Thousands of you connected your favorite AI tools, asked questions about your sites, and saved hours of dashboard diving.

But you told us you wanted more. Reading your site data was useful, but you wanted your agent to be able to actually do things for you!

That’s why we added write capabilities, turning your AI agent into your most versatile WordPress collaborator.

From reading to writing

With write capabilities, your AI agent can now:

• Draft and publish blog posts: Provide copy or describe what you want to publish, and your AI agent can create the post directly on your site.
• Build and update pages: Create landing pages, About pages, and more, complete with your site’s design specs and block patterns.
• Manage comments: Approve, reply to, or clean up comments without ever opening your dashboard.
• Organize your content: Create, rename, and restructure categories and tags across your site.
• Update media metadata: Fix alt text, captions, and titles for better accessibility and SEO.

And all of this happens through natural conversation. Just tell your AI agent what you want to do, and it handles the rest.

19 new abilities, the same interface

These new capabilities add 19 new writing abilities across six content types: posts, pages, comments, categories, tags, and media. Besides enabling the new tools in your WordPress.com MCP dashboard, there’s nothing new to install to get started.

Here’s a taste of what you can do with your AI agent:

• “I just finished writing this post. Publish it as a draft, categorize it as ‘Travel,’ add relevant tags, and write me a meta description under 160 characters.”
• “I want to start publishing recipes on my blog. Set up a ‘Recipes’ category with subcategories for Breakfast, Lunch, Dinner, and Desserts.”
• “Create an About page with sections for our team, mission, and contact info.”
• “I want to add a testimonials section to my About page. Find a pattern in my theme that works for that and set it up as a draft — I’ll supply the actual quotes.”
• “Approve all the pending comments on my latest post and reply to the one asking about pricing.”
• “Add a ‘Tutorials’ category under ‘Resources’ and tag my latest three posts with ‘Beginner.'”
• “Audit my website for Accessibility and create a report.”
• “Find all images in my media library that are missing alt text and suggest some based on the filename or attachment context.”

Your AI agent discovers the available operations, figures out what’s needed, and walks you through the process — confirming every step before making changes.

Design-aware updates

One of the most powerful aspects of the write capabilities is the integration with your site’s theme. Before creating content, your AI agent can search your theme’s design and understand  its colors, fonts, spacing, and block patterns. 

This results in outputs that inherits your site’s design system and adapts automatically when you change themes.

Safety you can trust

We know that giving an AI agent the ability to modify your site is a big step. That’s why we’ve built this with multiple layers of protection:

Every change requires your approval. Before creating, updating, or deleting anything, your AI agent describes exactly what it plans to do and asks for your explicit confirmation. Nothing happens without approval from you.

New posts default to drafts. When your AI agent creates a post or page, it starts as a draft, giving you a chance to review before anything goes live. If you update a published post, your agent warns you that changes will be visible immediately.

Deletion is reversible (where possible). Deleting posts, pages, comments, or media moves them to the trash, where they’re recoverable for 30 days. For categories and tags — which WordPress doesn’t support trashing — your agent explicitly warns that deletion is permanent and requires additional confirmation. 

All changes are visible through your Activity Log. See all of your AI agent’s activity in your site’s dashboard (or just ask your AI agent for a list of changes it has made).

WordPress permissions are enforced. The write capabilities respect the same user role permissions as the rest of WordPress.com. An Editor can create and edit posts, but can’t change site settings. A Contributor can draft posts but can’t publish. Your existing access controls are automatically carried over.

You choose what’s enabled. Every operation, from creating posts to updating media, has its own toggle in your MCP settings. Enable only what you need on the sites you need it, and leave everything else off.

Get started

Write capabilities are available today on all WordPress.com paid plans. Here’s how to start:

1. Enable MCP on your account at wordpress.com/me/mcp.
2. Toggle on the write capabilities you want to use.
3. Connect your AI client — Claude, Cursor, ChatGPT, or any MCP-enabled tool.
4. Start creating. 

For the full list of available operations and technical details, check out our MCP Tools Reference and prompt examples to spark your creativity.

When we launched MCP on WordPress.com, we said that understanding your site shouldn’t mean piecing together insights from half a dozen places. Now, managing your site shouldn’t mean it either.

Your AI agent is ready. What will you create?

One decision changed how the entire agency operates: moving 80% of client projects to WordPress.com.

You work on growing the business, not in the business. WordPress.com takes care of everything else.

Ajit Bohra, Founder & CEO at LUBUS

Here’s a look at the tools, workflows, and mindset behind that decision.

Why 80% of their clients run on one platform

Running everything on WordPress.com was a deliberate choice — and it shapes all operations of the agency by having one platform, one workflow, and one place to search when something goes wrong. 

Backups automate, rollbacks happen in one click, and the activity log tells them exactly what went wrong and when. 

The moment you go to WordPress.com, your backups are sorted. You don’t have to worry about it. Your clients are safe, your data is safe.

Ajit Bohra, Founder & CEO at LUBUS

When a problem arises, clients can go straight to WordPress.com support without an agency in the middle. A junior team member once resolved a client site issue via chat support in 30 minutes, with no escalation and no senior help needed.

He said: I didn’t have the technical knowledge, but I got it sorted for the client. That’s exactly the point.

