Title: Stinoment Growth Assistant Author: STINOMENT Published: November 5, 2026 Last modified: November 5, 2026 --- Search plugins ![](https://ps.w.org/stinoment-growth-assistant/assets/banner-772x250.png?rev=3786144) ![](https://ps.w.org/stinoment-growth-assistant/assets/icon-256x256.png?rev=3786144) # Stinoment Growth Assistant By [STINOMENT](https://profiles.wordpress.org/stinoment/) [Download](https://downloads.wordpress.org/plugin/stinoment-growth-assistant.1.0.4.zip) * [Details](https://wordpress.org/plugins/stinoment-growth-assistant/#description) * [Reviews](https://wordpress.org/plugins/stinoment-growth-assistant/#reviews) * [Installation](https://wordpress.org/plugins/stinoment-growth-assistant/#installation) * [Development](https://wordpress.org/plugins/stinoment-growth-assistant/#developers) [Support](https://wordpress.org/support/plugin/stinoment-growth-assistant/) ## Description We run websites for clients every day, and the same questions keep coming up: Why did traffic drop? Which pages are close to page one? Is the site safe? Growth Assistant answers them, and we use it on our own projects. It reads your Google and Bing numbers, checks your whole site once a day, and turns what it finds into a short list of things worth doing this week. Each finding says what is wrong, where exactly, why it matters and how to fix it. Nothing changes unless you click a fix button, and every change can be undone. #### What you get * **Search Console, explained:** clicks, views and position for 7 days up to 16 months, pages close to page one, pages losing traffic, Images and Discover, sitemap warnings with their cause, and links from other sites. * **Daily check-up:** more than 50 checks for security, site health, SEO, content, links, speed, WooCommerce and comments, in plain words. Turn off any reminder that is a choice on your site. * **Toolbox:** backups (content or full), WebP images, redirects for missing pages, robots.txt and .htaccess editing with safety checks, email delivery (SMTP), protection switches and a cookie banner that really waits for consent. * **Security:** login protection, private login address, two-step login, file health, alerts by email, Telegram, Bale or webhook, and an activity log. * **Growth:** speed test like GTmetrix with the plugin that makes a page heavy, site strength and trust month by month, weekly growth moves, competitor watch, store money leaks, push notifications and a monthly report. #### Built for everyday hosting Work runs in short steps in the admin area or small background jobs, never while visitors load your pages. English and Persian, with short “?” notes on every screen. #### Works with AI assistants On WordPress 6.9 and later, the report, check-up, fixes and undo are in the Abilities API, so MCP-connected assistants can use them. Only administrators can run them. ### External services This plugin can connect to these services. Nothing personal is sent. * **IndexNow (api.indexnow.org)** – only when you turn on the IndexNow switch. When a post is published or updated, its address, your site host name and your IndexNow key are sent, so search engines that use IndexNow (Bing, Yandex and others) learn about the change. Documentation: https://www.indexnow.org/documentation· Microsoft privacy statement: https://privacy.microsoft.com/privacystatement · Yandex legal documents: https://yandex.com/legal/ * **stinoment.com** – only if you turn on the Health badge and keep its link on: the badge links to https://stinoment.com/ . Nothing is sent; it is a normal link a visitor may click. Privacy policy: https://stinoment.com/privacy-policy/ * **WordPress.org Plugins API (api.wordpress.org)** – during a check-up, the folder names of your active plugins are sent to learn when each plugin was last updated. Privacy policy: https://wordpress.org/about/privacy/ * **WordPress.org files (api.wordpress.org, downloads.wordpress.org, core.svn.wordpress. org)** – only when you use File health: your WordPress version and locale, and the folder name and version of each plugin, are sent to download the original file fingerprints; to repair a WordPress file, that original file is downloaded. Privacy policy: https://wordpress.org/about/privacy/ * **Google Search Console API (searchconsole.googleapis.com, oauth2.googleapis. com)** – only with the “own key” Search Console method: your site’s property address and the date ranges are sent with your own service account, to read your search numbers. Terms: https://developers.google.com/terms · Privacy: https:// policies.google.com/privacy * **STINOMENT server (api.stinoment.com)** – only with the “STINOMENT email” or“ Sign in with