Percio Castelo.
PT Home
WORDPRESS HUB & HARDENING

WordPress — Tools & Code Catalog

Unified security audit hub and technical catalog with 87 production-tested code snippets. Optimize, secure, and customize your WordPress instances directly in functions.php, mu-plugins, or .htaccess, eliminating heavy plugin dependencies and significantly reducing attack surface.

WORDPRESS TOOLS

6 Utilities

CODE CATALOG

87 Snippets

SECOPS INTEGRATION

100% Client-Side
// ECOSYSTEM & AUTOMATION

Specialized Tools for WordPress

Interactive audits, a dedicated code snippets library, and command-line scripts for automation and credential rotation.

Interactive

WPLista — WordPress Checklist

Interactive technical checklist with 101 practical guidelines across 12 architectural areas (wp-config, login, admin panel, server, database, security, performance, and SEO). Saves progress locally and exports .txt reports.

Checklist 101 Guidelines Hardening Export TXT
Technical Library

Code & Snippets Catalog

Full library with 87 production-ready code snippets across Actions, Filters, .htaccess directives, and Shortcodes. Zero plugin bloat: copy code with one click and apply directly to your environment.

87 Snippets Actions & Filters .htaccess One-Click Copy
Shell Script

WP Change Prefix

Automation shell script to securely change the default MySQL table prefix (wp_) to a unique random string, mitigating automated SQL injection vectors.

Bash / Shell MySQL Database GitHub
Python CLI

WP Salt Key Updater

Python CLI automation utility for periodic rotation of security salt keys (AUTH_KEY, SECURE_AUTH_KEY, etc.) in wp-config.php, forcing global session invalidation.

Python wp-config.php Cryptography Hardening
CLI Tool

WP Change Domain

Safe URL and domain search-replace tool for WordPress databases with strict preservation of PHP serialized strings and objects.

Migration Serialized Data MySQL GitHub
Sysadmin / Audit

DirectAdmin Check WP-Admin

Security auditor for DirectAdmin and Linux hosting servers. Monitors suspicious requests and abusive brute-force attacks against wp-login.php and xmlrpc.php.

DirectAdmin Log Parser Brute Force Sysadmin