Ajit Bohra, Founder & CEO at LUBUS

The workflow every LUBUS developer learns on day one

Having a single platform means having a single way of working, and that consistency is what ensures a team’s efficiency across every project. Every developer at LUBUS works locally via WordPress Studio, synced to WordPress.com, so nothing directly touches the live server. 

Preview links handle internal QA, and staging is for client sign-off. GitHub hosts and deploys the custom plug-ins. When something goes wrong, Jetpack backups and the activity log are the first stop — roll back, then figure out why.

We built internal documentation around it: building websites with WordPress.com. It’s what every new team member learns first.

Ajit Bohra, Founder & CEO at LUBUS

Peace of mind is the real deliverable

LUBUS sets a simple goal for every project: The client’s website should keep running even without the agency’s involvement. 

That means clients get hosting, SSL, automated backups, rollbacks, Jetpack features, and direct support, all bundled together.

But what Ajit keeps coming back to isn’t the feature list. It’s the fact that clients ultimately own their site, understand how it operates, and avoid panic if an error occurs.

Even without us, their WordPress is up and running. That’s our motto. WordPress.com helps us deliver that.

Ajit Bohra, Founder & CEO at LUBUS

Why AI is making the agency busier, not redundant

Their focus on genuine client value is also why Ajit isn’t worried about AI. 

Four recent clients came in having already tried website building with an AI tool. They’d used it to validate their idea and create a general prototype of their vision — and then realized they needed a human to execute the concept. 

For LUBUS, AI is creating a new type of client: one who arrives with a clearer brief and a stronger conviction that they need professional help.

A lot of agencies lead with tech. But tech comes after. The biggest skill is talking to real people and helping them understand what they actually need.

Ajit Bohra, Founder & CEO at LUBUS

How LUBUS uses AI internally

The team at LUBUS uses AI across copywriting, ideation, and code development.

They are experienced users of Telex, using it to build proofs-of-concept and prototype custom blocks to generate a working demo faster, which helps determine next steps.

For example, the team used Telex to build a Text-to-Speech Block, exploring different implementations before moving toward a unified solution for content and accessibility use cases.

They also generated a Modal Popup Block for lightweight overlays in block-based content, which is already being used in upcoming projects and is planned to evolve into a more refined open-source solution.

But the biggest shift AI has brought to LUBUS isn’t technical — it’s commercial. Their consulting business is growing faster than their web builds, as more clients need help understanding what technology can and can’t do for them.

Build the kind of agency that wins on experience

AI is changing what clients expect from agencies, but Ajit believes the fundamentals don’t change: Understand the client, solve the real problem, and make them feel valued. WordPress.com helps companies implement this foundation.

WordPress.com has been on steroids. It evolved into an ecosystem that helps agencies work faster.

Ajit Bohra, Founder & CEO at LUBUS

LUBUS has been part of that evolution since before Automattic for Agencies formally existed, and Ajit watched it grow into something much bigger than a hosting program.

Automattic for Agencies reflects that same evolution — it’s a strategic partnership that lets agencies deliver a VIP-grade experience at an accessible price point, so teams can focus on building great digital experiences.

Ajit Bohra, Founder & CEO at LUBUS

Give your clients the same peace of mind LUBUS gives theirs  — and provide your team the same freedom to focus on what actually grows the business.

End-stage liver disease. A terminal diagnosis. Two children to raise alone after becoming a widower seven years prior. Every day was an act of sheer will.

Then, on January 13, 2025, the call came. A liver transplant was available.

Scott didn’t just survive. He came out the other side with a mission — to use his story to drive organ and tissue donation awareness across Canada. 

He joined the Transplant Advocate Association and became a UHN Foundation Ambassador. Got featured in national media. Went to City Hall to push for April to be recognized as Organ Donor Month in Ontario. And joined a panel working to bring a life-saving organ preservation technology to Canada, one already standard practice in Spain and the UK.

There’s nothing online quite like what I’m building — it’s my perspective, my experience, my voice.

Why WordPress.com

With everything Scott was doing, he needed a home base. A place to document the journey, share his story, and build a platform that could grow into something bigger.

He did his research before choosing a platform. Read consumer reports, went through reviews, and landed on WordPress.com.

Once he was in, he opted for the Website Design Service — a team of experts who build the site for you. Scott had the story, the voice, and the content. The team turned it into a site that actually reflected all of it.

What I appreciate about WordPress is its ability to take everything that I said and mash it up into a saleable product. Who’s going to buy into it? Who’s going to come to it? That’s what I look at.

The site went live without the usual back-and-forth. No glitches, no delays. Scott was surprised by how smooth it was.

It was a leap of faith. But it was a good leap.

What the website does today

jamesscottwilson.ca is Scott’s platform and his archive. A place to document the journey from the inside out — the recovery, the advocacy, the single parenting, the faith, and the parts nobody talks about.

He’s also using it as a launchpad for a future book and podcast.

It’s a blog, a launching off point for writing ideas. Inspiration for a future book and podcast material.

The site will keep evolving. Scott is the first to say that. But that’s the point.

It’s a fluid, living document. Everything new — new life, new liver, new student. I am living proof that anything can change.

Your story deserves a home, too

Scott’s story is unlike anyone else’s. His website is where he gets to tell it on his own terms.