Google” methods: your site address and a random check token are sent once to register the site, then the property and date ranges of each Search Console request. The server reads Google’s numbers for you and returns them; it does not keep them. Privacy policy: https://stinoment.com/privacy-policy/ * **STINOMENT contact form (api.stinoment.com)** – only when you fill in the form on the “About us” screen, tick the agreement box and press “Send message”: your name, email, phone (if given), website address, the service you chose and your message are sent so the STINOMENT team can answer you. Nothing is sent before that. Privacy policy: https://stinoment.com/privacy-policy/ * **STINOMENT Web Report (api.stinoment.com)** – off by default; only if you turn on “Share anonymous monthly totals” in Growth STINOMENT Web Report. Once a month a summary of the month before is sent: Google and Bing totals (clicks, views, position, device and country shares, click rate by position), the health score and which checks pass, real speed numbers, the trust score, domain strength and phone speed test score of the month (when you use those tools), the count of wrong password tries and spam comments, whether two-step login and a private login address are on, and the WordPress and PHP versions, language, number of posts, whether WooCommerce is active, and the month you started using the plugin. With the first summary only, the Google totals (clicks, views, position) of the two months before are also sent, so STINOMENT can measure how sites change after they start. It also includes kinds of searches without the words (questions or not, short or long, with or without your site name). Only if you also turn on“ Also share popular search words”, your top Google searches are sent, after any search with an email, link, phone number or your site name is removed. Page addresses, visitor data, emails and user names are never sent. You can read the exact summary on that screen before you agree. STINOMENT publishes only numbers that at least 10 sites share. Turning sharing off deletes everything your site shared. If you also turn on “List my site among STINOMENT users”, your site name and address may be shown as a STINOMENT user. Privacy policy: https://stinoment.com/privacy- policy/ * **Browser push services** – only if you turn on Push notifications and press “ Send”. For each follower the site sends an empty, signed request to the push address their own browser gave (Google Firebase Cloud Messaging for Chrome, Edge on Android and Opera; Mozilla for Firefox; Microsoft for Edge on Windows; Apple for Safari). The message text is not sent to them: the visitor’s browser then reads it from your own site. The push addresses are kept only in your database and are deleted with the plugin. Google: https://firebase.google.com/terms · https://policies.google.com/privacy · Mozilla: https://www.mozilla.org/about/ legal/terms/services/ · https://www.mozilla.org/privacy/ · Microsoft: https:// www.microsoft.com/servicesagreement · https://privacy.microsoft.com/privacystatement· Apple: https://www.apple.com/legal/internet-services/terms/site.html · https:// www.apple.com/legal/privacy/ * **STINOMENT bot (api.stinoment.com, with Telegram api.telegram.org or Bale tapi. bale.ai)** – only after you press “Connect” in Security Alerts and press Start in the bot. Then your site address, site name, language, the address of your Growth Assistant screen and the plugin’s private health address are sent to the STINOMENT server. The server opens that health address about every 5 minutes to see if the site is up. The text of urgent alerts (fatal error, changed WordPress files, a new administrator or plugin, a certificate or domain about to end) and a short weekly report (health score, number of problems, the three most useful tasks, Google clicks of the week, blocked password tries, backup age) are sent to the server, which forwards them only to the people who connected the bot. Send /stop to the bot or press Disconnect to end it; deactivating the plugin disconnects it too. Privacy policy: https://stinoment.com/privacy-policy/ · Telegram: https://telegram.org/tos · https://telegram.org/privacy · Bale: https://bale. ai/ * **Speed test (api.stinoment.com, with Google PageSpeed Insights and Chrome UX Report)** – only when you press “Test on phone” or “Test on computer” in Growth Speed test, and then once a week if you keep the weekly test on. The address of the page you test (a page of your own site), the device and your language are sent to the STINOMENT server, which asks Google’s PageSpeed Insights to open the page and sends back the scores, the problems and small