Beskriuwing
DiceStack is a free, all-in-one WordPress plugin that replaces a whole stack of separate (and often paywalled) plugins — caching, security, SEO, WooCommerce enhancements, backups, image optimization and more — with one lightweight, modular toolkit. Switch tools on and off from a single dashboard; when a tool is off, none of its code runs, so your site stays fast.
Looking for a WordPress cache plugin, security plugin, SEO plugin, backup plugin, or image optimizer — and tired of installing five different ones that slow your site down? DiceStack gives you 170+ tools in a single install, every feature free, with no locked “Pro” tier and no ads.
Built and maintained by Dice Codes.
Why DiceStack
- Modular & light — disabled modules load zero code, scripts, or extra database reads.
- See the cost of everything — each module shows its memory, front-end JavaScript, and database-query impact so you decide what to keep.
- No paywalls — 2FA-grade login protection, schema, spam protection, caching, backups, and more, all included.
- Self-hosted first — runs on your own server. Modules that contact an external service ask for consent and link to where to get any keys.
What’s included (170+ modules across 10 categories)
- Security — brute-force login protection, login & comment CAPTCHA, security hardening, HTTP security headers, force HTTPS / SSL, activity & audit log, 404 error monitor, bad-bot blocking, disable XML-RPC, and Cloudflare control (Under Attack mode, cache purge).
- Performance & caching — full-page cache with GZIP, mobile cache and preloading, Redis / Memcached object cache, minify HTML, defer JavaScript, lazy-load images, image optimization, database cleanup and optimization, heartbeat control, hover prefetch, and disable-bloat tools.
- SEO & AI — meta title / description tags, Open Graph & Twitter card tags, schema / JSON-LD structured data (rich snippets), breadcrumbs, FAQ schema, 301 redirect manager, robots.txt control, site verification, GA4 / Google Tag Manager / Meta Pixel analytics, llms.txt for AI assistants, and a free SEO & AI visibility checker.
- WooCommerce — checkout field editor, custom order statuses, wishlist, back-in-stock alerts, product badges, catalog mode, quantity buttons, extra fees, free-shipping bar, and more.
- Forms — contact form, spam protection, SMTP email delivery, newsletter signup, and a universal form submissions tracker.
- Media — image optimizer / compression, WebP & AVIF uploads, media folders / categories, image lightbox, and a broken-image finder.
- Backups & site management — backup & restore (no upload limit), cloud backup (FTP / WebDAV / email / Google Drive), database search & replace, config import / export, monthly client report, and update notifications.
- Content & marketing — announcement bar, cookie consent, maintenance / coming-soon mode with a shareable bypass link, table of contents, related posts, reading progress, and more.
- Admin & developer — admin menu editor, white label, master search, hide admin notices, and developer utilities.
- Accessibility & legal — accessibility toolbar, skip links, focus outlines, reduced motion, cookie & terms consent.
External services
DiceStack itself contacts no external services by default. The following modules connect to a third party only when you enable and configure them, and each field links to where to obtain any required ID/token:
- Analytics & tracking — when you add a GA4, Google Tag Manager, or Meta Pixel ID, the corresponding script from Google/Meta is loaded on your front end and visitor analytics is sent to that provider. See Google’s privacy policy (https://policies.google.com/privacy) and Meta’s (https://www.facebook.com/privacy/policy/).
- Cloudflare control — sends your API token and Zone ID to the Cloudflare API (https://api.cloudflare.com) to change settings you request. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/.
- Cloud backup — uploads your backup archive to the destination you configure (your own FTP/WebDAV server, an email address, or Google Drive). Google Drive uses a one-time connect via the Dice Codes connector (https://dicecodes.com/dicestack); only an access token is stored.
No data is sent to any of these unless you turn the relevant module on and enter your details.
Ynstallaasje
- In wp-admin go to Plugins Add New Upload Plugin and choose
dicestack.zip(or install from the directory). - Activate DiceStack.
- Open DiceStack in the admin menu and toggle on the modules you want. Each card shows its performance cost.
FAQ
-
Is DiceStack a free all-in-one alternative to separate cache, security, and SEO plugins?
-
Yes. Instead of installing separate caching, security, SEO, backup, image-optimization and WooCommerce plugins, DiceStack gives you all of them as free modules in one lightweight install. Enable only the tools you need — the rest load no code at all.
-
Will it speed up my WordPress site?
