Free · 9 modules
The utilities you keep working around.
Nine focused modules: GDPR consent, login protection, maintenance mode, security hardening, performance cleanup, WooCommerce extras and dev tools. Replaces a stack of single-purpose plugins.
v3.5.3 · 9 modules · free forever · updates for life
What you actually get
- Price
- €0, no tiers
- Sites
- unlimited
- Updates
- included, forever
- Account needed
- none
No upsell tier, no licence server, no account. Download the ZIP and it works, on every site you own, for as long as you run it.
free
Forever. No upsell tier.
lifetime
Updates included.
zero
Tracking or data collection.
9
Modules in one plugin.
What Signocore Toolkit does.
Signocore Toolkit collects nine things most WordPress sites end up installing separately: GDPR cookie consent, login protection, maintenance mode, security hardening, performance cleanup, blog and media defaults, WooCommerce extras, content shortcodes and a set of developer tools. Each module has its own switch, so you turn on the two or three you need and leave the rest dormant.
It replaces a stack of single-purpose utility plugins with one install and one settings page. No nested menus, no submenus inside submenus, and no module doing work you have not asked it to do. The developer tools alone cover an activity log, a mail catcher, a cron viewer, a transient browser, a user switcher, an environment banner, system status and plugin or theme ZIP export.
Like the rest of the suite it is free forever, with no upsell tier, no account and no tracking. It pairs naturally with Signocore SEO, which covers the search side of the same site.
At a glance
- Version
- 3.5.3
- Modules
- 9, individually switchable
- Sites per licence
- unlimited
- Licence
- free, lifetime updates
- Requires
- WordPress 6.3+, PHP 8.2+
Free. No catch.
Replaces a stack of single-purpose utility plugins. No account, no email gate, no upsell tier.
Signocore Toolkit
€0 forever
All nine modules, on every site you own. Updates included, for as long as you run it.
Download Signocore Toolkitdirect download, no account
One settings page. Nine modules.
Toggle the modules you need. Skip the rest. No nested menus, no submenus inside submenus.
Nine modules. One install.
Replaces a stack of single-purpose utility plugins. The settings-heavy modules each have their own switch.
GDPR cookie consent
Granular consent controls with Google Tag Manager integration and customisable banner.
Security hardening
XML-RPC protection, security headers (CSP, HSTS, Referrer-Policy), sanitized SVG uploads restricted by role, RSS blocking.
Login and access
Custom login URL, failed-login limiter with IP lockout and trusted IPs, restricted REST API media uploads, generic login errors.
Maintenance mode
Maintenance (HTTP 503, rankings preserved) or coming-soon page with admin bar toggle, role bypass, IP allowlist, and your own logo and message.
Performance
Frontend heartbeat removal, oEmbed and emoji cleanup, post revision limit, admin heartbeat interval. Lighter pages, leaner database.
Blog and media
Default featured images, custom archive titles, related content, EXIF orientation correction.
WooCommerce
Social share buttons, safe checkout badges, free shipping logic, custom cart text.
Content shortcodes
12 shortcodes for company info, contact details, maps, social links, payment methods.
Developer tools
Activity log, mail catcher, cron viewer, transient browser, user switcher, environment banner, system status, plugin and theme ZIP export.
Who actually uses Signocore Toolkit.
Developers
Built-in dev tools and performance optimisation at your fingertips.
Agencies
Manage GDPR compliance and security across client sites from one plugin.
WooCommerce stores
Trust badges, social sharing, smart shipping rules instantly.
Site owners
Cookie consent, security and performance without juggling multiple plugins.
From download to configured in under four minutes.
Download the ZIP
Single ZIP, no account, no email gate.
~30 sec
Install in WP admin
Plugins, Add New, Upload Plugin, activate. Standard WordPress flow.
~1 min
Toggle the modules
Open the Toolkit menu and switch on the modules you need. Skip the rest. Most sites run two or three.
~2 min
Works with what you already use.
Requires PHP 8.2 or higher and WordPress 6.3 or higher. Our Platform Support Policy explains how these requirements change over time.
Using something not listed here? Let us know and we'll test it.
Common questions about Signocore Toolkit.
Will it conflict with my existing security or cookie plugin?
No, but you should pick one. The overlapping modules can be toggled off, so if you already use Wordfence you leave Toolkit's login protection off, and with CookieYes you leave the consent module off. The plugin won't refuse to activate or fight your existing stack.
What's the performance impact?
Minimal. Active modules are lean: the cookie banner is a few KB of CSS/JS, the security headers module runs at request time without database queries, and the frontend heartbeat is deregistered on every public page view to cut needless polling. The dev tools add no scripts or styles to public page views, so frontend page weight is untouched.
Is it GDPR-compliant out of the box?
The cookie consent module is. It supports Google Consent Mode v2, three granular categories (necessary always on, analytics and marketing under visitor control), and the consent record is stored in a first-party cookie that visitors can review and change at any time via the floating preferences button. You still need to write your own privacy policy. The plugin handles consent collection, not legal copy. One thing to know: the activity log keeps usernames and IP addresses for 90 days by default; shorten the retention or switch the log off to match your own privacy policy.
Does it stop brute-force login attacks?
Yes. Login protection is on by default: after five failed attempts within 15 minutes, the IP address is blocked for 30 minutes. Limits, trusted IP addresses and an email alert are configurable, and a wp-config constant switches it off if you ever lock yourself out.
Can I use only one module?
Yes. The settings-heavy modules (cookie consent, login protection, maintenance mode, SVG uploads, activity log, hide login) each have their own switch. Most users run two or three; the rest sit dormant until you need them.
What's new in the latest release.
v3.5.3 · Last updated Sep 3, 2026 · Tested up to WordPress 7.1 · Requires PHP 8.2+
Changes in version 3.5.3:
- Improved: When the site runs an unsupported PHP version, the notice now shows which PHP version the site runs and explains that the plugin is paused until PHP is updated. The notice is only shown to users who can manage plugins.
Related reading
Guides from the blog on GDPR compliance, security hardening, and WordPress performance.
GDPR and Cookie Consent: A Developer's Implementation Guide
Most GDPR mistakes happen at the code level, not the legal level. A practical developer's guide to cookie consent, conditional loading, and server-side compliance.
Read the article →WordPress Security in 2026: The Complete Hardening Checklist
43% of the web runs WordPress - and attackers know it. Get 20+ specific hardening steps, current attack vectors, and a prioritisation framework to secure your site fast.
Read the article →WordPress Performance Optimization: From 4 Seconds to Under 1
Caching plugins alone won't fix a slow WordPress site. Here's the full optimization sequence — server, database, assets, and delivery — that actually works.
Read the article →Free. Forever.
No account, no upsell tier, no subscription of any kind. Questions? Get in touch.