Brainwerk SEO Suite

SEO and visitor analytics that never sell you — or your visitors — out.

Brainwerk SEO Suite is the all-in-one SEO and analytics toolkit for WordPress that keeps 100 % of your data on your own server. No third-party or tracking cookies. No external analytics services. No ad-tech tracking pixels. No «anonymous» data brokering. Just clear, honest insight into how people find and use your site — plus everything you need to rank in search and in AI answer engines.

🇪🇺 Made in Europe. Made for Europe.

Brainwerk SEO Suite is the European answer for privacy-first SEO and analytics — the solution built in the EU, for the EU.

Engineered in the EU, to EU standards, with privacy-by-design built into every query — never bolted on afterwards. Your analytics never leave your infrastructure, so you stay in control of your data and your visitors’ trust.

• Privacy-focused by default — IP anonymisation, daily-rotating visitor hashes, DNT-aware, configurable retention and one-click erasure. These are technical data-minimisation measures; whether a cookie/consent banner is required depends on your configuration and jurisdiction and should be legally reviewed.
• Built for NIS2-era governance — everything self-hosted, auditable and under your control, to support your GDPR and NIS2 data-governance obligations.
• EU-based AI, optional — AI suggestions run on Mistral AI 🇪🇺 with your own key, so even your AI workflow stays in Europe.
• High-tech under the hood — pre-aggregated daily tables for sub-millisecond dashboards even past 100k+ visits/month, hardened %i SQL, cached sitemap & meta output, a REST API and full WP-CLI control.
• Prove your own numbers, don’t just trust them — a Verify tab lets you check the plugin’s counted numbers against your own server’s raw access log for any date/time range, spot and fill in any missing days in your history, and run a determinism self-test. Every history row is chained to the one before it with a tamper-evident hash, so a later edit to a stored row — or a deleted/reordered row — becomes detectable rather than silent. This runs entirely against your own server and your own database; nothing is sent anywhere. An optional, separate opt-in — off by default — can additionally notarize your chain with an outside witness: see External notarization below.

Get found by search engines *and* AI

Search is changing. Brainwerk SEO Suite covers classic SEO and the new world of AI answer engines:

• Generative Engine Optimization (GEO/AEO) — control which AI crawlers may use your content (GPTBot, Google-Extended, ClaudeBot, PerplexityBot and more) straight from robots.txt, publish an llms.txt content manifest, add per-post FAQ schema (FAQPage + speakable), and see traffic arriving from ChatGPT, Gemini, Copilot, Perplexity & Claude as its own source.
• Meta engine — title, meta description, Open Graph, Twitter Cards, canonical, per-post overrides.
• Schema.org JSON-LD — Article, Organization, BreadcrumbList, WebSite, FAQPage.
• XML sitemap — chunked URL sets + custom robots.txt.
• On-page SEO analyzer — score 0–100 across 9 checks (focus keyword, alt text, internal links, readability).

Privacy-first analytics, built in

• Local visitor analytics — server-side pageviews, no third-party or tracking cookies, no external analytics services, no ad-tech tracking pixels.
• Source attribution — search, social, referrers, UTM, direct, and AI answer engines.
• Visitor countries — offline IP→country lookup from a bundled database, no external calls (works on locked-down servers).
• Top pages, entry/exit pages, device + browser + OS breakdown.
• Redirect manager — 301 / 302 / 307 / 308 with exact & prefix matching, plus a 404 log with one-click «create redirect».
• AI suggestions — bring your own Mistral key for titles, meta descriptions and focus keywords.
• Migration wizard — import metadata + redirects from Yoast, RankMath, AIOSEO.
• Multisite-aware — network activation, network-wide settings, per-site overrides.
• Benchmark network — honest progress, not a placeholder — until enough sites join to compare safely, the dashboard shows exactly how many sites currently participate and how many are needed (currently 20) before industry comparisons switch on, instead of a silent «not available» gap; once your own industry/region has enough peers, the comparison appears automatically.
• Compare yourself to yourself — a daily local snapshot (analyzer score trends, meta-description/alt-text/word-count fail rates, traffic shape, AI-crawler activity) lets you see how your own site is trending week over week, month over month — works from day one, on every install, whether or not you’ve joined the benchmark network. Nothing here ever leaves the site. On the dashboard this shows up as four widgets — analyzer trend, traffic shape (hour of day / day of week), AI-crawler development per family, and headline-number deltas — with an honest «still filling up» message until enough history has built up.

