Deskmode Suite

The dashboard is the part of your work that clients see every single day, and by default it looks like everyone else's. Deskmode Suite changes that, and adds the tools you would otherwise install three separate plugins for. Everything happens in the admin area. Your public site is never touched: no changes to your theme, and no scripts added to the pages your visitors see. Plugin notices & ADV: hide the admin notice clutter Every plugin you install thinks its announcement deserves the top of your screen. Ten plugins later the admin notices push your actual work below the fold, and the one message that mattered is buried among the discount banners. Deskmode Suite collects them into a single line with the count, and leaves your screen to you. Open that line and you get every notice, in full, on a page of its own: nothing is destroyed, only moved. Blocks containing an error stay exactly where they are, because an announcement can wait and a failure cannot. Plugins you actually want to hear from can be let through one by one. If anything ever goes wrong, define( 'DESKSU_SHOW_NOTICES', true ); in wp-config.php puts every notice back where WordPress had it, without needing the dashboard. Dashboard theme Three accent colours, chosen from the admin bar on any screen. The colour flows through the menu, buttons, panels and charts, so you pick it once. Where the accent is used as a background, the text colour is calculated from the background's luminance rather than assumed, so it always clears the contrast ratio the WCAG require. Dark mode, per user A floating button flips the whole dashboard, instantly and without a reload. The preference belongs to each user rather than the site, so you can work in dark while a colleague works in light. It steps back on two screens on purpose: the theme customizer, where a dark frame would skew your reading of the colours you are choosing, and Elementor, which forces a light background on its own panels. Menu customizer Drag items into order, rename them into words your client understands, change the icon by clicking it, and hide the ones nobody needs. Counters for pending updates and comments stay attached to their items and keep working. On the Menus screen you also get two buttons per item, to remove one or to duplicate a menu item in a single click. Activity log Eighteen event types in one filterable table: sign-ins, failed logins, password resets, accounts created and deleted, role changes, plugins activated, theme switches, updates installed, content published or deleted. Each entry records the user, the IP address and the time. Events go into a dedicated database table indexed by timestamp, action and IP, rather than into an option row that WordPress would load and rewrite on every request. Site health and charts A score out of a hundred with every reason spelled out: PHP version, HTTPS in the admin, errors visible to visitors, an enabled file editor, the weight of autoloaded options, pending updates, and the state of the database. Alongside it, charts of your site's build time over thirty days and of how the score moves. The charts are SVG generated on the server, so there is no JavaScript library to download and they work under strict content security policies. Maintenance mode A holding page while you work, served with the correct 503 status and a Retry-After header, so search engines understand the site is temporarily down rather than replacing your indexed pages with "back soon". The login page stays reachable, so you cannot lock yourself out. Network tools WHOIS over port 43, DNS records, SSL certificate expiry, and IP lookup with country, ISP and AS number, all from one screen. Useful when a login attempt looks suspicious, or when a client asks why their certificate expired. Login security Three doors WordPress leaves open by default, each one a checkbox with the reason spelled out. Disable XML-RPC, so xmlrpc.php stops accepting password attempts from anyone who asks. Block user enumeration, so ?author=1, the REST users routes, the sitemap and oEmbed stop handing out your usernames. Disable application passwords, which otherwise let any user mint a credential that authenticates over HTTP Basic. Alongside them a security summary: the state of each protection in plain words, plus two read-only checks on the site itself. Must-use plugins, which load on every request and cannot be switched off from the Plugins screen. And executable files sitting in the uploads folder, where nothing should ever be code. The scan is capped and says so when the result is partial, rather than pretending it read everything. Clear about limitations CPU time and memory per plugin are not shown, because from inside WordPress they cannot be measured reliably. Database time is the slice that genuinely can be measured, and that is the slice you get. Every module can also be switched off from wp-config.php, without dashboard access, for when something goes wrong. Deskmode Suite is built by 3WEB, an Italian company that has been building and maintaining websites and servers since 1999. Full documentation and a page for every feature are on the Deskmode website. What Deskmode Pro Suite adds The free version is a complete plugin, not a trial: nothing here expires and nothing is limited by a quota. If you look after sites for other people, these are the tools the Pro version adds, and they are the reason it exists.

• Login security - failed-attempt limits, blocklist and allowlist with CIDR notation, allowed login hours, and IP reputation scoring.
• Geofencing - allow logins only from the countries you actually work in, either refusing the attempt or never rendering the login form at all.
• Two-factor authentication - TOTP with any authenticator app, or codes by email, with recovery codes and a captcha on the login form.
• Security email alerts - an email when a login is blocked, and when someone signs in from an address you have never seen before.
• Hardening - REST API rate limiting, and moving wp-login.php to an address of your own.
• Custom login page - your logo, your colours and your copyright on the page your clients see every day.
• 404 page and monitor - a branded 404 page with a search box, and a log of the addresses that trigger it, with hit counts and referrers.
• Security summary widget - blocked attempts, failed logins and the countries they come from, summarised on the dashboard the moment you sign in.
• Mail log - every email your site sends, with recipient, subject, outcome and the plugin behind it.
• Backup and restore - database and files to your own S3-compatible storage or FTP, with credentials encrypted at rest.
• Database cleanup - expired transients, largest tables and the heaviest autoloaded options, with only the safe things actually deleted.
• Search and replace - serialization-aware, with a mandatory preview, for changing your site URL after a migration.
• Menu per role - hide admin menu sections for specific roles, or deny access to them properly.
• Twelve accent colours - twelve instead of three, across menus, buttons, charts and the login page.

Details, screenshots and pricing are on the Deskmode Pro Suite page. Deskmode Pro Suite is a separate download from our own site: there is no upgrade path from within this plugin, and no account or licence key is needed to use the free version.

1. Upload the plugin folder to /wp-content/plugins/, or install it from the Plugins screen in WordPress.
2. Activate the plugin.
3. Open Deskmode Suite in the admin menu.

Nothing is switched on that you did not ask for: each module is independent and runs only when you enable it.

1.0.26

• New Login Security page: disable XML-RPC, block user enumeration, disable application passwords.
• New security summary, with read-only checks for must-use plugins and executable files in uploads.
• New Plugin notices & ADV page: collect other plugins' notices into one line, keeping error blocks visible.

1.0.25

• The menu icon picker now shows it can be clicked, and keeps its background in dark mode.
• Fixed the average load time chart, which recorded nothing on sites whose language uses a comma as the decimal separator.
• Site Health now explains what query profiling needs in order to run, instead of staying empty.

1.0.24

• All function, class, option and hook names now use a single prefix.
• Translations come from WordPress.org instead of being bundled with the plugin.
• Settings import validates the uploaded file before reading it.
• Removed unreachable code left over from earlier versions.

1.0.23

• Bug fixes.

1.0.2

• Bug fixes.

1.0.1

• Bug fixes.

1.0.0

• First public release.