ZenPress – Optimize & Secure

ZenPress is a lightweight, super-fast plugin that boosts your WordPress & WooCommerce website through a wide range of solid actions.
Combined with Cache Enabler, Autoptimize and SQLite Object Cache, ZenPress is a free alternative to major premium performance plugins.
This is a simple solution for improving your WordPress website’s performance and security while enjoying a simpler and lighter UI without breaking the bank.
No database clutter, no ads, no pro version. Just install, activate, select what you need or pick up your settings preset and you are ready to go !

Why choose ZenPress?

• Curated settings presets included to help you.
• Deep integration with the native WordPress interface: no bloat, no extra options page, no weird custom dashboard : only what you need.
• Free alternative to major premium performance plugin for everyone.
• Make your WordPress website fast & clean by disabling unwanted features.
• Improve security by turning off features you don’t use and hardening weak spots.
• Eliminate third-party plugin bloat (actually hunting them down).
• Ultra lightweight.
• Future proof.

Features

Following features are included :

Settings subpage 🧰

• Organized interface with vertical tabs for easy navigation between categories (Core, Gutenberg, WooCommerce, Ads-blocker, Tools).
• Features grouped by subcategories (Performance, Security, User Interface) with visual icons for quick identification.
• Three ready-to-use presets: Corporate website, Blog, and E-commerce – each optimized for specific site types.
• Every action is documented with descriptions so that you understand what you are doing and the benefits.
• Fully accessible interface with ARIA-compliant tabs and complete keyboard navigation support.
• Native WordPress interface, benefits from Gutenberg’s new features and the site editor.

Core

• Block user enumeration.
• Clean up the WordPress admin bar.
• Disable adjacent posts link tags.
• Disable all WordPress feeds (RDF, RSS, RSS2, Atom, and comments).
• Disable application passwords.
• Disable author archives.
• Disable autosave.
• Disable capital_P_dangit filter.
• Disable dashicons.
• Disable DNS prefetch.
• Disable jQuery migrate.
• Disable oEmbed.
• Disable Password Strength Meter.
• Disable PDF thumbnails.
• Disable pingback and trackback.
• Disable REST API for visitors not logged into WordPress.
• Disable the login language selector.
• Disable WLW link.
• Disable WordPress default lazy loading.
• Disable WordPress emoji scripts and styles.
• Disable WordPress shortlink.
• Disable XML-RPC and remove RSD link.
• Hide WordPress version.
• Limit post revision to 10.
• Remove “Help” button.
• Remove “Thanks for using WordPress” in footer.* Remove REST API links.
• Remove WordPress logo.

WooCommerce

• Disable unnecessary Stripe scripts on WooCommerce pages.
• Disable WooCommerce cart fragments script.
• Disable WooCommerce scripts and styles on non-WooCommerce pages.
• Disable WooCommerce widgets.
• Hide WooCommerce version.* Remove WooCommerce default block patterns.

Gutenberg

• Disable default pattern categories in site editor.
• Remove WordPress default remote block patterns.
• Separate loading of core block styles.

Ads-blocker

• Clean up the WordPress Dashboard.

Tools

• Protect the wp-login form from brute force attacks.
• Toggle “Show ZenPress admin bar button”: ZenPress item in the admin bar with “Clear all caches” and sub-items per active integration (page cache, static assets, object cache). Visible only when at least one of Cache Enabler, Autoptimize, or SQLite Object Cache is active. When enabled, those plugins’ own admin bar buttons are hidden. Toggle via Settings > ZenPress > Tools.

Integrations

ZenPress integrates with Cache Enabler, Autoptimize, and SQLite Object Cache. When any of these plugins is active, the Tools tab shows integration status and one-click autoconfig actions.

• Admin bar: One “Clear all caches” button (dashicon) in the admin bar, with sub-items to clear page cache (Cache Enabler), static assets (Autoptimize), or object cache (SQLite Object Cache) separately. When the ZenPress admin bar is enabled, the third-party cache buttons (Cache Enabler, Autoptimize, SQLite Object Cache) are hidden. You can hide the ZenPress admin bar via Settings > ZenPress > Tools.
• Autoptimize: One-click autoconfig enables recommended options (JS/CSS/aggregate/nogzip/fallback on; defer/HTML/logged-in/meta off).
• Cache Enabler: One-click autoconfig enables clear site cache on post or plugin changes, WebP support, Gzip or Brotli compression, and minify HTML (excluding inline CSS/JS).
• SQLite Object Cache: One-click autoconfig enables the “Use APCu” option in the plugin settings when the APCu extension is available.

Presets

• Corporate website / Portfolio: Optimized for business sites and portfolios. Focuses on security, performance, and removing unnecessary features like RSS feeds and author archives.
• Blog: Tailored for content-focused blogs. Includes performance and security optimizations while preserving essential blog features like RSS feeds.
• E-commerce: Designed for WooCommerce stores. Includes all performance and security features plus WooCommerce-specific optimizations for faster checkout.

Accessibility

• Fully ARIA-compliant tab interface following W3C ARIA Authoring Practices Guide.
• Complete keyboard navigation: Arrow keys, Home, End, Space, Enter, and Tab keys fully supported.
• Automatic tab activation on focus for improved user experience.
• Proper focus management with visible focus indicators.
• Screen reader friendly with proper ARIA labels and roles.

Roadmap

• Additional presets for specific use cases.
• Documentation pages with detailed guides.
• Manage Heartbeat API (frontend + backend + admin whitelist).
• Remove “site health” page.
• Remove “Privacy tools”.
• Disable WooCommerce tracking.
• Disable marketing hub.
• Disable dashboard setup widget.
• Disable new product editor.
• Disable WooCommerce blocks.
• Disable WooCommerce promo emails.
• Disable CF7 CSS & JS.
• Disable Elementor bloat.
• Disable WP Bakery bloat.
• Disable Divi bloat.
• Disable Yoast SEO bloat.
• Disable Jetpack bloat.
• Disable Updraft bloat.

Privacy Statement

ZenPress is private by default and always will be. It does not store any data. It does not send data to any third party, nor does it include any third party resources.

Accessibility Statement

ZenPress aims to be fully accessible to all of its users.

Hooks & filters

For developers: ZenPress exposes the following action and filters for extending or bypassing behavior.

Action

• zenpress_caches_clear – Fired when the user clears caches from the ZenPress admin bar. Integrations (e.g. Autoptimize) hook into this to clear their own caches. You can add custom cache clear logic with add_action('zenpress_caches_clear', 'your_callback');.

Filters (Disable REST API snippet)

• zenpress_disable_wp_rest_api_post_var – Allow unauthenticated REST access when a specific POST key is present (e.g. for webhooks). Return a string or array of key names. Use non-guessable values only.
• zenpress_disable_wp_rest_api_server_var – Allow unauthenticated REST access when REQUEST_URI matches a specific value. Return a string or array. Use non-guessable values only.