
SiteNivo is a powerful, lightweight, modular toolkit for WordPress. Build custom content structures, boost SEO rankings, accelerate page speed, scan dead links, manage SMTP, and secure your website β all from one intuitive admin dashboard without writing code.
π All-in-One Modular Architecture
Instead of installing 10+ separate bulky plugins that slow down your website, SiteNivo brings all essential website management, performance, and developer tools into a single streamlined system.
- Custom Post Types & Taxonomies β Register and configure custom post types and custom taxonomies with full UI options, archive rules, and PHP code generation.
- Custom Fields & Meta Boxes β Create rich meta boxes on posts, pages, terms, and options screens with advanced location rules.
- SEO Toolkit & SERP Analyzer β Real-time Google SERP preview, focus keyword analysis, automated XML sitemap (
/sitemap.xml), JSON-LD Schema markup, Open Graph, Twitter cards, Breadcrumbs, and IndexNow instant search engine indexing. - Smart Cache & Speed Optimizer β High-performance disk page cache, automated HTML/CSS/JS minification, emoji/embed bloat cleanup, instant cache purges, and database optimization.
- Broken Link Scanner β Chunked background scanner to find dead links (404/500), 1-click inline URL fixer, auto-unlink, and CSV audit export.
- Security & BOT Protection β Hide login URL, brute-force protection, XML-RPC disable, security headers, and live activity event monitor.
- Cookie-Free Visitor Tracking β 100% server-side, privacy-first pageview analytics with IP geolocation and one-click IP blocking without cookies.
- SMTP & Email Delivery β Reliable transactional email with presets for Gmail, Outlook 365, SendGrid, Mailgun, Amazon SES, Brevo, and Zoho Mail.
- Redirections & 404 Monitor β Fast 301/302 URL redirects with wildcards and live 404 log capture.
- Site Tools & Utilities β URL search & replace, Permalink Manager, Code Generator, Header & Footer injection, Duplicate Post, Theme/Plugin Downloader, and Core/Plugin Rollback.
π Developer Friendly
Use clean helper functions sn_get_field() and sn_the_field() in your themes, or export PHP registration code with zero plugin runtime dependency.
Maintenance Mode & Coming Soon
Show a branded Maintenance Mode or Coming Soon page with built-in templates while you build or launch.
WP Reset & Settings
- WP Reset β selectively reset posts, comments, terms, media, users, transients, theme mods, or plugin options. Complete Site Reset is available in the Pro Version.
- Settings (Free) β Classic Editor, Classic Widgets, Duplicate Post, Visitor Tracking, Download Theme & Plugin, Rollback, Disable Core / Theme / Plugin Updates, Favicon (Site Icon), safe SVG uploads, Performance-related settings, security toggles, Google Maps API key, and uninstall cleanup. Settings are organized in tabs (General, Media, Performance, Security, Admin UI, Integrations, Maintenance).
Classic Widgets restores the classic (non-block) Widgets screen via WordPressβs use_widgets_block_editor filter β toggle it under SiteNivo Settings General.
Duplicate Post adds a Duplicate row action and Bulk actions option for posts, pages, and public custom post types (creates drafts). Enable it under SiteNivo Settings General. Copying SiteNivo custom field values when duplicating is a Pro Version feature.
Visitor Tracking can be enabled under SiteNivo Settings General β see the Visitor Tracking section below for full details.
Download Theme & Plugin
Download any installed theme or plugin as a ZIP from the WordPress admin β useful for backups, moving a theme/plugin to another site, or keeping a local copy.
- Appearance Themes β open a themeβs details modal and use Download next to Customize / Menus
- Plugins All Plugins β use the Download link next to Activate / Deactivate on each plugin row
- Creates a ZIP of that theme or plugin folder (ready to install elsewhere)
Enable it under SiteNivo Settings General Download Theme & Plugin. When the toggle is Off, the Download actions are hidden.
Rollback
Roll plugins, themes, or WordPress core back to a previous WordPress.org version (classic rollback style).
