DiceStack

DiceStack replaces a whole stack of separate (and often paywalled) plugins with one lightweight, modular toolkit. Switch tools on and off from a single dashboard — when a tool is off, none of its code runs, so your site stays fast.

Every feature is free. There is no locked “Pro” tier.

Built and maintained by Dice Codes.

Why DiceStack

• Modular & light — disabled modules load zero code, scripts, or extra database reads.
• See the cost of everything — each module shows its memory, front-end JavaScript, and database-query impact so you decide what to keep.
• No paywalls — 2FA-grade login protection, schema, spam protection, caching, backups, and more, all included.
• Self-hosted first — runs on your own server. Modules that contact an external service ask for consent and link to where to get any keys.

What’s included (170+ modules across 10 categories)

• Security — login protection, login & comment captcha, security hardening, security headers, force HTTPS, activity log, 404 monitor, bad-bot blocking, Cloudflare control (Under Attack mode, cache purge), and more.
• Performance — page caching with gzip, mobile cache and preloading, Redis / Memcached object cache, minify HTML, defer JavaScript, lazy loading, image optimization, database cleanup, hover prefetch, disable bloat, and more.
• SEO & AI — meta tags, schema/JSON-LD, XML-friendly robots, breadcrumbs, FAQ schema, site verification, Analytics (GA4, Tag Manager, Meta Pixel), llms.txt for AI assistants, and a free SEO/AI visibility checker.
• Forms — contact form, spam shield, SMTP email, newsletter signup, and a universal submissions tracker that logs entries from the major third-party form plugins in one place.
• WooCommerce — checkout field editor, custom order statuses, wishlist, back-in-stock alerts, product badges, catalog mode, quick quantity buttons, and more.
• Media — image optimizer, WebP/AVIF uploads, media folders, broken-image finder.
• Content & marketing — popups, cookie consent, maintenance mode with shareable bypass link, table of contents, related posts, reading progress, and more.
• Site management — backup & restore (no upload limit), cloud backup (FTP/WebDAV/email/Google Drive), monthly client report, update notifications, search & replace, import/export config.
• Admin & developer — admin menu editor, hide notices, white label, master search, last-login column, and more.
• Accessibility & legal — accessibility toolbar, skip links, focus outlines, reduced-motion, cookie consent, terms consent.

External services

DiceStack itself contacts no external services by default. The following modules connect to a third party only when you enable and configure them, and each field links to where to obtain any required ID/token:

• Analytics & tracking — when you add a GA4, Google Tag Manager, or Meta Pixel ID, the corresponding script from Google/Meta is loaded on your front end and visitor analytics is sent to that provider. See Google’s privacy policy (https://policies.google.com/privacy) and Meta’s (https://www.facebook.com/privacy/policy/).
• Cloudflare control — sends your API token and Zone ID to the Cloudflare API (https://api.cloudflare.com) to change settings you request. Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/.
• Cloud backup — uploads your backup archive to the destination you configure (your own FTP/WebDAV server, an email address, or Google Drive). Google Drive uses a one-time connect via the Dice Codes connector (https://dicecodes.com/dicestack); only an access token is stored.

No data is sent to any of these unless you turn the relevant module on and enter your details.