WordPress.com’s Website Design Service paired him with a team that took his content, his voice, and his vision and turned it into a site ready to go. 

He focuses on his mission. The platform handles the rest.

Between PHP, CSS, the template hierarchy, and the inevitable mystery bug that appears unexpectedly, it’s not something most people figure out in an afternoon.

Telex removes that barrier entirely. You tell it what you want, it generates a theme, you install it, and your site has a completely new look.

Here՚s how it works.

1. Ask Telex to create a theme

Start with a prompt. The more detail you include, the closer the output will resemble what you want. 

Here՚s an example for a recruitment consultant landing page:

“Create a professional business theme for a recruitment consultant. Clean layout, confident typography, muted color palette with one strong accent color, clear calls to action for job seekers and hiring managers, and a services section above the fold.”

It’s always good to include the visual style, the layout structure, and the purpose of the site. 

For example, a recruitment landing page should immediately communicate trust and professionalism, which is very different from the first impression of a portfolio or a blog. 

The more context Telex has, the less you will need to correct afterward.

2. Click “Enhance Prompt” before generating

Before generating your theme, click the Enhance Prompt button. 

Telex will rewrite your description into a proper design brief, filling in design language, layout structure, typography, and spacing choices you may not have considered.

For a recruitment site, that means Telex might add guidance around trust signals, whitespace, and hierarchy that you did not explicitly ask for but absolutely need. 

Our updated prompt would include new details such as:

“Use a clean, minimal layout with confident sans-serif typography and a muted neutral palette with a single bold accent color for calls to action. The homepage template should display a hero section above the fold with a headline, subtext, and two prominent CTA buttons: one for job seekers and one for hiring managers. Directly below the hero, show a services section with icon blocks highlighting key offerings such as talent sourcing, executive search, and contract staffing. Include templates for a single job listing, an about page, and a contact page. On the frontend, ensure fast load, responsive design, sticky header with logo and navigation, and a footer with contact info and social links.”

This gives you a much stronger foundation.

3. Alternatively, upload a reference image

If you have a competitor՚s site you admire, a brand mockup, or even a rough sketch of how you want the page laid out, upload it to Telex to guide the visual direction of your theme.

Telex will read the visual and use it as the basis for your theme.

For someone who already knows their brand direction, this is often the fastest route to a result that looks like what they had in mind.

4. Choose from the four variations Telex generates

From here, Telex will give you four variations to compare, each interpreting your prompt a bit differently, with its own take on typography, spacing, layout, and feel.

Opt for the one that feels closest to your brand, your audience, and the impression you want to make. Remember, this is your starting point.

For a business landing page, pay close attention to how each variation establishes hierarchy and readability. 

Start with the version that most clearly communicates the value proposition and naturally guides the eye toward the call to action.

For the recruitment site example, we chose this theme:

5. Build out the remaining templates

From here, ask Telex to build additional templates for each page type you need.

By default, it starts with a single template that WordPress applies across all your pages, but a complete theme needs different layouts for different content types. 

For a recruitment consultant site, for example, you might ask to:

• “Create a services page template with icons and short descriptions for each service.”

• “Create an about page template with a bio, photo, and trust signals such as years of experience and client results.”

• “Create a contact page template with a lead capture form and clear next steps for visitors.”

• “Create a job listings archive template showing open roles with location, salary range, and an apply button.”

Each additional template extends the theme without breaking the visual consistency you established at the start.

6. Refine your theme until it fits your vision

Once the theme structure is in place, iterate on the details — typography, color palette, spacing, mobile layout, dark mode, or whatever else needs refining. 

For a recruitment site, for example, you might want the typography to feel more authoritative or the mobile layout tightened up since a lot of visitors may access the site from their phones. 

7. Download the ZIP and install it

Finally, click Download, and Telex will package everything into a ZIP file containing your templates, styles, theme.json, and layout definitions. 

Take that file to your WordPress dashboard, then → Appearance → Themes → Add New → Upload Theme, then select the file, install it, and activate it.

The moment you activate the theme, WordPress maps your existing pages and content into the new design. 

If you already have a services page, an about page, or any job listings set up, they will appear in the new layout without any manual work.

Tip: When you want to update the look later, go back to Telex, make your changes, download a new ZIP, and upload it. When you upload the new ZIP, WordPress keeps your existing content exactly as it is and only applies the new design.

Bonus step: Test your theme on a staging site first

Before activating any theme on a live site, test it in a safe environment first. 

For example, WordPress Playground lets you test your theme directly in the browser without installing anything.

You can also use WordPress Studio, a free desktop app that runs a full local WordPress environment on your machine with no server setup required.

Now it’s your turn

Envision a theme, try a prompt you wouldn՚t expect to work, upload a napkin sketch, and see what comes out. 

Then come back and show us what you built in the comments!

Keep in mind that Telex is still an experimental tool, so results will vary, and you may encounter the occasional issue. That is part of the process, and every project you release helps determine this tool’s future development.

WordPress Studio has two new debugging capabilities that make this process faster and more intuitive: Xdebug support and debug log access.

Step-through debugging with Xdebug

Xdebug is the gold-standard PHP debugging extension. Instead of scattering debug output throughout your code, you can set breakpoints, step through execution line-by-line, and inspect variables in real time — all from your editor.

