Free · 9 modules
v4.0.2 released Oct 15, 2026
The utilities you keep working around.
Nine focused modules: GDPR consent, login protection, maintenance mode, security hardening, performance cleanup, WooCommerce extras and dev tools. Replaces a stack of single-purpose plugins.
9 modules · free forever · updates for life
What you actually get
- Price
- €0, no tiers
- Sites
- unlimited
- Updates
- included, forever
- Account needed
- none
No upsell tier, no licence server, no account. Download the ZIP and it works, on every site you own, for as long as you run it.
free
Forever. No upsell tier.
lifetime
Updates included.
zero
Tracking. Only the update check calls home.
9
Modules in one plugin.
What Signocore Toolkit does.
Signocore Toolkit collects nine things most WordPress sites end up installing separately: GDPR cookie consent, login protection, maintenance mode, security hardening, performance cleanup, blog and media defaults, WooCommerce extras, content shortcodes and a set of developer tools. Modules start with safe defaults, and you switch off what you do not need.
At a glance
- Version
- 4.0.2
- Modules
- 9, safe defaults
- Sites per licence
- unlimited
- Licence
- free, lifetime updates
- Requires
- WordPress 6.9+, PHP 8.2+
Replaces a stack
It replaces a stack of single-purpose utility plugins with one install and one menu: an Overview of the whole site and a tab per area. The developer tools alone cover an activity log, a mail log, a cron viewer, a transient browser, a user switcher, an environment banner, system status and plugin or theme ZIP export.
Free forever
Like the rest of the suite it is free forever, with no upsell tier, no account and no tracking. It pairs naturally with Signocore SEO, which covers the search side of the same site.
One menu. Nine modules.
An Overview of the whole site and a tab per area. Switch off what you do not need.
Free. No catch.
Replaces a stack of single-purpose utility plugins. No account, no email gate, no upsell tier.
Signocore Toolkit
€0 forever
All nine modules, on every site you own. Updates included, for as long as you run it.
Download Signocore Toolkitdirect download, no account
- Direct download, no email asked
- No account to create
- Updates included for as long as you run it
- Questions go to the developer, replies usually within a day
Nine modules. One install.
Replaces a stack of single-purpose utility plugins. The settings-heavy modules each have their own switch.
GDPR cookie consent
Accept or reject all, three consent categories and Google Consent Mode v2 (works with GTM and gtag), with custom text, three banner positions and a floating preferences button.
Security hardening
XML-RPC protection, security headers (CSP, HSTS, Referrer-Policy), sanitized SVG uploads restricted by role, RSS blocking, and separate switches for automatic core, plugin, theme and translation updates.
Login and access
Custom login URL, failed-login limiter with IP lockout and trusted IPs, REST API media endpoint closed to visitors, generic login errors.
Maintenance mode
Maintenance (HTTP 503, rankings preserved) or coming-soon page with admin bar toggle, role bypass, IP allowlist, and your own logo and message.
Performance
Frontend heartbeat removal, oEmbed and emoji cleanup, jQuery in the footer without jQuery Migrate, post revision limit, admin heartbeat interval. Lighter pages, leaner database.
Blog and media
Default featured images, custom archive titles, related content, EXIF orientation correction.
WooCommerce
Social share buttons, safe checkout badges, free shipping logic, custom cart text.
Content shortcodes
11 shortcodes: company details, contact info and social links from Signocore SEO when it is active, plus payment logos for WooCommerce.
Developer tools
Activity log, mail log, cron viewer, transient browser, user switcher, environment banner, system status, plugin and theme ZIP export.
Your login screen
The Signocore design on the login screen by default. Prefer your own logo, site name and theme colors, or WordPress' own screen? One setting.
Overview dashboard
One screen shows maintenance mode, IP addresses blocked right now, the mail and activity logs, scheduled cron jobs, the environment and recent activity.