Plays nicely with Yoast, RankMath & co.

Already running another SEO plugin? Brainwerk SEO Suite auto-detects it and stands down its meta, schema and sitemap modules — so you keep analytics, the 404 log, redirects and the analyzer as a clean add-on, with no duplicate output. One toggle forces full takeover whenever you’re ready to switch.

Go Pro

The Pro tier (via Freemius license) adds:

• Google Search Console & Bing Webmaster sync
• Region & city geolocation drill-down (Free already covers countries)
• Slack / Discord / MS-Teams webhook alerts
• Traffic anomaly detection (Z-score baseline, 3σ alerts)
• Multisite-aggregate dashboard, white-label branding, priority support

🇪🇺 Auf Deutsch — kurz & knapp

Die europäische Antwort für datenschutzfreundliches SEO & Analytics — die Lösung aus der EU für die EU.

Brainwerk SEO Suite ist das All-in-one-SEO- und Analytics-Tool für WordPress, das 100 % deiner Daten auf deinem eigenen Server behält. Keine Tracking-Cookies, keine externen Analytics-Dienste, keine Ad-Tech-Tracking-Pixel, kein Datenhandel — nur ehrliche Insights und alles, was du brauchst, um in Suchmaschinen und in KI-Antwortmaschinen gefunden zu werden.

