Title: CacheSafe for WooCommerce Author: Cobalt Branch Labs Published: September 8, 2026 Last modified: September 9, 2026 --- Search plugins ![](https://ps.w.org/cachesafe-for-woocommerce/assets/banner-772x250.png?rev=3686673) ![](https://ps.w.org/cachesafe-for-woocommerce/assets/icon-256x256.png?rev=3686673) # CacheSafe for WooCommerce By [Cobalt Branch Labs](https://profiles.wordpress.org/bananasaging/) [Download](https://downloads.wordpress.org/plugin/cachesafe-for-woocommerce.1.0.1.zip) * [Details](https://wordpress.org/plugins/cachesafe-for-woocommerce/#description) * [Reviews](https://wordpress.org/plugins/cachesafe-for-woocommerce/#reviews) * [Installation](https://wordpress.org/plugins/cachesafe-for-woocommerce/#installation) * [Development](https://wordpress.org/plugins/cachesafe-for-woocommerce/#developers) [Support](https://wordpress.org/support/plugin/cachesafe-for-woocommerce/) ## Description CacheSafe for WooCommerce is a diagnostic evidence plugin by **Cobalt Branch Labs**. It runs controlled anonymous cart sessions through your store’s public WooCommerce surfaces and reports whether cache behavior, cookies, headers, and Store API responses preserve customer isolation. **Free v1.0** includes manual scans, sanitized findings, provider-aware remediation guidance, WP-CLI, and local-only evidence. No telemetry, no accounts, no automatic cache changes. #### What it does * **Preflight checks** — WooCommerce pages, loopback reachability, Store API, test product, runner health, perspective * **Manual staged scans** — Store API Cart-Token A/B isolation plus classic cookie/ add-to-cart flow where supported * **16 safety checks (CS-101–116)** — headers, Set-Cookie, session isolation, replay, cleanup, perspective * **Sanitized reports** — copy or download JSON, text, or HTML without cookie values, tokens, or raw bodies * **Provider guidance** — evidence-linked remediation for generic stacks and common cache/CDN plugins * **WP-CLI** — `wp cachesafe preflight`, `scan`, `status`, `report`, `cancel`, ` cleanup`, `purge` * **Retention** — keeps the last five completed scans within 30 days (configurable shorter); automatic daily purge #### What it does not do * Place orders, process payments, or call checkout write endpoints * Change cache, CDN, DNS, or host settings automatically * Send telemetry or require an account * Show a numeric “safety score” #### Admin WooCommerce **CacheSafe** with tabs for Overview, Preflight, Live scan, Results, History, Settings, and Tools. #### Privacy All scan evidence stays on your WordPress site. CacheSafe does not phone home. Reports are sanitized to exclude cookie values, Cart-Tokens, nonces, Authorization headers, raw bodies, secrets, and customer PII. Retention is bounded and configurable; uninstall can remove plugin-owned data when enabled in Settings. ### Development Unminified JavaScript and CSS live in `assets/src/`. Built admin assets are written to `assets/build/` via `@wordpress/scripts`. To regenerate the compiled files from this plugin directory: 1. `npm install` 2. `npm run build` 3. package.json and `webpack.config.js` ship with the plugin so the build can be reproduced without a separate repository. ## Screenshots [⌊CacheSafe overview and scan summary⌉⌊CacheSafe overview and scan summary⌉[ CacheSafe overview and scan summary [⌊Live scan progress with stage timeline⌉⌊Live scan progress with stage timeline⌉[ Live scan progress with stage timeline [⌊Findings with sanitized evidence drawer⌉⌊Findings with sanitized evidence drawer⌉[ Findings with sanitized evidence drawer ## Installation 1. Upload the `cachesafe-for-woocommerce` folder to `/wp-content/plugins/`, or install the ZIP via **Plugins Add New Upload Plugin**. 2. Activate the plugin through the Plugins screen. 3. Ensure WooCommerce is active and configure a **test product ID** under CacheSafe Settings. 4. Run **Preflight**, then start a scan from **Live scan** or WP-CLI. ## FAQ ### Does this place test orders? No. CacheSafe only creates ephemeral anonymous carts using an approved simple product. It never completes checkout or captures customer PII. ### Is this a cache optimizer? No. It is an evidence-led auditor, not a performance plugin. It does not change cache provider settings for you. ### Does it work without WP-Cron? Yes. The Live scan tab advances scans while you watch; Action Scheduler is used when available but is not required for manual scans. ### How long is scan history kept? By default, the last five completed scans within 30 days. Failed or cancelled scans are purged sooner. You can purge manually from Tools or WP-CLI. ### Will this slow down my storefront? Scans are admin-triggered and budget-limited (default ≤30 HTTP requests, short timeouts). They are not continuous background traffic. ### Where can I get support? Use the WordPress.org support forum for this plugin after it is published, or contact Cobalt Branch Labs through the Author URI listed on the plugin page. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “CacheSafe for WooCommerce” is open source software. The following people have contributed to this plugin. Contributors * [ Cobalt Branch Labs ](https://profiles.wordpress.org/bananasaging/) [Translate “CacheSafe for WooCommerce” into your language.](https://translate.wordpress.org/projects/wp-plugins/cachesafe-for-woocommerce) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/cachesafe-for-woocommerce/), check out the [SVN repository](https://plugins.svn.wordpress.org/cachesafe-for-woocommerce/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/cachesafe-for-woocommerce/) by [RSS](https://plugins.trac.wordpress.org/log/cachesafe-for-woocommerce/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Ship unminified `assets/src` plus build tooling in the distributable package for Guideline 4 source access * List WordPress.org username bananasaging in Contributors #### 1.0.0 * Free v1.0 release: full manual scan pipeline, 16 checks, admin UI, WP-CLI, sanitized reports * Store API and classic cookie A/B session isolation in live scans * Automatic retention purge (daily cron + after scan completion) * Provider-aware remediation catalog (Cloudflare, LiteSpeed, WP Rocket, WP Super Cache, W3 Total Cache, host-cache) * Request-budget accounting and duplicate-finding fixes for live polling #### 0.1.0-alpha.0 * Early lab scaffold and quality toolchain ## Meta * Version **1.0.1** * Last updated **12 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.9 or higher ** * Tested up to **7.1** * PHP version ** 7.4 or higher ** * Tags * [cache](https://wordpress.org/plugins/tags/cache/)[cart](https://wordpress.org/plugins/tags/cart/) [security](https://wordpress.org/plugins/tags/security/)[session](https://wordpress.org/plugins/tags/session/) [woocommerce](https://wordpress.org/plugins/tags/woocommerce/) * [Advanced View](https://wordpress.org/plugins/cachesafe-for-woocommerce/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/cachesafe-for-woocommerce/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/cachesafe-for-woocommerce/reviews/) ## Contributors * [ Cobalt Branch Labs ](https://profiles.wordpress.org/bananasaging/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/cachesafe-for-woocommerce/)