by Naiche 5 (1 reviews)

Zamok – Security and Site Tools

Name: Zamok – Security and Site Tools
Rating: 5.0 (1 reviews)
Author: Naiche

Debloat, harden, optimize, and back up WordPress — one lean, free, open-source plugin. No tracking, no telemetry, no paid tier.

Zamok ranks #14,649 among WordPress.org plugins with 100+ active installations, is #622 of 3,634 in the Communication category, a 5/5 rating from 1 reviews, and was last updated Oct 7, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1.4

v1.0.8 Current Version v1.0.8

Updated 1 month ago Last Update on 07 Oct, 2026

Refreshed 1 week ago Last Refreshed on

#622 of 3,634 in Communication Top 25% by installs

View on WordPress.org

Rank

#14,649

— No change

Active Installs

100+

— No change

KW Avg Position

1 worse

Downloads

1.8K

+2 today

Support Resolved

— No change

Rating

100%

Review 5 out of 5

5 (1 reviews)

Next Milestone 200

Total Progress 54%

100+ 200+

1,975

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 46 more installs to reach 200+

Rank Changes

Current #14,649

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0

1 reviews

Overall 100%

1 (100%)

0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Zamok. Checked 3 months ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.0.8
Last Updated: Oct 07, 2026
Requires WP: 7.0+
Tested Up To: 7.1.4
PHP Version: 8.4 or higher
Author: Naiche

Support & Rating

Rating: ★ ★ ★ ★ ★ 5
Reviews: 1
Support Threads: 0
Resolved: 0%

Keywords

backup debloat performance security smtp

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

WP Mail SMTP by WPForms – SMTP for Reliable Email Delivery with Gmail, Outlook, Amazon SES, Brevo, Other SMTP & More

4M+ installs

#12

MC4WP: Mailchimp for WordPress

1M+ installs

#35

Hostinger Reach – AI-Powered Email Marketing for WordPress

1M+ installs

#41

Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation

FluentSMTP – WP Mail SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any SMTP

700K+ installs

#87

Joinchat – Enhanced “click to chat”

700K+ installs

#89

View all Communication plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who want to reduce plugin bloat while adding security, performance, and backup functionality. It solves the problem of needing many separate single-purpose plugins for admin cleanup, security hardening, email delivery, image optimization, database maintenance, and backups by consolidating them into one modular, free plugin.

Two-Factor Authentication
Brute Force Protection
IP Banning
SMTP email delivery
Image Optimization to WebP
Database Search & Replace
Full-site encrypted backups
Custom Login URL

Frequently Asked Questions

Common questions about Zamok – Security and Site Tools

Yes. GPL-2.0-or-later, forever. There is no pro tier, no upsell, no feature locked behind a payment. We built this to replace plugins whose business model is upselling you — adding our own would defeat the point.

No. There is no usage tracking, analytics, telemetry, or licensing call-home. Everything runs on your own server. The only outbound connections are ones you configure and opt into: your SMTP server (Email module) and your SFTP server (Backups module). The backup worker makes a local loopback request to your site's own admin-ajax.php to advance background jobs, and the standalone restore installer optionally fetches fresh salts from wordpress.org (with a local fallback).

Two-Factor is opt-in and defaults off. Backup codes are mandatory at setup, an administrator can reset any user's 2FA from the user-edit screen, and the ZAMOK_2FA_DISABLE constant in wp-config.php is an emergency escape hatch.

Yes. SMTP, SFTP, and the backup encryption key can be pinned in wp-config.php via ZAMOK_SMTP_PASSWORD, ZAMOK_SFTP_PASSWORD / ZAMOK_SFTP_KEY, and ZAMOK_BACKUP_KEY. Secrets stored in the database are encrypted with libsodium.

Every module works on any server. The System Hardening module writes .htaccess rules, which apply on Apache/LiteSpeed; on Nginx those rules are inert and the documented Nginx snippets should be used instead.