Faster WordPress pages with a built-in safety net

Disk page cache. Stores a rendered copy of each page and serves it before WordPress loads.

Two-step cache decision. A page is stored only when a check before WordPress loads and a check after rendering both agree it is cacheable.

Serve stale while rebuilding. When a page expires, one visitor triggers the rebuild while others receive the previous copy, with a stale window of 1 to 1440 minutes (default 60).

Compressed copies. Keeps gzip copies, plus Brotli when the PHP brotli extension is installed, so pages are sent compressed with no extra CPU work.

Mobile and cookie variants. Optional separate copies for themes that send different HTML to phones, and one copy per value of chosen cookies such as a currency switcher.

Status header and hit counter. An optional X-SpeedForge header reports HIT, MISS, STALE or BYPASS, and a 7-day hit rate appears on the Overview.

Smart purge. Editing a post clears that post and the pages that list it, such as the home page, archives, categories, tags and parent pages, rather than the whole cache.

Purge from anywhere. Purge everything, a single URL or the current page from the admin bar, the Cache screen, the command palette or WP-CLI.

Background preload. Visits pages through WP-Cron so the first real visitor gets a cached copy, starting with the home page, then menus, then everything else.

Rebuild after purge. Purged pages can be queued for preloading straight away, with tunable batch time, pause between requests and a URL cap (default 5,000).

Query string control. Ignores 20 common tracking parameters such as utm tags, fbclid and gclid by default, while other parameters can be allowed their own cached copies.

Cached public reads. Anonymous GET requests to wp-json routes, by default the core wp/v2 routes, are served from cache along with their pagination headers.

Authenticated traffic always bypasses. Login cookies, Authorization headers, application passwords, nonces, API key headers, token parameters and WooCommerce cart tokens all go straight to WordPress.

Instant invalidation. Any content change, including custom fields, clears the REST cache, and a lifespan setting covers changes a purge cannot see.

CORS from cache. Cached copies answer cross-origin requests with WordPress's default CORS headers, and this behaviour can be turned off.

Minify HTML, CSS and JavaScript. Produces smaller local files and pages, leaves scripts, styles, pre blocks and form fields untouched in HTML, and only copies files that are already minified.

Combine CSS and JavaScript. Joins adjacent local files while keeping their order and media, and never joins files that use @import.

Defer JavaScript. Lets the page render before scripts run, respecting WordPress's own loading decisions, with jQuery excluded by default.

Delay third-party scripts. Analytics, pixels, chat and ad scripts, matched by 17 preset patterns, load on the first scroll, tap, click or keypress, with an optional timeout.

Move head scripts to the footer. Moves scripts out of the head while keeping their order.

Scope controls and safe mode. Logged-in users get unmodified pages by default, paths can be excluded, and a step that fails on a page is switched off for that page only.

Lazy loading. Images, iframes, videos and inline background images load as visitors scroll, with the first images (default 2) kept eager and exclusions by URL, class or ID.

Main image priority. Marks the first large image, usually the LCP element, as high priority and never lazy-loads it.

Missing image dimensions. Adds width and height to uploaded images that lack them, reducing layout shift.

YouTube and Vimeo placeholders. Shows a click-to-play preview so the player loads only when a visitor asks for it.

WebP and AVIF copies. Creates copies on your server with GD or Imagick, keeps them only when smaller, serves them through a picture element and converts existing images in bulk or new uploads in the background.

Upload limits. Sets WordPress's big-image threshold (default 2560 px) and the JPEG quality used for resized images (default 82).

Persistent object cache. Supports Redis, Memcached or APCu, tests the connection before switching on, and during an outage lets WordPress carry on while retrying every 30 seconds.

Safe on shared servers. Clears only this site's keys, honours WP_REDIS constants and never replaces an object-cache.php that belongs to another plugin or your host.

Database cleanup with dry run. Ten cleanups, including old revisions, auto-drafts, trash, spam, orphaned meta, expired transients and the embed cache, show their counts before anything is deleted.

Undo for cleanups. Every deleted row is saved to a backup file first, the last five cleanups can be put back, and an optional weekly schedule is off by default.

Autoloaded options analysis. Lists the largest autoloaded options with their likely plugin and lets you stop autoloading one, reversibly, with WordPress's own options protected.

Tables. Shows overhead and optimises tables on MySQL and MariaDB, and lists tables left by other plugins without ever deleting them.

WordPress features, one by one. Turn off the emoji script, extra head links, oEmbed discovery, Dashicons for visitors, jQuery Migrate, XML-RPC, RSS feeds and self-pingbacks individually.

Heartbeat control. Keep the WordPress default, slow it to every 60 seconds, turn it off on the site only, or allow it only in the post editor.

Revision limit. Set how many revisions WordPress keeps per post, with any value in wp-config.php taking precedence.

Script Manager. Scan any page as a visitor to list its scripts and stylesheets with size, origin and dependants, then switch one off on that page, on URL patterns or everywhere.

Host and CDN cache detection. Identifies Cloudflare including APO, Sucuri, Fastly, CloudFront, QUIC.cloud, Kinsta, WP Engine, SiteGround, Cloudways, Pantheon, Varnish, Nginx FastCGI cache and more, with evidence and advice for each.

Purge forwarding. Clears LiteSpeed, Varnish, Nginx, Kinsta, WP Engine, SiteGround and Cloudways caches whenever SpeedForge purges, even with its own page cache off.

Cloudflare API connection. An opt-in API token clears changed pages or everything on Cloudflare, and a one-click mode keeps optimisation while the host handles page caching.

CDN rewrite. Serves this site's static files from BunnyCDN, KeyCDN, CloudFront or any pull CDN by file type and folder, while JavaScript modules stay local so import maps keep working.

Browser caching and compression rules. Long-lived caching for static files, gzip or Brotli for text, font CORS, consistent ETags and HTML revalidation, written to .htaccess only after you review and apply.

Optional security headers. Nosniff, referrer policy, frame protection and HSTS, each off by default with a note on what it can affect.

Before and after speed test. Measures up to five test pages without SpeedForge and as visitors get them now, covering response time, page weight, requests and render-blocking files, with optional PageSpeed Insights scores.

Automatic check and rollback. After each save the test pages are compared with and without SpeedForge on status, errors, title and visible text, and a breaking change is reverted at once.

Settings versions. The last 20 changes are kept with what changed, and you can restore any version or return to the last known good one.

Presets. Safe, Balanced and Fastest presets are applied as normal saves, so they are checked and undoable like any other change.

Export and import. Moves all settings and Script Manager rules between sites as JSON, without passwords or tokens.

Admin experience. A single-page admin with a Ctrl or Cmd+K command palette, light and dark themes, risk labels, an activity log and two Site Health tests.