This is now available for all Studio users and is powered by WordPress Playground’s WebAssembly version of PHP, which means there’s nothing extra to install or configure at the system level.

Enabling Xdebug

1. Select the site you want to debug in Studio.
2. Navigate to the Settings tab.
3. Click Edit site.
4. Navigate to the Debugging tab.
5. Check the Enable Xdebug checkbox.
6. Click Save.

Studio will restart the site automatically with Xdebug active.

A couple of things worth keeping in mind:

• Xdebug can only be active for a single site: To use Xdebug on a different site, disable it on the currently active one first. The site with Xdebug enabled will display a bug icon in the left sidebar. 
• Enabling Xdebug will slow things down noticeably: It’s best to turn it on only when you’re actively debugging.

Connecting your IDE

Once Xdebug is enabled, you can connect your editor and start debugging to find the source of any issues — plugins, themes, or WordPress core. Studio listens for debug connections on port 9003.

For the full setup guide, see the Xdebug in Studio documentation.

Easier access to debug logs

Sometimes a full step-debugger is more than you need when you just want to see what WordPress is logging. 

Studio now makes that much easier with a dedicated debug log toggle, which sets WP_DEBUG and WP_DEBUG_LOG for your sites automatically.

Enabling the debug log in Studio

1. Select your site and click Edit site.
2. Open the Debugging tab.
3. Toggle Enable debug log on.
4. Click Save.

When the debug log is enabled, your local site will capture PHP errors, notices, and warnings to a log file at wp-content/debug.log. You’ll then see an Open log file link appear in the Settings tab, which opens the log directly — no need to hunt down the file path manually.

You can also write your own messages to the log using PHP’s error_log() function:

error_log( 'My value: ' . print_r( $my_variable, true ) );

This is especially handy when you need a quick look at what’s happening during a plugin activation, a hook callback, or a REST API request — without setting up a full debugging session.

Using AI agents to interpret debug logs

Once your debug log is capturing errors and warnings, you can bring an AI agent directly into your debugging workflow. Instead of manually reading through log output and cross-referencing documentation, point your agent at the log and let it do the heavy lifting.

Whether you’re using Claude Code, Cursor, or Codex, the setup is the same: tell your agent that error logs are available at wp-content/debug.log. From there, it can read the output, identify what’s going wrong, and suggest fixes, all without breaking your flow.

Showing errors in the browser

The Debugging tab also includes a “Show errors in browser” toggle, which sets WP_DEBUG_DISPLAY and controls whether PHP errors are printed directly on the page rather than silently captured in the log.

When enabled, fatal errors, warnings, and notices appear inline in the HTML output — useful during active development so you don’t have to keep switching to the log file.

One important note: “Show errors in browser” is best used alongside the debug log, not as a replacement for it. It’s great for quick iteration in your own local environment, but you’ll want to keep it off on any site that’s shared with clients — it can expose sensitive path information or internal logic in the page output.

Better debugging, faster fixes

These two features address different parts of your local debugging workflow:

• The debug log gives you a lightweight way to catch errors and warnings as they happen. 
• Xdebug takes it further, letting you pause execution and dig into exactly what’s going on inside your code.

Together, they make Studio a more capable environment for developing and troubleshooting WordPress sites locally.

If you haven’t tried WordPress Studio yet, now is a great time to get started.

She saw it as a sign. Starting over in another corporate role wasn’t what she wanted. This was her moment to build something of her own.

So she backed herself instead.

She trained as a life coach, an EFT (Emotional Freedom Technique) practitioner, and a Reiki healer. She opened Connect Holistic Health — a business built around helping people untangle the noise in their minds and get more out of their lives.

I get to do it on my own terms. My number one hat is mom. And then I run this business in and around that.

Why WordPress.com

Monikka had a website on another platform before. When challenges in the back end of her business gave her reason to pause and reassess, she decided to switch — and go through a full brand refresh at the same time.

WordPress was already familiar. She’d used it extensively in her last corporate role. When it came to choosing a platform for her own business, that hands-on experience made the decision easy.

WordPress was my go-to from my corporate days. I already knew it, I already trusted it.

She could have built the new site herself. But as a sole trader juggling clients, a family, and a growing business, handing the build off just made more sense.

So she signed up for the Website Design Service — a WordPress.com team of design experts who build the site for you. From there, she could easily tweak and add things herself as the business grew.

Having the team build it and then managing it myself? Best time-for-money decision I’ve made.

What the website does today

connectholistichealth.com is Monikka’s primary business hub.

It’s a place for clients to learn about her services, book sessions, sign up for her Reiki membership, register for events, and shop her growing range of wellness products.

The booking and membership setup was exactly what she needed.

I’m using my website as a booking service. Clients find out about the business and book directly through the site.

Clients have noticed too.

I’ve heard from clients that it looks really nice and that it’s easy to navigate.

The e-commerce side has been seamless as well: uploading products and managing the shop structure in the backend has been straightforward.

Something she says is a clear step up from her previous platform.

Next on the list: more products to add to the shop, which Monikka is sourcing and testing herself before they go live.

Your story deserves a home, too

Monikka runs her entire business solo — coaching, energy work, e-commerce, memberships — and her website holds it all together.