Safe staging sites
An environment label in the admin bar, and outgoing email can be held back on anything that is not production, so test orders and password resets never reach real people.
Who actually uses Signocore Toolkit.
Developers
Built-in dev tools and performance optimisation at your fingertips.
Agencies
Manage GDPR compliance and security across client sites from one plugin.
WooCommerce stores
Trust badges, social sharing, smart shipping rules instantly.
Site owners
Cookie consent, security and performance without juggling multiple plugins.
From download to configured in under four minutes.
Download the ZIP
Single ZIP, no account, no email gate.
~30 sec
Install in WP admin
Plugins, Add New, Upload Plugin, activate. Standard WordPress flow.
~1 min
Toggle the modules
Open Signocore Toolkit: the Overview shows what is active. Switch off what you do not need on the tabs.
~2 min
Works with what you already use.
Requires PHP 8.2 or higher and WordPress 6.9 or higher. Our Platform Support Policy explains how these requirements change over time.
Using something not listed here? Let us know and we'll test it.
Common questions about Signocore Toolkit.
Will it conflict with my existing security or cookie plugin?
No, but you should pick one. The overlapping modules can be toggled off, so if you already use Wordfence you switch Toolkit's login protection off, and with CookieYes you switch the consent module off. The plugin won't refuse to activate or fight your existing stack.
What's the performance impact?
Minimal. Active modules are lean: the cookie banner is a few KB of CSS/JS, the security headers module runs at request time without database queries, and the frontend heartbeat is deregistered on every public page view to cut needless polling. The dev tools add no scripts or styles to public page views, so frontend page weight is untouched.
Is it GDPR-compliant out of the box?
The cookie consent module is. It supports Google Consent Mode v2, three granular categories (necessary always on, analytics and marketing under visitor control), and the consent record is stored in a first-party cookie that visitors can review and change at any time via the floating preferences button. You still need to write your own privacy policy. The plugin handles consent collection, not legal copy. One thing to know: the activity log keeps usernames and IP addresses for 90 days by default; shorten the retention or switch the log off to match your own privacy policy. The mail log likewise keeps outgoing emails for 30 days by default; shorten that or log blocked emails only.
Does it stop brute-force login attacks?
Yes. Login protection is on by default: after five failed attempts within 15 minutes, the IP address is blocked for 30 minutes. Limits, trusted IP addresses and an email alert are configurable, and a wp-config constant switches it off if you ever lock yourself out.
Can I use only one module?
Yes. The settings-heavy modules (cookie consent, login protection, maintenance mode, SVG uploads, activity log, hide login) each have their own switch, and several start switched on with safe defaults, so switch off the ones you do not need. A few lightweight hardening and cleanup tweaks always run.
What's new in the latest release.
v4.0.2 · Last updated Oct 15, 2026 · Tested up to WordPress 7.1.3 · Requires PHP 8.2+
Changes in version 4.0.2:
- Fixed: Google Analytics and Google Ads now receive a returning visitor's saved cookie choice right away, so their first page view on every visit is counted with the consent they already gave.
Related reading
Guides from the blog on GDPR compliance, security hardening, and WordPress performance.
GDPR and Cookie Consent: A Developer's Implementation Guide
Most GDPR mistakes happen at the code level, not the legal level. A practical developer's guide to cookie consent, conditional loading, and server-side compliance.
Read the article →WordPress Security in 2026: The Complete Hardening Checklist
43% of the web runs WordPress - and attackers know it. Get 20+ specific hardening steps, current attack vectors, and a prioritisation framework to secure your site fast.
Read the article →WordPress Performance Optimization: From 4 Seconds to Under 1
Caching plugins alone won't fix a slow WordPress site. Here's the full optimization sequence — server, database, assets, and delivery — that actually works.
Read the article →Free. Forever.
No account, no upsell tier, no subscription of any kind.
Questions? Get in touch. Answered by the developer who wrote the plugin, usually within a day.