEO and page experience aren't only about milliseconds. This plugin also includes a full security-hardening layer — hiding your WordPress version, blocking username-enumeration scans, disabling dashboard file editing, a real SSL certificate checker, and a transparent Security Score — since a compromised site is the fastest way to lose both rankings and visitors entirely.
Google has confirmed Core Web Vitals are part of its Page Experience ranking signals — search engine optimization and website performance optimization aren't two separate disciplines anymore, they overlap directly. A page that loads slowly, shifts around while loading, or takes too long to respond to a tap is a worse result for a searcher even if its content is excellent, and Google's own ranking systems are built to account for that. Mobile optimization matters especially here: PageSpeed Insights primarily scores against a simulated mid-range phone on a throttled connection, which is a closer match to a large share of real search traffic than a fast desktop on fiber ever was. For any site trying to improve its Google ranking through legitimate technical SEO rather than just content, Core Web Vitals are one of the few ranking-adjacent factors that are entirely within your own control to fix — no backlinks or content strategy required, just correct implementation.
Read the full Core Web Vitals guide for a complete breakdown of LCP, FCP, CLS, and INP, with specific fixes for each.
We'd rather let the feature list and the real, unfabricated reviews speak for themselves than make that claim ourselves. What we can say concretely: the free tier is fully functional (not a crippled trial), the Core Web Vitals Monitor uses real Google PageSpeed Insights data rather than an estimate, and every optimization is independently toggleable.
It implements every optimization that's genuinely within a plugin's control — image delivery, render-blocking cleanup, caching, font loading. It can't rewrite your hosting's server response time or the images/video you choose to publish. See the Core Web Vitals guide for what's realistically fixable by a plugin versus what depends on your host and content.
Yes — there's dedicated Elementor detection and optimization in the free tier, and WooCommerce-specific optimizations (cart fragments, non-shop-page asset dequeuing) in the Pro edition.
Yes — it calls Google's actual PageSpeed Insights API directly from your WordPress dashboard, on demand or on a schedule, and stores history so you can track whether a change actually helped.
"Finally a performance plugin that doesn't also try to sell me twelve upsells before I've even activated it. The free tier alone replaced three plugins I was running."
"The Security tab alone is worth it — I like that the score tells me exactly which checkbox it's counting instead of just handing me a mystery number."
"Script Manager is genuinely useful for finding what's loading where. Would like to see more granular targeting in a future update."
Free forever tier. Upgrade to Pro whenever you want more — no credit card needed to start.
Download Free Now