• Made in Europe, made for Europe — in der EU nach EU-Standards entwickelt, Privacy-by-Design in jeder Abfrage
• Datenschutzfreundlich ab Werk — IP-Anonymisierung, täglich rotierende Besucher-Hashes, DNT-treu, konfigurierbare Aufbewahrung und Ein-Klick-Löschung. Ob ein Cookie-/Consent-Banner nötig ist, hängt von Ihrer Nutzung ab und ist rechtlich zu prüfen.
• Für die NIS2-Ära gebaut — alles selbst gehostet, auditierbar und unter deiner Kontrolle
• EU-KI — AI-Vorschläge laufen optional über Mistral AI 🇪🇺 mit deinem eigenen Key
• GEO/AEO — KI-Crawler steuern (GPTBot, Google-Extended, ClaudeBot …), llms.txt, FAQ-Schema, KI-Traffic-Tracking (ChatGPT, Gemini, Perplexity, Claude)
• Echte Anonymität im Benchmark-Netzwerk — unter 50 Seitenaufrufen/Tag, unter 10 Core-Web-Vitals-Messungen oder unter 5 analysierten Beiträgen wird der jeweilige Wert gar nicht erst gesendet; Werte wie KI-Crawler-Traffic werden nur gebändert (nie als exakte Zahl) übertragen — deshalb ist kein AV-Vertrag für diese Funktion nötig
• Ehrlicher Netzwerk-Fortschritt statt Blackbox — bis genug Seiten teilnehmen, zeigt das Dashboard genau, wie viele Seiten aktuell dabei sind und wie viele nötig sind (aktuell 20), statt die Funktion einfach kommentarlos auszublenden; sobald für deine Branche/Region genug Vergleichsdaten da sind, erscheint der Vergleich automatisch
• Vergleich mit dir selbst — ein täglicher lokaler Schnappschuss (Analyzer-Score-Verlauf, Fehlerquoten bei Meta-Description/Alt-Text/Wortanzahl, Traffic-Verlauf, KI-Crawler-Aktivität) zeigt, wie sich deine eigene Seite über Wochen und Monate entwickelt — funktioniert vom ersten Tag an, auf jeder Installation, unabhängig vom Benchmark-Netzwerk. Diese Daten verlassen die Seite nie. Im Dashboard zeigt sich das als vier Widgets — Analyzer-Trend, Traffic-Verlauf (Tageszeit / Wochentag), KI-Crawler-Entwicklung pro Familie und Kennzahlen-Deltas — mit einem ehrlichen «wird noch aufgefüllt»-Hinweis, solange noch nicht genug Verlauf vorliegt.
• Neu ab 1.8.0 — signaturgeprüfte Branchenvergleiche — das Benchmark-Netzwerk holt jetzt zusätzlich einen Ed25519-signierten Feed vom Hub zurück, damit du Absprungrate, Sitzungsdauer und Analyzer-Checks mit anonymisierten Branchen-Peers vergleichen kannst; ungeprüfte oder veraltete Feeds werden grundsätzlich verworfen. Das Netzwerk ist standardmäßig aktiv und lässt sich jederzeit mit einem Klick abschalten — frühere Formulierungen, die «standardmäßig deaktiviert» behaupteten, waren falsch und wurden korrigiert.
• Neu ab 1.8.1 — Report-Dateien mit unrätbarem Dateinamen — erzeugte SEO-Reports (wöchentlich/monatlich/individuell) trugen bisher einen vorhersehbaren Dateinamen, der auf manchen Serverkonfigurationen direkt über die Adresse erreichbar war. Reportdateien bekommen jetzt zusätzlich ein langes Zufalls-Token im Namen, bestehende Reports werden beim Update automatisch umbenannt — kein Handlungsbedarf, einfach aktualisieren.
• Neu ab 1.8.2 — Übersetzungs-Fix für leere Admin-Texte — auf italienischen, spanischen und französischen (und teils auch englischen) Installationen konnten seit 1.8.1 einzelne Admin-Texte leer statt lesbar erscheinen, weil eine fehlerhafte Übersetzungsdatei nicht übersetzte Texte nicht korrekt auf das englische Original zurückfallen ließ. Am stärksten betroffen war Italienisch (fast die gesamte Oberfläche). Update wird allen empfohlen, besonders auf nicht-englischen Seiten.
• Neu ab 1.9.0 — Eigenvergleich als Dashboard-Widgets, ehrlicherer Netzwerk-Fortschritt, Sicherheits-Härtung — der tägliche lokale Schnappschuss für den Vergleich mit dir selbst erscheint jetzt als vier Dashboard-Widgets (Analyzer-Trend, Traffic-Verlauf, KI-Crawler-Entwicklung, Kennzahlen-Deltas). Zusätzlich: CSV-Exporte sind jetzt gegen Formel-Injection in Excel/LibreOffice/Sheets abgesichert, die SSRF-Schutzprüfung deckt jetzt auch zwei Pro-Module ab und verankert die aufgelöste IP für die Dauer der Anfrage, und ein Multisite-Fehler, der Subseiten-Einstellungen unnötig vom Netzwerk abkoppeln konnte, ist behoben (bestehende Installationen werden beim Update automatisch bereinigt). Dieses Release legt beim Update eine neue Datenbanktabelle an (wp_seoforge_history), automatisch, ohne Handlungsbedarf.
• High-Tech im Maschinenraum — Sub-Millisekunden-Dashboards, gehärtetes SQL, REST-API & WP-CLI
• Alles aus einer Hand — Analytics, Meta, Schema.org, Sitemap, Redirects, 404-Log, Analyzer

Bereits Yoast oder RankMath im Einsatz? Brainwerk erkennt das automatisch und schaltet seine Meta-/Schema-/Sitemap-Module ab — du behältst Analytics, 404-Log, Redirects und Analyzer als sauberes Add-on, ohne Doppelausgabe.

External services

The optional AI features connect to one external AI provider, Mistral AI (EU-based). They are opt-in and only used when you explicitly enter your own API key.

Mistral AI API — https://api.mistral.ai (EU-based)

• What it is used for: Generating AI suggestions for SEO titles, meta descriptions, focus keywords and internal-link recommendations when you click the «✨ Suggest with AI» buttons in the on-page meta box or the AI tab.
• When data is sent: Only when an editor clicks one of the AI-suggestion buttons in the WordPress admin. No data is sent on the front-end, during normal page views, or in cron jobs.
• What data is sent: Your own Mistral API key (you supply it; the plugin does not bundle one), the post title and the post body content of the post you are editing, plus a short instruction prompt. Nothing else — no user identifiers, no site-wide content, no analytics.
• How to disable: Leave the API key field empty in Brainwerk SEO Suite → AI settings, or toggle the AI feature off. With no key, the plugin never contacts any AI provider.
• Provider: Mistral AI (France/EU) — Terms of Service — Privacy Policy
• API documentation: https://docs.mistral.ai/