- Enable under SiteNivo Settings General Rollback
- Plugins: Rollback link on plugin list rows (WordPress.org plugins only)
- Themes: Rollback on the theme details modal (WordPress.org themes only)
- Core: roll back WordPress from the Settings General Rollback card (not the Updates screen)
- Choose a version, confirm, and SiteNivo installs that package from WordPress.org
When the toggle is Off, Rollback actions are hidden.
Disable Updates
Three independent toggles under SiteNivo Settings General let you disable WordPress core, theme, and plugin updates separately. Each toggle fully blocks update notices, automatic updates, and manual Update actions for that type.
Disabling updates does not block installing new themes or plugins, and does not affect SiteNivo Rollback.
Social Buttons
Add floating contact buttons from SiteNivo Social Buttons (below Visitor Tracking).
- Channels: WhatsApp, Phone Call, Email, Facebook Messenger, Telegram, Custom Link β enable any subset (even just two)
- Optional custom icons via the Media Library (defaults provided)
- Position left or right; show on desktop and/or mobile
- Show on all pages, or limit to posts / pages
- Style: circle or square, size, gap, offsets, colors, border, shadow, hover
- Live admin preview is reserved for SiteNivo Pro (hooks are ready for Pro)
Security
Harden common WordPress attack surface from SiteNivo Security (below Social Buttons).
- Block sensitive files β deny public access to install.php, setup-config.php, debug.log, readme.html, and license.txt (Apache
.htaccesswhen writable, plus PHP fallback) - Disable XML-RPC and remove the X-Pingback header
- Disable theme & plugin file editor (
DISALLOW_FILE_EDITwhen not already defined) - Hide WP identity β remove generator meta, blank RSS/Atom signatures, strip ?ver= from scripts/styles, and remove RSD + WLW manifest links
- Login lockout β after 5 failed attempts per IP within 15 minutes, show a generic βtoo many attemptsβ message
- Hide login error detail with a customizable generic message on wp-login.php so usernames are harder to enumerate
- BOT Protection β optional rate limit (default 25 requests / 60 seconds per IP); timed entries on the Visitor Tracking block list; optional admin email alert and event log
- Optional: block application passwords for non-admins
- Visitor Tracking can ignore known scanner / probe paths so logs stay clean
Pitch: stops the usual automated WordPress attacks.
Hide Login
Change the WordPress login URL from SiteNivo Hide Login (below Security).
- Set a private login slug β only that path serves the login form
- Direct hits to
wp-login.phpshow a theme 404 (they are not redirected to your secret URL) - Guest visits to
wp-admingo to your configured redirect path (default404), never to the login URL - Logout, password reset, and other WordPress-generated login links use the custom URL
- Bookmark the new URL; recover by clearing the Hide Login options or temporarily removing the plugin folder
Disable Comments
Turn off comments where you donβt need them from SiteNivo Disable Comments (below Hide Login).
- Disable Comments β closes new comments on selected content types; blocks submissions, comment feeds, comment-reply scripts, and comment XML-RPC methods (does not delete existing comments)
- Hide existing comments β optionally hide approved comments on the frontend for selected types
- Remove Comments Menu β hides Comments from the admin menu, admin bar, dashboard widget, and related metaboxes; blocks direct admin URLs
- Disable Comments REST API β removes
/wp/v2/commentsendpoints and blocks REST inserts - Disable Trackbacks β closes trackbacks/pingbacks on selected types
- Apply To β Posts, Pages, Products (when WooCommerce is active), and other public Custom Post Types
Redirections
Manage 301 / 302 redirects from SiteNivo Redirections (below Permalink Manager).
- Add, edit, enable/disable, and delete redirect rules (exact path match)
- Optional ignore query string when matching (on by default)
- 404 Log β see broken URLs visitors hit and create a redirect in one click
- Backup / migrate redirect rules via SiteNivo Import / Export (JSON)
- Bulk enable, disable, or delete selected redirects
Favicon
Set your site favicon from SiteNivo Settings Media. SiteNivo uses WordPress Site Icon (same as Appearance Customize Site Identity).