screenshots. Pressing“ Show the 6 months” sends your site address to read Google’s public real-visitor numbers (Chrome UX Report). No visitor data is sent. Privacy policy: https:// stinoment.com/privacy-policy/ · Google terms: https://developers.google.com/terms· Google privacy: https://policies.google.com/privacy * **Site strength (api.stinoment.com, with Open PageRank by DomCop)** – only after you press “Check domain strength” in Growth Site strength and trust, then once a month. Only your domain name is sent; the STINOMENT server asks Open PageRank for its public score and rank. The trust score is worked out on your own site and nothing is sent for it. Privacy policy: https://stinoment.com/privacy-policy/· Open PageRank service and terms: https://www.domcop.com/openpagerank/ * **Google Site Kit** – with the Site Kit method, data is read from the Site Kit plugin inside your own site; Site Kit talks to Google under its own terms. * **Bing Webmaster Tools API (ssl.bing.com)** – only after you add a Bing API key: your site address and key are sent to read your Bing numbers, and the addresses of your most linked pages to read who links to them. Microsoft privacy statement: https://privacy.microsoft.com/privacystatement * **Telegram Bot API (api.telegram.org) and Bale Bot API (tapi.bale.ai)** – only if you add a bot token: the alert text (site name, what happened, your site address) is sent to the chat you choose. Telegram terms: https://telegram.org/tos · privacy: https://telegram.org/privacy · Bale: https://bale.ai/ * **Your own webhook (Slack, Discord, Google Chat, Teams)** – only if you add one: the same alert text is sent to that address. * **RDAP service (rdap.org)** – only if you turn on the domain expiry alert. Once a week your site’s domain name (for example example.com) is sent to read when the domain registration ends. Nothing else is sent. Service by the RDAP.org project, which forwards the request to the registry of your domain: https://about.rdap. org/ · Privacy information: https://about.rdap.org/#privacy * **Competitor sites** – only the sites you add in Competitor watch are opened, at most once a day each, like a normal visitor (home page, sitemap and news feed). * **Websites you link to (link checker)** – during the broken links check, the plugin opens the addresses that appear in your own posts, with a plain request that sends no personal data, to see if the page still exists. Each site is a different service under its own terms. * **YouTube thumbnails (i.ytimg.com)** – only if you turn on the lightweight video embeds switch. Visitors’ browsers load the video’s preview picture from YouTube, and YouTube’s player loads only after a click. Terms: https://www.youtube.com/ t/terms · Privacy: https://policies.google.com/privacy #### Included libraries * QR Code Generator for JavaScript by Kazuhiko Arase, MIT license (assets/js/vendor/ qrcode.js), used to show the two-step login QR code. * Fonts under the SIL Open Font License 1.1 (assets/fonts, license files next to them): Vazirmatn by Saber Rastikerdar, Lalezar by Borna Izadpanah, Inter by Rasmus Andersson. Used in the admin screens and the cookie banner, loaded from your own site. ### Credits * Vazirmatn font by Saber Rastikerdar and contributors, SIL Open Font License 1.1( assets/fonts/OFL-vazirmatn.txt). * Inter font by Rasmus Andersson, SIL Open Font License 1.1 (assets/fonts/OFL-inter. txt). ### Copyright Stinoment Growth Assistant, Copyright (c) 2026 STINOMENT (https://stinoment.com). The “STINOMENT” and “Stinoment Growth Assistant” names, brands and logos belong to STINOMENT. Publishing any copy or modified version of this plugin under the STINOMENT name or brand without written permission is prohibited. ## Blocks This plugin provides 1 block. * Site health badge ## Installation 1. In your dashboard go to Plugins Add New, search for “Stinoment Growth Assistant” and click Install, or upload the ZIP file. 2. Activate the plugin. 3. Open Growth Assistant in the admin menu and click “Run check-up”. The first check- up takes about a minute. 