WordPress.com’s Website Design Service means she didn’t have to build it alone. The team handled the build.

Monikka brought the vision, the content, and the brand. It was live in days, with fast and secure hosting included.

She focuses on her clients. The platform handles the rest.

Most WordPress security issues don’t come from WordPress itself — but from how a site is set up and maintained.

In this guide, we’ll explain how secure WordPress is, where real risks come from, and what steps you can take to reduce your chances of being hacked.

Is WordPress a safe option for websites? 

Yes — WordPress is secure by design. Vulnerabilities in WordPress core are relatively rare and are usually patched quickly when discovered. Security issues occur within the WordPress ecosystem, not the core platform itself. 

Most successful attacks exploit:

• Outdated or abandoned plugins and themes.
• Weak or reused passwords.
• Missing software updates.
• Poorly configured or low-quality hosting environments.

Why do people think WordPress isn’t secure?

People think WordPress isn’t secure because it’s widely used, frequently targeted, and transparent about vulnerabilities — not because the core software is weak.

Here’s what contributes to this WordPress myth: 

• WordPress powers over 43% of all websites, so it simply shows up more often in security reports and browser warnings than other platforms.

• Issues caused by plugins, themes, or hosting are usually treated as WordPress problems, even though they’re not part of WordPress core. For example, Patchstack, WordPress’s vulnerability database, reported that of 5,948 vulnerabilities, almost 97% were found in WordPress plugins, while the core WordPress software had just 13 vulnerabilities in 2024.
• Security companies like Wordfence run bug bounty programs and publish vulnerabilities publicly. That improves WordPress security, but it also makes those issues easier to notice.

How secure and reliable is WordPress core?

WordPress core software is secure and actively maintained. Security issues in the core platform are relatively rare and typically patched quickly.

WordPress core security is supported by:

• A dedicated security team that reviews vulnerability reports and coordinates responsible disclosures.
• Open-source code transparency that allows thousands of contributors to identify and fix issues.
• Regular security updates, including automatic minor security releases.
• Built-in password strength tools that encourage strong credentials.

Most large-scale WordPress security issues do not originate in core software, but in plugins, themes, or poor site management.

How does WordPress.com further strengthen security?

WordPress core provides a secure foundation. But in practice, many security risks come from how a site is hosted and managed.

WordPress.com reduces those risks by handling key security layers for you.

It includes:

• Built-in two-factor authentication to protect accounts from unauthorized logins.
• Automatic WordPress core updates.
• Free SSL encryption on all sites.
• Daily security scans for plugins, themes, and malware.
• Web Application Firewall (WAF), DDoS mitigation, and brute-force protection.
• Regular platform backups, with real-time backups on Business and higher.
• Activity logging to monitor site changes.
• A dedicated security team supported by a public bug bounty program.

How to keep your WordPress website secure

To keep your WordPress site secure, you need to reduce avoidable risk — the kind that comes from outdated software, weak access controls, and hosting environments without built-in security protections.

Let’s explore the key steps you can follow.

1. Use strong, unique passwords for each account

Create a unique, complex password for each user account. Avoid easily-guessed formats like “password123” which are susceptible to brute force hacking attacks.

Use WordPress.com’s built-in password generator to create strong credentials, and change your password immediately if you receive a suspicious activity alert.

2. Enable two-factor authentication (2FA)

Turn on two-factor authentication to add a second verification step to your login.

With 2FA enabled, logging in requires your password plus a one-time code from an authenticator app or SMS. 

Even if someone obtains your password, they won’t be able to access your account without that code.

WordPress.com includes built-in two-step authentication. On self-hosted WordPress sites, you can enable 2FA through a security plugin.

3. Review and limit user access

Control who has access to your site and review user roles regularly.

Give each user their own account with the appropriate role. Avoid shared logins, and limit Administrator access to trusted users only.

At least once a month, go to Users → All Users and check:

• Are there accounts you don’t recognize?
• Does anyone have Administrator access who doesn’t need it?
• Are there old contributors or contractors who should be removed?
• Are external collaborators marked correctly?

Remove unused accounts or downgrade permissions if full access isn’t required.

4. Monitor your site’s activity log

Then, check your site’s activity logs regularly to see who logged in, what changed, and when. 

If you notice unfamiliar logins, new admin users, or unexpected plugin or settings changes, reset passwords immediately and investigate.

• WordPress.com’s Free, Personal, and Premium plans include 20-event logs, while the Business plan and above feature full logging with Jetpack’s Activity Log. 
• Self-hosted sites can install an activity log plugin for WordPress. 

5. Keep WordPress, themes, and plugins updated

Update your WordPress core, themes, and plugins as soon as new versions are released.

It’s essential since outdated software is one of the most common causes of WordPress security issues. 

Only install plugins and themes from reputable sources like the WordPress.com plugin directory, prioritize those that are actively maintained, and delete anything you’re not using — inactive plugins and themes can still create risk.

If you’re using WordPress.com, core updates are handled automatically, and the Business plan and higher include managed plugin updates. 

Many core features also come built into WordPress.com, so you don’t need to install as many plugins, which lowers your overall security risk.

On self-hosted WordPress sites, you’re responsible for monitoring and applying updates yourself.

6. Enable SSL certificates

Make sure your site uses HTTPS to encrypt data between your website and your visitors.

