Falcon – Cache, Performance, Security, Cleanup, and Tweaks

Description

Falcon is a lightweight WordPress plugin that helps you speed up your site, harden security, clean up bloat, and fine-tune how WordPress works — without a heavy stack of separate tools.

Toggle only what you need from a clear settings UI. Export and import settings to reuse the same setup across sites.

Features

Performance

Make pages load faster and cut unnecessary front-end work.

• HTML page cache — serve static HTML and skip WordPress, themes, and plugins on cache hits
• Disable Heartbeat to reduce server load
• Remove ?ver= query strings from CSS/JS for better browser caching
• Disable emoji scripts and styles
• Remove jQuery Migrate on the front end
• Load selected CSS files asynchronously to reduce render-blocking

Security

Reduce common attack surfaces and protect your content.

• Limit login attempts (block an IP after 3 failed tries for 1 hour)
• Hide detailed login error messages
• Force login to view the site
• Disable the REST API for unauthenticated requests
• Disable XML-RPC
• Restrict upload file types (including WebP and AVIF when enabled)
• Comment spam protection with a simple honeypot
• Block common AI crawlers via robots.txt
• Use scheme-less asset URLs to avoid mixed content warnings

Cleanup

Strip unused markup and keep the database lean.

Header

• Hide WordPress version
• Remove shortlink, REST API link, adjacent posts links, feed links, RSD link, and WLW manifest link

Admin

• Use the site icon on the login screen
• Hide update nags
• Remove default dashboard widgets
• Remove admin footer text and the WordPress admin bar logo

Frontend

• Disable embeds
• Clean up menu item classes and IDs
• Remove Recent Comments widget CSS

Database

• Clean revisions, auto drafts, trashed posts, spam/trashed comments, expired transients, orphaned meta, unused terms, and optimize tables

Content

Control the editor, comments, media, and publishing behavior.

Editor

• Disable the block editor (Gutenberg) and use the classic editor
• Disable post revisions
• Disable texturize (smart quotes and auto formatting)

Comments

• Disable comments site-wide
• Remove the website field from the comment form

Media

• Disable thumbnail generation
• Disable big image scaling
• Disable EXIF-based image rotation

Publishing

• Limit front-end search to posts only
• Disable self pingbacks

System

Site-wide controls for maintenance and WordPress internals.

• Maintenance mode (customize the message with maintenance.php in the active theme)
• Block external HTTP requests
• Disable application passwords
• Disable auto-updates
• Disable WP-Cron (use a real server cron instead)
• Remove privacy tools from the admin menu
• Disable AI features and hide the Connectors settings page

Email

Cut noisy notifications and send mail reliably.

Notifications

• Disable admin email verification prompts
• Disable update notification emails
• Disable new user emails to admins
• Disable password change/reset emails

Delivery

• Change the default from name and email address
• Send WordPress email via SMTP

You might also like

If you like this plugin, you might also like our other WordPress products:

• Meta Box – A powerful WordPress plugin for creating custom post types and custom fields.
• Slim SEO – A fast, lightweight and full-featured SEO plugin for WordPress with minimal configuration.
• GretaThemes – Free and premium WordPress themes that clean, simple and just work.
• Auto Listings – A car sale and dealership plugin for WordPress.

Technical details