Free SEO tools, inside WordPress
25 tools that work on your site, and a Checkup that puts everything worth a look in one list. Each line leads to the tool that fixes it.
Version 1.2.31 · WordPress 5.7 or newer · free forever, nothing lockedInside WordPress
They run on your site and send nothing to us. Your e-mail connects the site and opens them: we need it to set up your domain's own data space, send no spam because of it and never sell it.
Search visibility
Pages a search engine cannot show: marked noindex, closed in robots.txt, or pointing to another address.
Redirects
Old addresses to new ones, with patterns and a hit counter. Takes your rules from Redirection, Rank Math, Yoast and seven more, and exports them for .htaccess or Nginx.
Broken links
Links in your posts and pages that lead to a missing page of your site, fixed in the post or with a redirect.
404 log
Which missing addresses visitors and bots ask for and how often, where each one most likely moved, and a redirect in one click. No IPs kept.
Content check
Posts that are very short, untouched for two years, without an image or links, or that share a title.
Headings
Pages with no main heading, with several, or with a level left out. Read from the finished page, page builders included.
Image alt text
Missing alt texts filled from the file name or title. Hand-written ones stay, and one click takes it all back.
robots.txt
Switches for which AI bots may read your site and what search engines should skip. No file to edit.
llms.txt
A short guide to your site for AI assistants, built from your menu and newest posts, with room for your words.
Verification codes
Prove to Google, Bing, Pinterest and Facebook that the site is yours, and send new pages to Bing and others at once (IndexNow).
Business card
Your address, phone and opening hours for Google - as structured data, and as a card on your contact page.
Heavy images
Which images weigh over 300 KB and how much they take together. A report only, nothing is compressed.
Speed tweaks
Stop loading the emoji and embed scripts and other extras most sites never use. Each one behind a switch.
Browser cache and compression
Let browsers keep images, fonts, CSS and JavaScript, and send text compressed - unless your server does it already.
Lighter videos
YouTube and Vimeo videos as a light preview - the heavy player loads only when someone presses play.
HTTPS
Certificate expiry at a glance, an email before it runs out, every http:// visit sent to https://, and old http:// links in your content fixed.
Security headers
HSTS and the basic protective headers, each behind a switch, with a check of what visitors really get.
Hardening
Close the doors only attackers use: XML-RPC, leaked login names, the WordPress and PHP versions, the file editor, PHP in uploads.
Login protection
Lock out an address after 5 failed logins - bots stop guessing passwords, you keep your way in.
Comment spam
A hidden field and a timer catch the bots in your comment form. No outside service, nothing deleted.
Cleanup
Old revisions, spam, trash, duplicated and expired data counted in the database and removed with a click, or every week if you like.
Maintenance mode
A "back soon" page for visitors while you work, the real site for you. Search engines know it is temporary.
Cookie banner
Ask visitors before analytics and ads. Pixels and videos wait for consent, Google Consent Mode v2, a consent log on your site.
Firecrux SEO basics
Titles, descriptions, canonical and robots for every page, sharing tags, structured data and the sitemap. Works with what WordPress already does; quiet while another SEO plugin is active.
Snippets
Your own PHP, CSS, JavaScript and HTML, each behind a switch, with tags, export and import from Code Snippets. Checked and tried before it goes on; one that breaks the site turns itself off.
Also in the plugin, free
- Firecrux SEO basics: titles, descriptions, canonical addresses, noindex, social cards, XML sitemap and structured data
- Import from Yoast SEO, Rank Math, All in One SEO, SEOPress, Redirection and Really Simple Security
- Data for Tag Manager: every page tells Google Tag Manager what kind of page it is, with no developer needed
With a free Firecrux account, no time limit
Connect Google Search Console and Google Analytics in the plugin. Up to 200 pages, refreshed weekly.
Google indexing check
Which pages Google has not indexed, and the reason Google gives.
Cookie decline rate
How many visitors decline analytics cookies on your banner, visits Google Analytics never sees. Works with WP Consent API, Complianz, CookieYes and Cookiebot.
Search and AI bots
Which pages they read and which errors they hit, including fake Googlebots, from the plugin's own visit log.
With an account, the plugin sends us your public content every night. Visit logs and cookie-banner counts reach us only after you switch them on in Settings, and Google data only after you connect your Google account. You can switch any of them off at any time.
One free plugin instead of several
| What you need | In Firecrux | Usually |
|---|---|---|
| Redirects and a 404 log | free | Redirection or Rank Math, free |
| HTTPS in one click | free | Really Simple Security, free |
| Hardening: XML-RPC, login names, the file editor | free | Really Simple Security, free |
| HSTS security header | free | Really Simple Security Pro, $69 a year ($49 the first year) |
| Firecrux SEO basics: titles, descriptions, sitemap, structured data | free | Yoast SEO or Rank Math, free |
| Search and AI bots on your site, fake Googlebots | free, with a free account | none of the plugins listed here |
Vendor prices as listed on 22 October 2026, excluding tax, for one site. Prices change; check the vendor pages before you decide.
The full comparison →