Yes. Brainwerk SEO Suite auto-detects the active SEO plugin and stands down its meta, schema, sitemap and robots modules so there's no duplicate output. Analytics, the 404 log, redirects and the on-page analyzer keep working side by side. A single toggle on the Privacy \/ GDPR<\/em> tab forces takeover whenever you want.<\/p><\/dd>\nDo I need to add a cookie banner?<\/h3><\/dt>\nNot because of Brainwerk SEO Suite. The plugin doesn't drop any cookies, doesn't use a cross-site identifier, anonymizes IPs and respects DNT by default. The bundled privacy snippet documents exactly what is stored so you can paste it into your own privacy policy.<\/p><\/dd>\n
Is the analytics data accurate without JavaScript?<\/h3><\/dt>\nThe server-side mode catches all real requests, including users who block JavaScript or use strict tracking-protection. It does count fewer \"bot-like\" visits than JS-based analytics because we filter known crawler user agents. A JS beacon mode for time-on-page and scroll depth is included if you want the extra signal.<\/p><\/dd>\n
Will Brainwerk SEO Suite slow down my site?<\/h3><\/dt>\nThe tracker only inserts one row per pageview (no joins, no remote calls). All dashboards read from a pre-aggregated daily table, so the admin pages are sub-millisecond even at 100k+ visits per month. The sitemap and meta output are cached.<\/p><\/dd>\n
Is there a wp-cli command?<\/h3><\/dt>\nYes \u2014 wp seoforge stats<\/code>, wp seoforge purge<\/code>, wp seoforge cleanup<\/code>, wp seoforge aggregate<\/code>, wp seoforge export<\/code>, wp seoforge import-redirects<\/code>, wp seoforge seed-demo<\/code> and wp seoforge license<\/code>.<\/p><\/dd>\nWhere is data stored?<\/h3><\/dt>\nSix tables under the network prefix (wp_seoforge_visits<\/code>, _sessions<\/code>, _redirects<\/code>, _404<\/code>, _meta<\/code>, _daily<\/code>) and a settings option. Nothing leaves the server (Pro modules use opt-in external APIs).<\/p><\/dd>\nWhere is the license server?<\/h3><\/dt>\nLicensing is handled by Freemius (Merchant of Record). All license traffic goes to api.freemius.com<\/code>. There is no Brainwerk SEO Suite-operated license server.<\/p><\/dd>\n\n<\/dl>\n\n\n0.7.5 \u2014 2026-06-19<\/h4>\n\n\n- Security\/SQL<\/strong>: every plugin-owned table name that was previously interpolated into a query string is now passed through the
$wpdb->prepare()<\/code> %i<\/code> identifier placeholder (WordPress 6.2+) instead of string interpolation. Conditional WHERE<\/code> builders and the breakdown\/percentile switches were restructured so each $wpdb->prepare()<\/code> call receives a string literal with placeholders only \u2014 no SQL string is built in a variable. The only remaining interpolation is the dynamic post_type IN (...)<\/code> list, which uses generated %s<\/code> placeholders bound through prepare()<\/code> (an IN()<\/code> list cannot use %i<\/code>). Requires at least WordPress 6.2.<\/li>\n<\/ul>\n\n0.7.4 \u2014 2026-06-14<\/h4>\n\n\n- Security<\/strong>: removed the last two cases of a column identifier being interpolated into SQL. The breakdown query (
Seoforge_Stats::group_count()<\/code>) and the Core Web Vitals percentile query (Seoforge_Reports::percentile()<\/code>) now select a separate, fully literal query string per allowed column \u2014 the SQL identifier is never taken from a variable. All values continue to be bound through $wpdb->prepare()<\/code>.<\/li>\n<\/ul>\n\n0.7.3 \u2014 2026-06-13<\/h4>\n\n\n- Enqueue<\/strong>: the Reports tab no longer outputs an inline
<script><\/code>; its quick-range helper moved into the enqueued assets\/js\/admin.js<\/code>.<\/li>\n- i18n<\/strong>: the last
seoforge<\/code> text-domain string now uses brainwerk-seo-suite<\/code>, matching the plugin slug.<\/li>\n- Security<\/strong>: report admin-post handlers sanitize the nonce with
sanitize_text_field( wp_unslash() )<\/code> and unslash\/sanitize all request values; the post meta box sanitizes its submitted array at input.<\/li>\n<\/ul>\n\n0.7.2 \u2014 2026-06-10<\/h4>\n\n\n- Security<\/strong>: table names passed to the internal table-resolver are now validated against the fixed whitelist of plugin tables before being used in SQL.<\/li>\n
- Security<\/strong>: the migration coordinator builds its post-type
IN (...)<\/code> list from dynamically generated %s<\/code> placeholders via $wpdb->prepare()<\/code> instead of escaping + interpolation.<\/li>\n- Security<\/strong>: internal report\/stats helpers validate metric and group-by column names against fixed whitelists before using them as SQL identifiers.<\/li>\n<\/ul>\n\n
0.7.1 \u2014 2026-06-03<\/h4>\n\n\n- Security<\/strong>: Schema.org JSON-LD is now emitted with slash-escaping (no
JSON_UNESCAPED_SLASHES<\/code>), so a value containing <\/script><\/code> can no longer break out of the inline application\/ld+json<\/code> block. \\\/<\/code> and \\uXXXX<\/code> remain valid JSON-LD.<\/li>\n<\/ul>\n\n0.7.0 \u2014 2026-05-21<\/h4>\n\n\n- Rebranded<\/strong> to Brainwerk SEO Suite (was: SEOForge). Display name + text-domain + plugin filename updated.<\/li>\n
