Title: AssistKit – Site Optimizer Toolkit
Author: WPAssist
Published: <strong>July 5, 2026</strong>
Last modified: July 5, 2026

---

Search plugins

![](https://ps.w.org/assistkit-site-optimizer-toolkit/assets/banner-772x250.png?
rev=3596890)

![](https://ps.w.org/assistkit-site-optimizer-toolkit/assets/icon-256x256.png?rev
=3596890)

# AssistKit – Site Optimizer Toolkit

 By [WPAssist](https://profiles.wordpress.org/wpassist/)

[Download](https://downloads.wordpress.org/plugin/assistkit-site-optimizer-toolkit.3.0.13.zip)

 * [Details](https://wordpress.org/plugins/assistkit-site-optimizer-toolkit/#description)
 * [Reviews](https://wordpress.org/plugins/assistkit-site-optimizer-toolkit/#reviews)
 *  [Installation](https://wordpress.org/plugins/assistkit-site-optimizer-toolkit/#installation)
 * [Development](https://wordpress.org/plugins/assistkit-site-optimizer-toolkit/#developers)

 [Support](https://wordpress.org/support/plugin/assistkit-site-optimizer-toolkit/)

## Description

AssistKit – Site Optimizer Toolkit is an all-in-one WordPress optimization toolkit
designed to improve website performance, strengthen security, simplify administration,
and streamline website maintenance.

Unlike plugins that focus on a single area, AssistKit – Site Optimizer Toolkit combines
performance enhancements, security hardening, maintenance tools, and administrative
controls into one easy-to-use plugin.

Whether you’re a website owner, freelancer, agency, or WordPress maintenance provider,
AssistKit – Site Optimizer Toolkit helps you build faster, cleaner, and more secure
WordPress websites.

#### Performance Optimization

Improve loading speed and Core Web Vitals with tools designed to reduce unnecessary
requests and render-blocking resources.

Optimize WooCommerce script loading
 Optimize WordPress Heartbeat API Disable RSS
feeds Disable self pingbacks Remove unnecessary header bloat Remove MediaElement
Remove Dashicons stylesheet Disable WordPress emoji Disable Gutenberg Scripts

#### Security Hardening

Reduce attack surface and improve website security with simple one-click controls.

Disable XML-RPC
 Hide WordPress version information Disable author archives Prevent
user enumeration Hide detailed login errors Disable application passwords Disable
comments globally Add common security headers Restrict public REST API access with
compatibility exceptions Prevent code execution in the public ‘Uploads’ folder Disable
directory browsing Protect sensitive files

#### Design Tweaks

Polish small WordPress interface details for cleaner client and business websites.

Hide the login language selector
 Enable infinite scrolling in the Media Library
Disable the block-based widget editor Hide the frontend admin bar for non-admin 
users Link the login logo to the site homepage Replace the login page WordPress 
logo with a custom Media Library image Remove the WordPress logo from the admin 
bar Clean the default WordPress admin footer text

#### Administration Tools

Manage WordPress more efficiently with tools designed for website owners and agencies.

Role Access Management
 Restrict plugin installation access Restrict theme appearance
access Hide dashboard widgets Hide admin notices Last Login tracking Last Updated
tracking

#### Maintenance & Cleanup

Keep WordPress running smoothly with built-in maintenance controls.

Configure revision cleanup limits
 Control trash cleanup timing Configure old auto-
draft cleanup Revision cleanup tools Trash and auto-draft cleanup controls Database
optimization tools

#### Perfect For

WordPress maintenance providers
 Freelance web designers Digital marketing agencies
WooCommerce stores Membership websites Business websites Bloggers and publishers

#### Lightweight by Design

AssistKit – Site Optimizer Toolkit focuses on practical performance, security, and
maintenance improvements without adding unnecessary complexity or excessive server
overhead.

### Feedback or Support

Need help configuring AssistKit – Site Optimizer Toolkit?

Documentation:
 https://www.wpassist.ca/wordpress-plugins/site-optimizer-security-
toolkit/

Support:
 https://www.wpassist.ca/contact/

Website:
 https://www.wpassist.ca/

## Screenshots

[⌊Main dashboard overview⌉⌊Main dashboard overview⌉[

Main dashboard overview

[⌊System settings⌉⌊System settings⌉[

System settings

[⌊Database settings⌉⌊Database settings⌉[

Database settings

[⌊Notification settings⌉⌊Notification settings⌉[

Notification settings

[⌊Design settings⌉⌊Design settings⌉[

Design settings

[⌊Security Hardening settings⌉⌊Security Hardening settings⌉[

Security Hardening settings

[⌊Performance Optimization settings⌉⌊Performance Optimization settings⌉[

Performance Optimization settings

[⌊Role access management⌉⌊Role access management⌉[

Role access management

## Installation

Upload the plugin through Plugins  Add New. Activate the plugin. Visit Settings  
AssistKit – Site Optimizer Toolkit. Enable the optimization, security, and maintenance
features you wish to use. Save your settings.

## FAQ

### Does AssistKit – Site Optimizer Toolkit improve Core Web Vitals?

Many features are specifically designed to improve performance metrics such as LCP,
INP, and overall page loading speed.