An SSL certificate protects sensitive information like login credentials and form submissions. Without it, browsers may label your site as “Not secure,” which can damage trust and expose user data.

You can verify SSL is active by checking for https:// and a padlock icon in your browser’s address bar:

All sites hosted on WordPress.com include a free SSL certificate enabled by default. On self-hosted WordPress sites, SSL must be configured through your hosting provider. 

7. Set up reliable backups 

Make sure your site is backed up regularly so you can restore it if something breaks or your site is compromised.

Backups allow you to roll back to a clean version after a failed update, malware infection, or accidental change. 

Look for solutions that offer automated backups and simple restore options — e.g., the JetPack plugin.

On WordPress.com, sites are backed up at the platform level, and Business and Commerce plans include real-time backups with one-click restores via Jetpack VaultPress Backup. 

For self-hosted WordPress sites, you’ll need to install a backup plugin to achieve the same level of protection.

8. Choose secure web hosting

Opt for a trusted WordPress hosting provider with robust security features to ensure a safe environment for your website. 

When choosing a web hosting provider, look for:

• Firewalls to block suspicious traffic.
• Suspicious activity monitoring to protect against unwanted login attempts, brute force attacks, and distributed denial of service (DDoS) attacks.
• Daily scans of sites for dangerous plugins, themes, malware, and other vulnerabilities.
• Managed updates that automatically apply the latest patches for WordPress core, plugins, and themes. 
• An expert security team that monitors threats and resolves issues as soon as they arise. 

On WordPress.com, these layers are built into the platform, with additional security features powered by Jetpack — including activity logging, malware scanning, and real-time backups on eligible plans.

7. Stay informed 

New threats emerge all the time, so we recommend keeping up to date on WordPress and website security issues.

You don’t need to become a web security expert. But you can follow the latest WordPress security news and check for issues that may concern your site’s security. 

We recommend these sources for reliable WordPress security news:

• Patchstack Security News
• Sucuri Monthly Vulnerability & Patch Roundup
• Wordfence Blog

Ensure your website security with WordPress.com

Out of the box, and at its core, WordPress is highly secure. Vulnerabilities typically come from outdated plugins and themes, insecure hosting, or poor security practices.

According to Patchstack, “vulnerability management and mitigation (coupled with 2FA & session management) remain the most important proactive security measures.”

The simplest way to stay on top of these security habits is to use a hosting provider that handles them for you.

WordPress.com includes built-in protections like automatic core updates, free SSL, firewalls, malware scanning, activity monitoring, and backups — reducing the number of security tools you need to manage yourself.

But after hours, he’s been working on something else.

His son Jäger races motorcycles. He is the 2025 FIM MiniGP Canada Champion — six wins, nine podiums in a single season — and has represented Team Canada at the FIM MiniGP World Final twice.

None of it lived anywhere the public could find. Sponsors had nowhere to land. Fans who couldn’t make it to events had nothing to follow.

“I’ve always had this vision in my head of creating a website for Jäger to showcase what he’s doing.”

Why WordPress.com

Jason isn’t a web professional. But his employer had recently relaunched their business website on WordPress — and working through that process gave him a feel for the platform.

“I really found that WordPress’s format was really user-friendly. It was intimidating at first, but not stopping me from doing it.”

He signed up, picked a template, and started building on his own. 

The setup was fast — no complicated hosting decisions to figure out, no technical configuration, just straight into building. 

Then the WordPress.com team reached out about our Website Design Service. Jason said yes.

How it all came together

Jason shared his vision, and the WordPress.com design experts took it from there — helping him build the site and get it live.

Jason also got support from WordPress.com’s Happiness Onboarding team, who helped him think through the launch strategy.

“Nick Severson has been really helpful in walking me through the strategy for launching my website. I can’t say enough about that experience.”

For someone who doesn’t build websites for a living, that mattered.

Next steps

Today, jagerstockillracing.com covers Jäger’s full championship history, a sponsor section, a merch store, race news, and a newsletter. 

The big launch is still coming — podcast, social push, the works. The website is where it all points to.

Your story deserves a home, too

Jason and Jäger’s story started on the track. Now there’s a website that shows the world what they’ve built.

WordPress.com’s Website Design Service pairs you with an expert who guides you through the whole build. You get a professional, fully managed website — no coding, no setup headaches, no doing it alone. 

Just a site that’s live in days, with fast and secure hosting included.

Ready to launch yours?

The challenge? Figuring out which SEO plugins actually move the needle versus which ones just clutter your dashboard. 

We looked at WordPress.com usage data and user ratings, then I tested the top contenders myself. Here are the 12 SEO plugins worth installing, what each one does best, and which ones to skip:

1. Yoast SEO Premium — Best for step-by-step SEO guidance as you write
2. All in One SEO (AIOSEO) — Best for broad coverage with AI-era features
3. The SEO Framework — Best for fast sites that need simple SEO
4. Rank Math — Best all-in-one for new sites
5. Google Site Kit — Best for tracking how your site performs in Google
6. Jetpack Boost — Best for one-click performance improvements
7. SureRank — Best for a simple setup with guided assistance
8. Xagio SEO — Best for AI-driven management and multi-site keyword research
9. Schema & Structured Data for WP & AMP — Best for detailed schema and rich snippets
10. Smush — Best for image compression and lazy loading
11. Better Robots.txt — Best for controlling crawler access
12. Redirection — Best for managing redirects and 404 errors

1. Yoast SEO Premium: Best for step-by-step SEO guidance as you write

• Who should use it: Bloggers and small site owners who want SEO guidance right inside the editor.
• Rating: 4.5/5
• Pricing: Starts at $118/year.