-
Yes — enable the page cache, object cache, lazy loading, image optimization and minify tools to reduce load time, and the disable-bloat tools to cut unused scripts and requests. Each tool shows its performance cost so you stay in control.
-
Does an inactive module slow my site down?
-
No. When a module is off, its code is never loaded — no hooks, scripts, or database reads. The only baseline cost is one cached option read.
-
Is it really free?
-
Yes. Every module is free, with no locked features.
-
Do I need API keys?
-
Most modules need nothing. A few optional ones (Analytics, Cloudflare, Google Drive backup) need an ID or token — each field links to exactly where to get it.
-
How do I request a feature?
-
Use the “Request a feature” link in the DiceStack dashboard, or email Contact@dicecodes.com.
-
Who makes DiceStack?
-
DiceStack is built and maintained by Dice Codes (https://dicecodes.com).
Resinsjes
Meiwurkers & amp; Untwikkelders
“DiceStack” is iepen boarne software. De folgjende minsken hawwe bydroegen oan dizze plugin.
Meiwurkers
Oersette “DiceStack” yn jo taal.
Ynteressearre yn ûntwikkeling?
Blêdzje troch de koade , besjoch de SVN-repository , of abonnearje op it ûntwikkelingslogboek troch RSS .
Feroaringslog
1.5.18
- Improved the plugin description and search keywords so the directory listing better reflects every feature.
1.5.16
- The “Recommended setup” link now hides itself when there is nothing left to recommend.
- Agency Mode has a distinct look and its buttons are clearly scoped to agency tools only.
1.5.15
- The “Dashboard” link now sits at the very top of the DiceStack menu, above the tool and post-type pages.
1.5.13
- Every DiceStack settings and tool page now uses a consistent modern design (styled headers, cards, buttons and inputs) that matches the main dashboard.
1.5.12
- The Recommended-setup scan now checks more high-value tools (security headers, disable XML-RPC, bad-bot blocking, image optimization, heartbeat control, database cleanup).
- The Diagnostics page now reports more environment details (database version, HTTPS, permalinks, WP_DEBUG, WP-Cron, object cache, active theme, locale, upload limits).
1.5.11
- Fixed a fatal error (“Call to undefined function dicestack_admin_html()”) that could break several settings screens (Backups, Cloud backup, Object cache, Image optimizer, Admin menu editor, Error monitor, Monthly report, Agency Mode).
- The admin dashboard now uses a single page scrollbar with a sticky sidebar instead of a nested inner scroll area.
1.5.10
- Fixed a WordPress 6.7 “translation loading was triggered too early” notice: modules now load on the init action, so no translated text is requested before init.
1.5.9
- Shortcode callbacks that embed other shortcodes now escape their returned HTML with wp_kses_post (recently-viewed and wishlist product grids).
- The page-cache and HTML-minify features now serve output through the standard output-buffer callback and readfile(), so no page markup is echoed from a variable.
- The shared inline-CSS/JS helpers now neutralise any style/script block break-out at the sink, in addition to callers escaping every dynamic value.
- No feature changes — output-safety hardening only.
1.5.8
- Security hardening pass for the WordPress.org directory: every admin-screen value is now escaped at the point of output with the appropriate function (esc_html, esc_attr, esc_url, wp_kses).
- All request input ($_POST/$_GET/$_FILES) is unslashed and sanitized before use.
- Removed the “Hide PHP errors” tool, which changed a server-level setting.
- No behavioural changes to any feature — output escaping and input sanitizing only.
1.5.7
- Output buffers used for page caching and HTML minification are now explicitly closed.
- Removed the WP-Cron control tool.
- All remaining inline styles — including on admin screens — now load via wp_enqueue_style / wp_add_inline_style.
- Shortcode return values are escaped.
- Documentation corrected to match the shipped feature set.
1.5.6
- Fixed: login protection now uses the real visitor IP behind a proxy/CDN (opt-in toggle), so a shared proxy IP can no longer lock out every visitor.
- Fixed: database search & replace processes rows in batches to avoid memory exhaustion on large sites.
1.5.5
- Hardened for the WordPress.org directory: removed the file and code-editing tools, and every inline style/script now loads through the standard wp_enqueue / wp_add_inline_* functions.
1.5.4
- Improved: clearer messaging when a tool needs another plugin (for example WooCommerce), with a one-click install link.
- Improved: tools that have their own screen now show their settings right there.
- Housekeeping: leaner, security-focused build; every tool still loads only when it is enabled.
- Tested up to WordPress 7.0.
1.0.0
- First public release of DiceStack.