SEO benchmark network — https://shieldforge-intel.brainwerk.at (EU-based) — on by default, disclosed during onboarding

• What it is used for: The plugin sends one aggregate snapshot per day so you can compare your site against anonymised peers in your industry, and (Multisite) pulls back a signature-verified peer-benchmark feed. Enabled from install so the benchmark data is populated from day one; you can turn it off at any time.
• When data is sent: Only after the site has completed a lightweight registration step with the hub (shown during onboarding, or under Brainwerk SEO Suite → Tools → SEO network). That one-time registration transmits only this site’s web address (used as a label) and gets back a pseudonymous site ID and secret in return — nothing else, and nothing before registration completes. You can disconnect any time.
• What data is sent: Aggregate figures only, all counts and percentages over the whole site for one UTC day — visit/session totals, traffic-source/device/bot-share percentages, p75 Core Web Vitals, on-page-analyzer score distribution and per-check pass/fail rates, an hour-of-day/day-of-week traffic profile, AI-crawler visibility (which recognised crawler families visited, banded — never the exact count — plus your robots.txt/llms.txt configuration), a declared/suspect/cloaked bot mix, coarse comparability bands (PHP major version, WordPress minor version, site-size and traffic bands, whether a page cache is active) and an optional self-declared industry label. On a Multisite network, the subsite’s hostname is included so snapshots can be told apart (not shared publicly). Below 50 pageviews in a day, or below 10 Core Web Vitals samples, or below 5 analysed posts, the corresponding figures are suppressed entirely rather than sent — at that volume a percentage would describe one visitor, not a population. Never an individual visitor, IP address, URL or any personal data.
• Also exposed: a read-only inbound-pull REST route (GET /wp-json/seoforge/v1/relay/snapshot) for sites whose server cannot make outbound requests — the hub fetches the same daily snapshot instead, authenticated with a secret you (or the hub operator) configure; disabled unless a relay secret is set. A companion inbound feed endpoint (the hub’s GET /v1/seo/intel) lets this site pull back an Ed25519-signature-verified peer-benchmark/bot-reputation feed once a day — the fetch carries no visitor data, only the site’s existing HMAC identity. That feed also always carries a network-participation count (how many sites contribute overall, and how many are needed before industry comparisons switch on) even on days the peer-benchmark figures themselves are withheld for k-anonymity, so the dashboard can show honest progress instead of a blank card.
• How to disable: Turn it off, or click Disconnect, under Tools → SEO network. When off, the plugin never contacts the hub and the inbound-pull route returns 404.
• Provider: Brainwerk (Austria/EU) — Privacy Policy

External notarization — https://shieldforge-intel.brainwerk.at (EU-based) — opt-in, off by default, independent of the SEO benchmark network above

• What it is used for: Lets you prove your locally-verified integrity chain (see the Verify tab) hasn’t been retroactively tampered with, by checkpointing it with an outside witness once a day and letting you compare your local chain against that witness’s record at any time.
• When data is sent: Only while Verify → External notarization → «Notarize this site’s integrity chain daily» is switched on (default off, independent of the benchmark opt-in above — enabling one does not enable the other). If the site hasn’t already registered with the hub for the benchmark network, turning this on performs the same lightweight one-time registration step by itself — transmitting only this site’s web address (used as a label), nothing else.
• What data is sent: Only the head of the local hash chain (a SHA-256 hash), the date range it covers, and a row count. Never a measurement, never the content of a history row, never visitor data.
• How to disable: Switch the opt-in off under Verify → External notarization. When off, the plugin never contacts the hub for this purpose.
• Honest limits, stated in the admin UI itself: it protects against retroactive tampering only from the first accepted checkpoint onward — history before that has nothing external to compare against — and it proves the chain wasn’t altered after notarization, not that its content was correct to begin with.
• Provider: Brainwerk (Austria/EU) — Privacy Policy

Licensing for the optional Pro tier is handled by Freemius (Merchant of Record). License-validation traffic — only performed when you activate a Pro license on the License tab — goes to https://api.freemius.com. See the Freemius Terms of Service and Privacy Policy. With no Pro license entered, …