4. Optional: connect Search Console from the Search Console tab. ## FAQ ### What exactly does it do? **Search Console, explained** The plugin reads your numbers from Google and Bing once a day, so it adds no tracking and no load to your visitors. * Clicks, impressions, click rate and average position for 7 days up to 16 months( all Google keeps), with a chart and a comparison with the period before. * A plain-language analysis of strengths and weaknesses: pages close to page one, searches that see you but do not click, pages losing traffic, two pages competing for the same search, mobile versus desktop and more. * Devices, countries, top pages and searches, Google Images, Video, News and Discover, special result types (stars, prices, FAQ), and a “Is this page in Google?” check. * Sitemap warnings explained: Google only gives a number, so the plugin reads the sitemap like Google and finds the cause (redirects, missing pages, noindex, other domains, wrong dates). * Links from other sites (from Bing, as Google’s API has none): most linked pages, linking sites, link words, spam links, and lost links to pages that are gone, with a redirect in one click. * A “Google (28 days)” column in your posts, pages and products lists. * Four ways to connect Google (Site Kit, a read-only service email, your own service account key, or Google sign-in) and one for Bing (API key). **Daily check-up** More than 50 checks in nine areas, explained without jargon: * Security: backups, common weak spots, security headers the browser really gets, easy-to-guess admin names, exposed files, plugins that are no longer maintained. * Site health: WordPress, PHP and plugin updates, overlapping plugins, HTTPS, public debug logs, scheduled tasks. * SEO: titles, meta descriptions, duplicate titles, image alt text, robots.txt, sitemaps, long URLs, several SEO plugins at once, phone-friendly layout (viewport, zoom, responsive theme, too-wide tables and videos), structured data (broken schema code, missing fields Google needs, product, article and breadcrumb data), and icon links or buttons without a name. * Content: thin posts, posts with the same text, missing featured images, extra H1 headings, categories without descriptions, one-off tags, outdated posts, and missing trust pages (privacy policy, terms, contact, about, returns for shops). * Links: pages without internal links, broken links, unsafe links. * Speed: page cache, heavy images, settings loaded on every page, database clean- up. * Your pages as Google sees them: the real HTML of your home, blog and shop pages. * WooCommerce: products without price, image or description, and missing shop pages. * Comments: spam waiting in the queue and visitors still waiting for an answer. Anything that is a choice on your site (products without a price, posts without a featured image) can be turned off with “Don’t remind me”, and turned on again in Settings. Some fixes are applied for you after you agree, in small groups you can review one by one: alt text for images, H1 headings changed to H2 (also in Elementor pages), first descriptions for categories, redirects for broken internal links. **Toolbox** * Backups: a content backup (database) or a full backup of all files and the database, built in small steps so it works on shared hosting. Old backups are removed after the number of days you choose. * Images: WebP conversion and smaller copies of very large photos. * Redirects and missing pages: see which missing addresses real visitors open, with a suggested target for each. Your home page, dashboard and login addresses are protected and never offered for redirection. * Important files: robots.txt, llms.txt and .htaccess with safe suggestions. Every. htaccess change is tested at once and rolled back if the site stops responding. * Protection and speed switches: XML-RPC, user name hiding, file editor, security headers, Heartbeat, Gravatar, IndexNow and more. * Email delivery: SMTP with ready settings for common providers, a test button, a log and the SPF and DMARC records your domain needs. * Cookie consent: finds the trackers your site really uses, writes the banner and the privacy text from them, makes Google tags wait (Consent Mode v2) and holds other trackers back until the visitor says yes. Persian and English, with Vazirmatn, Lalezar or Inter fonts. * Also: social profiles in structured data, a comment spam guard without captcha, and video compression in your browser. **Security** * Login protection that pauses addresses, never user names, so nobody can lock you out on purpose. * A private login address, with a wp-config.php switch in case you forget it. * Two-step login with authenticator apps and backup codes. * File health: compares WordPress and plugin files with the originals from WordPress. org and repairs changed core files. * Alerts by email, Telegram or webhook (Slack, Discord, Google Chat, Teams) when the site goes down, files change or a certificate is about to expire. * STINOMENT bot on Telegram or Bale (optional, one click): urgent alerts at once, a check every 5 minutes that the site is up, and one short report a week. Never more than a few urgent messages a day. * An activity log of logins and important changes. **Growth** * Speed test of any page, like GTmetrix