### Can I enable only the features I need?

Yes. Most optimization features can be enabled or disabled independently.

### Does this plugin work with Elementor?

Yes. AssistKit – Site Optimizer Toolkit works alongside Elementor, Divi, Gutenberg,
Beaver Builder, and most modern WordPress themes.

### Does this plugin work with WooCommerce?

Yes. The plugin includes WooCommerce-specific performance optimizations. If Restrict
Public REST API is enabled, AssistKit keeps WooCommerce REST and Store API route
prefixes available when WooCommerce is active so carts, checkout, blocks, mobile
apps, and integrations are less likely to break.

### Is AssistKit – Site Optimizer Toolkit suitable for agencies?

Yes. Role Access Management, maintenance controls, and administration tools make
it particularly useful for agencies managing multiple client websites.

### Will Restrict Public REST API break forms or ecommerce?

It can if a plugin depends on public /wp-json/ requests. AssistKit shows a warning
before enabling the feature and automatically allows known compatibility route prefixes
when related plugins are active, including Contact Form 7, WooCommerce, Jetpack,
WPForms, Gravity Forms, Formidable Forms, Fluent Forms, Ninja Forms, Site Kit, Yoast
SEO, Rank Math, and All in One SEO. Site owners should still test forms, checkout,
blocks, mobile apps, and integrations after enabling it.

### Does AssistKit – Site Optimizer Toolkit modify server configuration files?

AssistKit does not write PHP debug constants or automatic update constants to core
configuration files. Selected Apache/LiteSpeed security hardening options may add
or remove clearly marked rules in .htaccess only when the related setting is changed
by an administrator.

### Does AssistKit – Site Optimizer Toolkit clean the database automatically?

The database tools run only when enabled by an administrator. You can run cleanup
manually or enable scheduled cleanup for revisions, old auto-drafts, trashed posts,
and expired transients.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“AssistKit – Site Optimizer Toolkit” is open source software. The following people
have contributed to this plugin.

Contributors

 *   [ WPAssist ](https://profiles.wordpress.org/wpassist/)

[Translate “AssistKit – Site Optimizer Toolkit” into your language.](https://translate.wordpress.org/projects/wp-plugins/assistkit-site-optimizer-toolkit)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/assistkit-site-optimizer-toolkit/),
check out the [SVN repository](https://plugins.svn.wordpress.org/assistkit-site-optimizer-toolkit/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/assistkit-site-optimizer-toolkit/)
by [RSS](https://plugins.trac.wordpress.org/log/assistkit-site-optimizer-toolkit/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 3.0.13 – July 3, 2026

 * Updated stored option names from legacy short-prefix keys to AssistKit-prefixed
   keys for WordPress.org compliance.
 * Added automatic migration from legacy settings keys to the new AssistKit option
   names.
 * Renamed remaining plugin method callbacks and admin identifiers to use the AssistKit
   prefix.

#### 3.0.12 – July 2, 2026

 * Addressed WordPress.org review feedback with additional prefix cleanup for classes,
   constants, AJAX actions, script handles, and scheduled events.
 * Removed automatic update-disabling behavior and runtime core update constants.
 * Removed runtime constants for trash retention and post revisions; database cleanup
   settings now control only AssistKit cleanup routines.
 * Stopped automatically writing WordPress debug constants and moved generated debug-
   log storage under the uploads directory.
 * Updated Plugin URI and readme wording for WordPress.org compliance.

#### 3.0.7 – July 1, 2026

 * Improved public REST API restriction compatibility for known REST API endpoints
   used by forms, WooCommerce, SEO, analytics, and related integrations.
 * Cleaned up REST route detection to avoid nonce warnings during public route checks.

#### 3.0.6 – June 30, 2026

 * Code cleanup and compliance improvements for WordPress.org submission.
 * Renamed plugin branding, package folder, main plugin file, text domain, and POT
   file to AssistKit – Site Optimizer Toolkit.
 * Updated Maintenance Mode to use the Design tab custom login logo first, then 
   fall back to the active theme custom logo.
 * Confirmed Tested up to value for WordPress 7.0 compatibility.

#### 3.0.5 – June 24, 2026

 * Renamed plugin branding to Site Optimizer Toolkit for WordPress.org submission.
 * Removed legacy Google Fonts and SweetAlert assets.
 * Moved remaining admin CSS/JavaScript into enqueued asset files.
 * Added an AJAX option whitelist and cleaned up Plugin Check filesystem warnings.
 * Updated dashboard and panel headers with the WPAssist blue gradient style.
 * Added subtle WPAssist attribution link to the dashboard splash banner.
 * Improved dashboard hero and section header text contrast.

#### 3.0.4 – June 24, 2026

 * Updated debug status handling for troubleshooting screens.
 * Reordered the System cards into the requested 3-column layout and made Maintenance
   Mode span two card slots beside Administration Email.

