Astricode Ops

Astricode Ops helps you block spam registrations, review suspicious users, clean and inspect WordPress data, analyze autoloaded options, and convert JPG and PNG images to WebP from one operational workspace. Live Demo Explore the Astricode Ops live demo to see Astricode Ops Free and Pro in a safe, read-only WordPress environment with prepared sample data. No signup, installation, or password is required. Its key database safety feature is reversible quarantine. For supported option, metadata, and table operations, records can be isolated before permanent deletion, verified, restored if needed, or explicitly purged. This creates a review-first cleanup workflow instead of making every database action immediately irreversible. Learn more about Astricode Ops · Documentation · Compare Free and Pro Astricode Ops Free keeps destructive and repetitive operations under explicit administrator control. It includes real-time registration protection, multi-signal user analysis, manual spam-user cleanup, database inspection and optimization, reversible quarantine, manual WebP processing, diagnostics, and activity logs. Scheduled user cleanup and automatic WebP processing require Astricode Ops Pro. Site health and diagnostics

• Unified operational dashboard.
• WordPress and PHP requirement checks.
• Database, filesystem, locking, and WebP diagnostics.
• Clear health scores based on real installation data.
• Detection of technical conditions that require attention.

Spam registration protection and user cleanup

• Real-time registration firewall for native and third-party registration routes.
• Multi-signal risk scoring for suspicious registrations and existing users.
• Server-signed native registration challenge that rejects fabricated direct-post timing.
• Lightweight local JavaScript execution proof for public browser registration, without external CAPTCHA services.
• Registration rate limiting and burst protection, including repeated low-score attempts.
• Repeated-offender detection and IP blocking.
• User audits with reasons and risk distribution.
• Manual protection for legitimate accounts.
• Controlled manual cleanup of detected spam users.
• Manual deep analysis and cleanup tools with additional safeguards.
• Protection for administrators, privileged roles, active users, authors, and users connected to site content.

Astricode Ops can block or remove an unequivocally malicious account during registration as part of its real-time protection. Scheduled user cleanup requires Astricode Ops Pro. Database cleanup, autoload and reversible quarantine

• Database size and health analysis.
• Table optimization with measured results.
• Inspection of WordPress options and autoloaded data.
• Detection and review of database records that may require cleanup.
• Inspection of post metadata and plugin tables.
• Protected previews and controlled exports.
• Manual protection of critical records.
• Reversible quarantine for supported option, metadata, and table operations.
• Integrity verification before restoration.
• Explicit restoration and permanent purge workflows.

WebP conversion for image optimization

• Controlled manual JPG and PNG to WebP conversion in bounded batches.
• Configurable quality and batch size.
• Preservation of every original JPG and PNG image.
• Conversion of WordPress-generated image sizes.
• Coverage, activity, savings, skipped-file, and failure metrics.
• Automatic WebP processing is available with Astricode Ops Pro.

Activity logs

• Registration blocking records.
• User cleanup activity.
• WebP conversion results.
• Database operation records.
• Limited log retention to avoid uncontrolled growth.

1.0.8

• Security: Adds a lightweight local JavaScript execution proof for public browser registration.
• Security: Binds the proof to the existing signed registration challenge and network source.
• Compatibility: Keeps REST and AJAX integrations compatible by default.
• Privacy: Avoids proof of work, browser fingerprinting, User-Agent binding, additional proof cookies, and third-party CAPTCHA services.

1.0.7

• Security: Enforces the signed registration challenge on public custom registration forms and the universal user-creation barrier.
• Security: Binds registration challenges to their originating network source and rejects replayed challenge tokens.
• Compatibility: Keeps trusted administrator, WP-CLI and cron user creation exempt while allowing integrations to adjust challenge enforcement through filters.

1.0.6

• Harden public registration against low-score automated signup campaigns.
• Replace the manipulable native registration timestamp with a server-signed challenge.
• Add bounded registration velocity controls for repeated source attempts, successful account creation, and extreme site-wide bursts.
• Preserve the existing structural risk thresholds and legitimate-user safeguards.

1.0.5

• Adds the formal extension contract required by Astricode Ops Pro.
• Exposes the versioned Free/Pro extension API and core-ready lifecycle contract.
• Keeps Astricode Ops Free functionality and public compatibility unchanged.

1.0.4

• Prepared the stable Astricode Ops package for public distribution.
• Added registration firewall traceability to the Dashboard.
• Added counters for native registration, custom forms, REST API, AJAX, wp_insert_user, registration_errors, user_register, and recent-user consistency checks.
• Added the last detected registration route, blocking layer, score, username, and email domain without storing the complete email address.
• Fixed duplicate IP penalization during post-registration safeguards.

1.0.3

• Expanded registration protection to third-party forms and integrations.
• Added consistency checks for recently created accounts.
• Centralized post-registration spam safeguards and event traceability.

1.0.2

• Added separate pre-registration and post-registration risk thresholds.
• Added an immediate safeguard for unequivocally malicious newly created accounts.
• Preserved administrator, WP-CLI, cron, privileged-role, and explicitly allowed registrations.

1.0.1

• Unified registration protection with the complete user risk engine.
• Added protection for registration flows using wp_insert_user().
• Added firewall consistency diagnostics.

1.0.0

• First stable release of the original production-tested architecture.
• Included health diagnostics, registration protection, user auditing, database operations, reversible quarantine, WebP processing, and activity logs.
• Preserved conservative cleanup rules and persistent data during deactivation. Older development history is preserved in the project documentation.