DiceStack

DiceStack replaces a whole stack of separate (and often paywalled) plugins with one lightweight, modular toolkit. Switch tools on and off from a single dashboard — when a tool is off, none of its code runs, so your site stays fast.

Every feature is free. There is no locked « Pro » tier.

Built and maintained by Dice Codes.

Why DiceStack

• Modular & light — disabled modules load zero code, scripts, or extra database reads.
• See the cost of everything — each module shows its memory, front-end JavaScript, and database-query impact so you decide what to keep.
• No paywalls — 2FA-grade login protection, schema, spam protection, caching, backups, and more, all included.
• Self-hosted first — runs on your own server. Modules that contact an external service ask for consent and link to where to get any keys.

What’s included (170+ modules across 10 categories)

• Security — login protection, login & comment captcha, security hardening, security headers, force HTTPS, activity log, 404 monitor, bad-bot blocking, Cloudflare control (Under Attack mode, cache purge), and more.
• Performance — page caching with gzip, mobile cache and preloading, Redis / Memcached object cache, minify HTML, defer JavaScript, lazy loading, image optimization, database cleanup, hover prefetch, disable bloat, and more.
• SEO & AI — meta tags, schema/JSON-LD, XML-friendly robots, breadcrumbs, FAQ schema, site verification, Analytics (GA4, Tag Manager, Meta Pixel), llms.txt for AI assistants, and a free SEO/AI visibility checker.
• Forms — contact form, spam shield, SMTP email, newsletter signup, and a universal submissions tracker that logs entries from the major third-party form plugins in one place.
• WooCommerce — checkout field editor, custom order statuses, wishlist, back-in-stock alerts, product badges, catalog mode, quick quantity buttons, and more.
• Media — image optimizer, WebP/AVIF uploads, media folders, broken-image finder.
• Content & marketing — popups, cookie consent, maintenance mode with shareable bypass link, table of contents, related posts, reading progress, and more.
• Site management — backup & restore (no upload limit), cloud backup (FTP/WebDAV/email/Google Drive), monthly client report, update notifications, search & replace, import/export config.
• Admin & developer — admin menu editor, hide notices, white label, master search, last-login column, and more.
• Accessibility & legal — accessibility toolbar, skip links, focus outlines, reduced-motion, cookie consent, terms consent.

External services

DiceStack itself contacts no external services by default. The following modules connect to a third party only when you enable and configure them, and each field links to where to obtain any required ID/token:

• Analytics & tracking — when you add a GA4, Google Tag Manager, or Meta Pixel ID, the corresponding script from Google/Meta is loaded on your front end and visitor analytics is sent to that provider. See Google’s privacy policy (https://policies.google.com/privacy) and Meta’s (https://www.facebook.com/privacy/policy/).
• Cloudflare control — sends your API token and Zone ID to the Cloudflare API (https://api.cloudflare.com) to change settings you request. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/.
• Cloud backup — uploads your backup archive to the destination you configure (your own FTP/WebDAV server, an email address, or Google Drive). Google Drive uses a one-time connect via the Dice Codes connector (https://dicecodes.com/dicestack); only an access token is stored.

No data is sent to any of these unless you turn the relevant module on and enter your details.