#### 3.0.3 – June 23, 2026

 * Added a splash screen with section cards for System, Database, Notifications,
   Design, Security, Performance, and User Access.
 * Updated the System settings layout to use three columns with Maintenance Mode
   on its own full-width row.
 * Added Maintenance Mode background and text colour controls.
 * Updated Maintenance Mode field layout to use a vertical flex layout.

#### 3.0.2 – June 23, 2026

 * Adjusted the System settings layout to use a 3-column grid with Maintenance Mode
   on a full-width row.
 * Suppressed WordPress core’s duplicate admin email change notice during WPAssist
   admin email updates.
 * Kept a single concise WPAssist admin email change notice for security transparency.
 * Added site title, site logo, and site icon support to the Maintenance Mode page.
 * Simplified the Maintenance Mode page container CSS.

#### 3.0.1 – June 23, 2026

 * Renamed the Updates settings section to System.
 * Added System tools for changing the Administration Email Address and enabling
   Maintenance Mode.

#### 3.0 – June 23, 2026

 * Fixed the Hide Admin Help Tab setting so it removes the contextual help tab reliably
   across admin screens.
 * Added a Run Now button for database optimization with visible cleanup results.
 * Added database cleanup reporting and last-run storage.
 * Added pruning of existing post revisions based on the Limit Post Revisions value.
 * Fixed a Plugin Check sanitization warning for AJAX option values.
 * Changed default post revision limit to 10 and default trash retention to 30 days
   for new installs.
 * Added Design option to hide the contextual admin Help tab.
 * Tightened scheduled database optimization so the cron task exits if the setting
   is disabled.
 * Stopped managing .htaccess marker blocks on settings page load; .htaccess files
   are now touched only when related settings are changed.
 * Added Database option to configure how many days old auto-drafts are kept before
   scheduled cleanup removes them.
 * Added Design option to clean the default WordPress admin footer text and version
   text.
 * Fixed the database optimization cron so disabling the setting clears the scheduled
   event reliably.
 * Scheduled trash cleanup now respects the configured trash retention period instead
   of deleting all trashed posts immediately.
 * Scheduled database optimization now schedules one hour after enabling instead
   of immediately.
 * The .htaccess writer now skips file writes when the managed marker content has
   not changed, preventing unnecessary timestamp updates.
 * Added Design option for replacing the default WordPress login page logo with 
   a custom Media Library image.
 * Added optional Performance toggles for disabling WordPress embeds and comment
   reply scripts.
 * Added: Security: Hide Login Error Details.
 * Added: Security: Disable Application Passwords.
 * Redesigned the settings screen with a sidebar section menu and card-based settings
   layout.

#### 2.10 – June 9, 2026

 * Fix: Update htaccess security rules only if content is changed, and only if plugin
   settings page is visited.

#### 2.00 – June 3, 2026

 * New feature: Role Access.
    This adds the ability to configure access to plugins
   and WP features based on user role. Select a Primary Admin User or users and 
   then disable some functionality for other administrators, like the ability to
   install plugins or change theme appearance.

#### 1.8.2 – May 28, 2026

 * Tested up to WP 7.0
 * Added: Performance: Optimize Heartbeat API
 * Added: Performance: Disable RSS feeds
 * Added: Performance: Disable Self Pingbacks
 * Added: Performance: Disable WooCommerce Scripts Outside Shop pages
 * Added: Performance: Remove Unused Header Bloat
 * Added: Notification: Cleanup Admin Dashboard (hides default widgets)
 * Added: Security: Hide WordPress Version
 * Added: Security: Disable Author Archives
 * Added: Security: Add Security Headers

#### 1.7 – November 25, 2025

 * Tested up to WP 6.8.3
 * Added: Ability to disable authorized user enumeration.

#### 1.5 – April 23, 2025

 * Tested up to WP 6.8

#### 1.4 – March 13, 2025

 * Add: Ability to disable XML RPC

#### 1.3 – February 1, 2025

 * Update: Add user name to Last Updated column

#### 1.2 – February 1, 2025

 * Add: Cleanup/delete settings on uninstall
 * Add: View last update date for pages and posts
 * Add: View last login date for users

#### 1.1 – January 20, 2025

 * Consolidated all settings on one page.
 * Removed Google Fonts functionality.

#### 1.0

 * Initial release.

## Meta

 *  Version **3.0.13**
 *  Last updated **20 hours ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **7.0**
 *  PHP version ** 7.4 or higher **
 * Tags
 * [core web vitals](https://wordpress.org/plugins/tags/core-web-vitals/)[wordpress maintenance](https://wordpress.org/plugins/tags/wordpress-maintenance/)
   [wordpress optimization](https://wordpress.org/plugins/tags/wordpress-optimization/)
   [wordpress performance](https://wordpress.org/plugins/tags/wordpress-performance/)
   [wordpress security](https://wordpress.org/plugins/tags/wordpress-security/)
 *  [Advanced View](https://wordpress.org/plugins/assistkit-site-optimizer-toolkit/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/assistkit-site-optimizer-toolkit/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/assistkit-site-optimizer-toolkit/reviews/)

## Contributors

 *   [ WPAssist ](https://profiles.wordpress.org/wpassist/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/assistkit-site-optimizer-toolkit/)