Yoast SEO Premium is a reliable, safety-first plugin that prevents small SEO mistakes from compounding as your site grows. It provides real-time optimization feedback directly in your editor.

You can use this SEO plugin to optimize site pages for target keywords, generate SEO titles and meta descriptions, fix internal linking issues, manage redirects, and meet readability and technical SEO standards.

I found it most useful when maintaining or updating existing content on a website with limited content. 

For example, when I tested it on an older site, it flagged broken links and surfaced inconsistent meta descriptions I had missed during regular publishing. 

Our favorite features

• Multiple-keyphrase optimization: This plugin lets you optimize a page for multiple related keyphrases for better topical coverage.
• Internal links suggestions: It suggests internal links while editing based on existing content.
• AI content assistance: It generates SEO titles and meta descriptions in the editor, with an AI Optimize (beta) feature that suggests on-page improvements for shorter content.
• Google Docs add-on: Yoast offers the same level of SEO guidance within Google Docs.

Pros and cons

Pros:

• SEO guidance is built directly into the editor, so issues are flagged before content goes live.
• Yoast has strong on-page coverage, such as keyphrases, readability, metadata, internal linking, redirects, and structured data in one plugin.
• It includes advanced add-ons (Local SEO, News, Video SEO) under one license instead of separate purchases.

Cons:

• Yoast’s recommendations don’t always align with every content strategy or niche, and can sometimes be irrelevant.
• It may feel limiting for advanced SEO users looking to conduct deep technical SEO audits and experiment with generative engine optimization.

Our take

• Choose Yoast SEO Premium for SEO guidance built into your writing workflow. It’s especially useful for bloggers and small business owners who are learning SEO fundamentals and want step-by-step guidance.
• Skip it if you’re looking for a more advanced tool for technical SEO and AI search visibility.

2. All in One SEO (AIOSEO) — Best for broad SEO coverage with AI-era features

• Who should use it: Users who want hands-on control over SEO from the start and are comfortable managing more settings in exchange for that control.
• Rating: 4.7/5
• Pricing: A free version is available. Paid plans start at $49.50/year.

All-in-One SEO handles site-wide SEO setup with minimal input, then lets you step in and fine-tune details as your site grows.

During page-level edits, the optimization panel works like a checklist, grouping tasks into sections for schema markup, social previews, internal linking, metadata, and more.

It also includes AI tools that generate SEO titles, meta descriptions, FAQs, and key points — helping you structure content in a way that’s easier for both search engines and AI systems to understand.

The operational visibility stood out the most to me. 

Built-in 404 monitoring and redirect management helped me catch and fix broken URLs immediately, without relying on Search Console or extra plugins.

Our favorite features

• Link Assistant: AIOSEO scans your entire site and suggests relevant internal links.
• Schema support and an LLM.txt generator: It lets you add structured data and create LLM.txt files to improve how your content appears in Google and AI search results.
• Google Search Console integration: It pulls key search performance metrics like keyword rankings, clicks, impressions, and average position into WordPress.
• AI content generation: This plugin speeds up on-page SEO (titles, descriptions, FAQs) and nudges you toward more structured content.

Pros and cons

Pros:

• AIOSEO handles both on-page and technical SEO in one workflow, reducing the need to juggle multiple plugins.
• It gives power users more flexibility than Yoast, with fewer forced scoring rules and more control over how SEO is applied.
• This plugin scales well for growing sites and content teams that need to manage SEO consistently across many content types.
• It makes structured data easier to manage at scale, reducing manual markup work as sites grow, and offers AI search-specific features.

Cons:

• The sheer number of settings and modules can feel overwhelming for beginners, even with the guided setup.
• Site audits can take longer to complete on large websites, and the TruSEO scoring system may feel strict if your content strategy doesn’t match its built-in recommendations.

Our take

• Pick AIOSEO if you want a complete website SEO setup that prepares you for modern AI search. It works well for new sites, migrations, and WooCommerce stores that need both SEO basics and operational tools like 404 monitoring and redirects.
• Skip it if you want a lightweight setup or prefer handling technical SEO and monitoring outside WordPress.

3. The SEO Framework — Best for advanced users who want clean, automated SEO

• Who should use it: Developers and experienced WordPress users who don’t need SEO scoring or step-by-step guidance.
• Rating: 4.9/5
• Pricing: A free version is available. Paid plans start at $84/year.

The SEO Framework is a lightweight, automation-first SEO plugin that handles core SEO tasks quietly in the background without constant prompts, ads, or upsells.

When I first tested it on an inherited site, it automatically filled in titles and meta descriptions and generated an XML sitemap immediately, without any setup. 

The one trade-off is that it doesn’t guide you step by step or score keywords. So, if you rely on prescriptive SEO prompts, know that this plugin is minimal by design.

The SEO Framework works best on performance-sensitive sites where speed and minimal overhead matter more than in-editor guidance.