or PageSpeed: a grade from A to F, Core Web Vitals, screenshots of the page while it loads, the problems in plain words with a fix button for each one, and which plugin, theme or other site makes the page heavy. Real visitors next to the test, before and after, 6 months of real- visitor history and a weekly test that warns when the site gets slower. * Site strength and trust: domain strength from 0 to 10 (free Open PageRank data, the same idea as Domain Authority) and a trust score from 0 to 100 built from your own site (like a spam score, but you can fix each part), month by month since you started. * Weekly growth moves picked from your own data, with clear steps. * Competitor watch: speed, page size, structured data and new content of up to five competitors. * Store money leaks for WooCommerce: failed payments, unpaid checkouts, best sellers out of stock. * Real visitor speed (Core Web Vitals from real visits, no cookies) with advice for every weak number. * Push notifications (off by default): visitors follow your site with one click on a bell; you see how many follow you and send them a message. Messages go straight from your site to the browsers’ push services. * Local business data, a monthly report you can print or email, and an optional site health badge. * Hints in the Posts, Pages and Products lists that show which items need attention. ### Does the plugin send my data anywhere? No personal data is sent. All checks run on your own server: the plugin requests your own pages, the links inside your posts (to see if they still work) and api. wordpress.org (to see when your plugins were last updated). Anything else goes only to services you turn on yourself (see “External services”). The STINOMENT Web Report is off by default. If you turn it on, only anonymous monthly totals are sent (search words only with a second, separate switch), you can read them first, and turning it off deletes them. ### Does the plugin change my site by itself? No. Checks only read your site. Changes happen when you click a fix button, and each one can be undone from the “History & undo” tab. The only automatic housekeeping is removing the plugin’s own old backups after the number of days you set. ### Are my backups deleted when I delete the plugin? No. Backups are your data, so they stay in a hidden folder inside wp-content/uploads( its name starts with “stinoment-backups-“). You can download or delete them by FTP. ### How do I get back in if I forget my private login address or lose my phone? Add `define( 'STSD_LOGIN_URL_OFF', true );` (private address) or `define( 'STSD_2FA_OFF', true );` (two-step login) to wp-config.php with your host’s file manager. Another administrator can also turn two-step login off for you, and you have ten backup codes. ### Why does “Sign in with Google” say “coming soon”? This method needs a final review by Google. Until then, the “STINOMENT email” method gives you the same numbers and takes about two minutes. The Site Kit and own-key methods work as well. ### Will it slow down my site? No. Checks run in the admin area or in a daily background job, never when visitors open your pages. ### Do I need an SEO plugin? No. Growth Assistant checks titles and descriptions on its own and works with Yoast SEO, Rank Math, All in One SEO, SEOPress and The SEO Framework if you use one. It only warns you when two SEO plugins run at the same time. ### Can you help us with our site? Yes. The “About us” screen in the plugin has a short form that reaches our team, or you can write to us through https://stinoment.com. ## Reviews There are no reviews for this plugin. ## Contributors & Developers “Stinoment Growth Assistant” is open source software. The following people have contributed to this plugin. Contributors * [ STINOMENT ](https://profiles.wordpress.org/stinoment/) [Translate “Stinoment Growth Assistant” into your language.](https://translate.wordpress.org/projects/wp-plugins/stinoment-growth-assistant) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/stinoment-growth-assistant/), check out the [SVN repository](https://plugins.svn.wordpress.org/stinoment-growth-assistant/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/stinoment-growth-assistant/) by [RSS](https://plugins.trac.wordpress.org/log/stinoment-growth-assistant/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.4 * More accurate: “as Google sees it” now shows the exact address, answer code and time it tested, skips pages that answer “not found”, ignores lazy-load placeholders, and checks big claims (no H1, no canonical) a second time before reporting them. * Every card shows when it was checked, with “Check this again” and “Copy link”. Counts say what they count, and plugin and update numbers refresh at once. * One click writes alt text for every image with a good guess (images without a good guess are left alone), and turns extra H1s into H2 in all posts. * Products that are sold out are no longer reported as “missing a price”; free products are fine too. * New: “Can ChatGPT, Claude and Perplexity find you?” checks AI search and training robots in robots.txt, with two safe settings. * New: SEO tags printed twice (title, canonical, description, structured data), with the probable source of each copy. * New: hide thin tag pages from Google without an SEO plugin; missing pages grouped by kind, with standard redirects per kind. * New: test email in one click and a DKIM check. Old sitemaps still submitted in Search Console, and sitemaps that show login names, are found. * New Advanced tab: technical checks, and how to let an AI assistant work with the plugin (WordPress Abilities API), with a preview ability. Copy the report or download it as JSON. * Weekly moves show about how long each takes and how big the effect is. Better labels for screen readers. #### 1.0.3 * Fixed: downloading a large full backup could fail with “invalid response” or a fatal error on hosts with output buffering. Downloads now stream in pieces and can resume. * Fatal error alerts now say which plugin or theme and the error line. * Search Console: choose 7 days, 28 days, 3, 6, 12 or 16 months. New cards for Google Images, Video, News, Discover and special result types. * Search Console: sitemap warnings explained, with a check that finds the cause. The deprecated “indexed” number is gone. * New: links from other sites (from Bing), with lost links and a one-click redirect. * New: “Don’t remind me” for any finding, and for single parts (products without a price, image or description; posts in the default category; empty categories). Turn them on again in Settings. * Smarter: a renamed default category is treated as a real topic. Alt text is never guessed from machine file names (hashes, IMG_1234). * HTTPS: when the certificate already works, one click moves the site to https ( undo in History), with a new “Send every visitor to https” switch. Without a certificate, the steps for cPanel, DirectAdmin or Plesk. * New: cookie consent banner with real blocking and Consent Mode v2. * Privacy: suggested text for Settings, Privacy. #### 1.0.2 * New checks: trust pages (privacy policy, terms, contact, about, returns), phone- friendly layout, and posts with the same text. * New: Push notifications (off by default) with follower count and messages. * New: STINOMENT bot on Telegram or Bale, connected with one click: urgent alerts, uptime checks every 5 minutes and a weekly report. * Backups: a backup counts for 30 days even after you download and delete the file, and you get one reminder a month when it is time for a new one. * A finding solved with a tool leaves the list at once, without waiting for the next check-up. * Findings that usually need a specialist now say that the STINOMENT team can help. * New: Speed test like GTmetrix and PageSpeed, with which plugin makes the page heavy, a fix for each problem, before and after, 6 months of real-visitor history and a weekly test. * New: Site strength and trust: domain strength (0-10) and a trust score (0-100), month by month. * New checks: structured data (schema), security headers, links and buttons without a name. * New switch: Always use https (HSTS). #### 1.0.1 * Review fixes: safer JSON-LD output, no inline styles, lower menu position, two- step login reminder is now opt-in, rollback copies of plugins removed, external services documented. #### 1.0.0 * First public release. ## Meta * Version **1.0.4** * Last updated **15 hours ago** * Active installations **Fewer than 10** * WordPress version ** 6.5 or higher ** * Tested up to **7.1.4** * PHP version ** 7.4 or higher ** * Tags * [backup](https://wordpress.org/plugins/tags/backup/)[Search Console](https://wordpress.org/plugins/tags/search-console/) [security](https://wordpress.org/plugins/tags/security/)[seo](https://wordpress.org/plugins/tags/seo/) [site health](https://wordpress.org/plugins/tags/site-health/) * [Advanced View](https://wordpress.org/plugins/stinoment-growth-assistant/advanced/) ## Ratings No reviews have been submitted yet. [Your review](https://wordpress.org/support/plugin/stinoment-growth-assistant/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/stinoment-growth-assistant/reviews/) ## Contributors * [ STINOMENT ](https://profiles.wordpress.org/stinoment/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/stinoment-growth-assistant/)