- Required size: square image at least 512Γ512 pixels (PNG or JPG recommended)
- Select / change / remove from the Media tab, then Save Changes
- Works on the frontend automatically via WordPress core
Header & Footer
Add tracking and analytics snippets from SiteNivo Header & Footer (below SMTP).
- Header scripts β output on
wp_head(GA, GTM, meta tags, pixels) - Footer scripts β output on
wp_footer - Editors use WordPress core CodeMirror (
wp_enqueue_code_editor) - Only users with
manage_optionscan save; snippets print on the frontend only
Visitor Tracking
Log public pageviews with cookie-free, server-side tracking from SiteNivo Visitor Tracking (below Header & Footer).
Visitors are never asked to allow cookies for this feature β nothing is stored in the browser.
- Enable under SiteNivo Settings General Visitor Tracking (tracking starts only when On)
- Visit log with search and First / Prev / Next / Last pagination; open a row for the detail panel
- Details include city, region, country, postal code, timezone, ISP, IP address, visitor token, user agent, page URL, and referrer
- Device / OS / browser labels parsed from the user agent (raw UA kept in details)
- Referrer source label (Direct or host such as linkedin.com when the browser sends
HTTP_REFERER) - Block / unblock IPs β blocked visitors get a public-site 403; remove an IP from the list to allow access again (logged-in admins are never blocked). Timed bot blocks from Security BOT Protection appear here and expire automatically.
- Extra geo fields when available (organization, AS, coordinates, mobile / proxy / hosting flags)
- Timestamps are stored in UTC and shown in your siteβs WordPress timezone
- Optional IP geolocation via ip-api.com (see External Services); private/local IPs are logged without a geo lookup
For Developers
Read field values in your theme:
sn_get_field( 'field_key', $post_id );
sn_the_field( 'field_key', $post_id );
sn_get_field( 'field_key', 'option' );
Works with post meta, options pages, user meta, and term meta.
Coming Soon in Free
Upcoming free updates will include:
- and much more
SiteNivo Pro β Coming Soon
SiteNivo Pro is coming soon with advanced modules such as:
- Social Buttons β live admin preview
- Forms
- Blocks Development
- User Activity
- Login Activity
- URL Replace history & rollback
- Duplicate Post β custom field values when duplicating
- SMTP rarer mailers, Email Log, and advanced testing
- REST API Module
- Complete Site Reset
- Repeater, Clone, Flexible Content, and Table fields
- and much more
The free plugin already includes Performance-related settings under SiteNivo Settings, so you can tune common performance options without Pro.
External Services
SiteNivo works without external services by default. Optional features may contact third parties only when you use them:
- Google Map field β Google Maps JavaScript API / Places API when a Maps API key is saved in Settings. Terms Β· Privacy
- OpenStreetMap field β Leaflet is bundled locally; map tiles / geocoding may use OpenStreetMap-compatible providers and Nominatim. OSM copyright Β· Privacy
- oEmbed field β uses WordPress core oEmbed (may contact the URLβs provider, e.g. YouTube).
- SMTP / Email β when you choose an SMTP mailer, WordPress sends mail through the SMTP host you configure (for example
smtp.gmail.com,smtp.sendgrid.net, or your own server). SiteNivo does not relay mail through SiteNivo servers; credentials stay in your WordPress database and are only used to authenticate with your chosen host. - Rollback β when you roll back a plugin, theme, or WordPress core, SiteNivo contacts WordPress.org APIs and downloads packages from
downloads.wordpress.org/wordpress.orgonly (the version you select). API Β· Privacy - Visitor Tracking β when enabled, SiteNivo may look up a visitorβs IP with ip-api.com (free HTTP JSON endpoint) to enrich the visit log with city, region, country, ISP, and related fields. Only the visitor IP is sent for geolocation; no cookies are set. Free tier is HTTP-only and rate-limited (non-commercial use per ip-api terms). Docs Β· Terms