Zamok - Security and Site Tools
by Naiche 1 (1 reviews)

Zamok - Security and Site Tools

Debloat, harden, optimize, and back up WordPress — one lean, free, open-source plugin. No tracking, no telemetry, no paid tier.

Zamok ranks #14,834 among WordPress.org plugins with 1+ active installations, is #1,960 of 3,358 in the Communication category, a 1/5 rating from 1 reviews, and was last updated Jun 24, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 7 (Current: 7.1)
v1.0.0 Current Version v1.0.0
Updated 2 months ago Last Update on 24 Jun, 2026
Refreshed 9 hours ago Last Refreshed on
#1,960 of 3,358 in Communication
View on WordPress.org
Rank
#14,834
No change
Active Installs
1+
-99.3%
KW Avg Position
6
No change
Downloads
1.1K
+88 today
Support Resolved
0%
No change
Rating
20%
Review 1 out of 5
1 (1 reviews)

Next Milestone 10

Total Progress 80%
0+ 10+
14,126
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 2 more installs to reach 10+

Rank Changes

14,458 14,564 14,671 14,777 14,883 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026
14,458 14,564 14,671 14,777 14,883 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026
Current #14,834
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 100 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026
0 100 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026 17-09-2026 18-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

1.0
1 reviews
Overall 20%
5
1 (100%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Zamok. Checked 1 month ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who want to reduce plugin bloat while adding security, performance, and backup functionality. It solves the problem of needing many separate single-purpose plugins for admin cleanup, security hardening, email delivery, image optimization, database maintenance, and backups by consolidating them into one modular, free plugin.

  • Two-Factor Authentication
  • Brute Force Protection
  • IP Banning
  • SMTP email delivery
  • Image Optimization to WebP
  • Database Search & Replace
  • Full-site encrypted backups
  • Custom Login URL

Frequently Asked Questions

Common questions about Zamok - Security and Site Tools

Yes. GPL-2.0-or-later, forever. There is no pro tier, no upsell, no feature locked behind a payment. We built this to replace plugins whose business model is upselling you — adding our own would defeat the point.
No. There is no usage tracking, analytics, telemetry, or licensing call-home. Everything runs on your own server. The only outbound connections are ones you configure and opt into: your SMTP server (Email module) and your SFTP server (Backups module). The backup worker makes a local loopback request to your site's own admin-ajax.php to advance background jobs, and the standalone restore installer optionally fetches fresh salts from wordpress.org (with a local fallback).
Two-Factor is opt-in and defaults off. Backup codes are mandatory at setup, an administrator can reset any user's 2FA from the user-edit screen, and the ZAMOK_2FA_DISABLE constant in wp-config.php is an emergency escape hatch.
Yes. SMTP, SFTP, and the backup encryption key can be pinned in wp-config.php via ZAMOK_SMTP_PASSWORD, ZAMOK_SFTP_PASSWORD / ZAMOK_SFTP_KEY, and ZAMOK_BACKUP_KEY. Secrets stored in the database are encrypted with libsodium.
Every module works on any server. The System Hardening module writes .htaccess rules, which apply on Apache/LiteSpeed; on Nginx those rules are inert and the documented Nginx snippets should be used instead.

More plugins by Naiche

Sign In / Register

You need to sign in or register to use this feature.