Falcon – Cache, Performance, Security, Cleanup, and Tweaks
Falcon is a lightweight WordPress plugin that helps you speed up your site, harden security, clean up bloat, and fine-tune how WordPress works — without a heavy stack of separate tools. Toggle only what you need from a clear settings UI. Export and import settings to reuse the same setup across site
Falcon is a lightweight WordPress plugin that helps you speed up your site, harden security, clean up bloat, and fine-tune how WordPress works — without a heavy stack of separate tools.
Toggle only what you need from a clear settings UI. Export and import settings to reuse the same setup across sites.
Features
Performance
Make pages load faster and cut unnecessary front-end work.
- HTML page cache — serve static HTML and skip WordPress, themes, and plugins on cache hits
- Disable Heartbeat to reduce server load
- Remove ?ver= query strings from CSS/JS for better browser caching
- Disable emoji scripts and styles
- Remove jQuery Migrate on the front end
- Load selected CSS files asynchronously to reduce render-blocking
Security
Reduce common attack surfaces and protect your content.
- Limit login attempts (block an IP after 3 failed tries for 1 hour)
- Hide detailed login error messages
- Force login to view the site
- Disable the REST API for unauthenticated requests
- Disable XML-RPC
- Restrict upload file types (including WebP and AVIF when enabled)
- Comment spam protection with a simple honeypot
- Block common AI crawlers via robots.txt
- Use scheme-less asset URLs to avoid mixed content warnings
Cleanup
Strip unused markup and keep the database lean.
Header
- Hide WordPress version
- Remove shortlink, REST API link, adjacent posts links, feed links, RSD link, and WLW manifest link