- Security<\/strong>: nonce verification in the post meta box now goes through
sanitize_text_field( wp_unslash() )<\/code> (pluggable-function hardening).<\/li>\n- Security<\/strong>:
$_COOKIE<\/code> reads in the tracker now go through sanitize_text_field( wp_unslash() )<\/code> in addition to the existing hex-filter.<\/li>\n- Security<\/strong>: SVG sparkline attributes in the dashboard widget now use
esc_attr()<\/code> for chart coordinates.<\/li>\n- Security<\/strong>: WP-CLI
export --out=<path><\/code> is now restricted to a wp-content\/uploads\/seoforge\/<\/code> subdirectory (and writes only the basename) so it cannot clobber arbitrary paths.<\/li>\n- wp.org compliance<\/strong>: removed the Pro-only bearer-key path from the REST
permission_callback<\/code>. The Free REST API is admin-cookie\/nonce only. Pro external dashboards stay in the separate Premium build.<\/li>\n- wp.org compliance<\/strong>: removed
load_plugin_textdomain()<\/code> \u2014 WordPress 4.6+ auto-loads translations for plugins hosted on wp.org by slug.<\/li>\n- wp.org compliance<\/strong>: weekly digest now uses
admin_url()<\/code> instead of a hard-coded \/wp-admin\/<\/code> path.<\/li>\n- Docs<\/strong>: readme now documents the optional Anthropic (Claude) API integration as an
== External services ==<\/code> section, with what is sent, when, how to disable, and links to Anthropic's Terms \/ Privacy.<\/li>\n<\/ul>\n\n0.6.0 \u2014 2026-05-19<\/h4>\n\n\n- Freemius integration live-wired end-to-end (real product IDs, SDK in
freemius\/<\/code>, is_live=true<\/code>).<\/li>\n- Paid plans Starter (\u20ac59\/yr, 1 site) and Agency (\u20ac199\/yr, 25 sites) with auto-generated pricing table.<\/li>\n
- New sanity row in the Tools tab reports SDK \/ opt-in \/ license state.<\/li>\n
- Premium build script (
bin\/build-premium.sh<\/code>) for Freemius Deploy.<\/li>\n- Fix:
Seoforge_License::is_pro()<\/code> now uses is_paying()<\/code> so Pro modules load in both Free and Premium builds with a valid license.<\/li>\nuninstall.php<\/code> logic migrated to Freemius after_uninstall<\/code> hook (per Freemius Deploy guideline).<\/li>\n<\/ul>\n\n0.5.0 \u2014 2026-05-10<\/h4>\n\n\n- CI alignment with the ShieldForge UX (Hero banner, tab groups, action items, iOS toggles, tooltips, dark mode, mobile, sanity card).<\/li>\n
bin\/bump-version.{sh,ps1}<\/code> + bin\/build-free.{sh,ps1}<\/code> + .distignore<\/code>.<\/li>\n- Pre-launch sanity check (17 checks across versioning, cron, DB, privacy, tracking, sitemap, coexistence, file hygiene, readme, translations).<\/li>\n
- i18n: POT + de_DE PO\/MO shipped.<\/li>\n
- PHPUnit tests for
Seoforge_Crypto<\/code> + Seoforge_Analyzer<\/code>.<\/li>\n<\/ul>\n\n0.4.0 \u2014 2026-05-07<\/h4>\n\n\n- Migration wizard for Yoast \/ RankMath \/ AIOSEO (metadata + redirects).<\/li>\n
- JS-beacon tracking mode with scroll depth + outbound clicks.<\/li>\n
Seoforge_Health<\/code> setup-health score on the Dashboard.<\/li>\n- UX polish for non-technical site owners.<\/li>\n<\/ul>\n\n
0.3.0 \u2014 2026-05-07<\/h4>\n\n\n- Pre-aggregated daily table for O(1) dashboard queries.<\/li>\n
- Transient caches with auto-flush on mutations.<\/li>\n
- License-key encryption at rest (AES-256-CBC).<\/li>\n
- Streamed CSV exports (visits, sessions, 404, redirects).<\/li>\n
- Bulk redirect import from CSV.<\/li>\n
- WP-CLI commands (
wp seoforge ...<\/code>).<\/li>\n- Demo seeder + live-visitors widget.<\/li>\n
- REST API (
\/wp-json\/seoforge\/v1\/...<\/code>).<\/li>\n<\/ul>\n\n0.2.0 \u2014 2026-05-07<\/h4>\n\n\n- Coexistence layer detects Yoast \/ RankMath \/ AIOSEO \/ The SEO Framework \/ SEOPress and stands down passively.<\/li>\n
- License + Pro module foundation.<\/li>\n
- Pro stubs: Geo-Lookup, webhooks, anomaly detection, Search Console.<\/li>\n
- Marketing landing page (
landing\/index.html<\/code>).<\/li>\n<\/ul>\n\n0.1.0 \u2014 2026-05-07<\/h4>\n\n\n- Initial release: tracker, sessions, stats, meta, schema, sitemap, robots, redirects, 404 log, on-page analyzer, weekly digest, onboarding wizard, tools tab.<\/li>\n<\/ul>","raw_excerpt":"Privacy-first SEO + visitor analytics. Sitemap, Schema.org, redirects, 404 log, on-page analyzer. Multisite-ready, made in EU.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/315682","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=315682"}],"author":[{"embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/brainwerk"}],"wp:attachment":[{"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=315682"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=315682"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=315682"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=315682"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=315682"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/twd.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=315682"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}