Our favorite features: 

• Auto-generated meta tags: This plugin automatically creates SEO titles and meta descriptions for posts, pages, and archives using content-based logic.
• Built-in XML sitemap and canonical handling: It generates XML sitemaps and applies canonical URLs automatically to prevent duplicate-content issues.
• Unbranded, ad-free interface: It stays out of the way with no upsells, nags, or SEO “score” prompts — so the plugin feels native inside WordPress.
• Modular extension system: It lets you add advanced functionality (such as structured data, local SEO, or monitoring) through optional extensions that can be enabled individually.

Pros and cons

Pros:

• You can publish content faster because meta titles and descriptions are generated automatically.
• Setup takes minutes since smart defaults handle technical SEO without requiring configuration decisions.
• It keeps your site fast because the plugin is extremely lightweight compared to bloated alternatives.

Cons:

• It lacks content analysis and keyword optimization tools, so you won’t get real-time guidance on readability, keyword placement, or SEO improvements as you write.
• There are no native FAQ or How-To blocks: Structured data requires manual setup or third-party tools.

Our take

• Choose The SEO Framework if you already understand SEO basics and want fast, automated technical SEO handled quietly in the background. It’s ideal for performance-sensitive sites where speed and minimal interface clutter matter more than in-editor guidance.
• Skip it if you want hands-on SEO help, keyword checks, or extensive writing feedback.

4. Rank Math — Best all-in-one SEO for new sites

• Who should use it: New sites and creators who want maximum SEO features early on.
• Rating: 4.9/5
• Pricing: A free version is available. Paid plans start at $107.88/year.

Rank Math combines on-page SEO tools, schema markup, redirects, and basic technical SEO features into a single plugin — with many capabilities available on the free plan.

At the page level, Rank Math is highly directive. Each page includes a checklist and score that flag issues with title structure, focus keyword usage, and indexing before publishing.

Once schema templates are set up, you can reuse them across content types instead of configuring structured data page by page.

For the most part, visibility makes Rank Math powerful for scaling sites and teams, but it’s best for users who want active SEO guidance rather than hands-off SEO.

Our favorite features

• Score-based SEO checks: Rank Math assigns an overall score and flags optimization issues without forcing step-by-step fixes.

• Multiple focus keywords: You can optimize a single page for several related keywords.

• Search Console data in your dashboard: You’ll receive basic performance data directly inside WordPress.

• Modular design: It allows you to turn features on or off so you only use what you really need.

Pros and cons

Pros:

• Rank Math provides clear checklists and scoring inside the editor, so it’s obvious what needs fixing before publishing.
• You get access to most SEO settings upfront, which makes it easy to adjust schema, indexing rules, and analytics as your site evolves.
• Shared rules, templates, and scoring make it easier to keep SEO consistent across multiple authors and pages.
• You can set up structured data once per content type and reuse it, saving time on content-heavy or multi-format sites.

Cons:

• Rank Math asks you to make several SEO decisions early on — sometimes before you fully understand what you actually need to do.
• The checklist-and-score approach can push users to optimize for the score rather than for search intent or strategy.
• While powerful, schema templates and settings work best when you already understand how structured data should be applied across different content types.

Our take 

• Go for Rank Math if you run a content-heavy site and want tighter control over how posts appear in search.
• Skip it if you’re running a small or new site and only need simple, hands-off SEO basics.

5. Google Site Kit — Best for understanding how your site performs in Google

• Who should use it: Site owners who want Google performance data inside WordPress.
• Rating: 4.2/5
• Pricing: The plugin is free, but connected Google services may have their own costs.

Google Site Kit pulls key data from Google tools like Search Console, Analytics, and PageSpeed Insights into your WordPress dashboard. You can monitor search performance and Core Web Vitals in one place.

When I installed it, I got a clear, high-level view of how my site was performing in Google, within minutes. 

I could quickly see trends in search traffic and analyze technical aspects like the Core Web Vitals without jumping between dashboards.

All in all, Site Kit works best as a monitoring and context dashboard to identify where problems exist. 

From there, you can dig deeper into Search Console or use dedicated SEO and performance plugins to address them.

Our favorite features 

• Unified Google data: Site Kit brings traffic, search visibility, Core Web Vitals, and AdSense earnings into a single WordPress dashboard.

• Search funnel visibility: It shows which queries surface your pages, how often they appear in search, and how many clicks they earn.

• Per-page performance stats: You can check Analytics and Search Console metrics for individual posts and pages, so you can see what content drives results.

• No-code Google setup: It connects tools like Analytics, Search Console, Tag Manager, and AdSense without editing your theme or touching site code.

Pros and cons

Pros:

• It helps you monitor traffic and search performance without switching tools.
• You can connect Google services without touching code, because Site Kit handles the technical setup automatically.
• All features are available at no cost, making it an accessible monitoring tool for basic visibility.

Cons:

• Site Kit surfaces trends and signals, but it doesn’t provide deep analysis such as conversion tracking, advanced user behavior, or detailed diagnostics.
• It shows where issues exist, but resolving SEO or performance problems still requires dedicated plugins or native Google dashboards.

Our take 

• Choose Google Site Kit if you’re already using Google services and want to see basic metrics in WordPress without paying for a premium analytics plugin and switching between tools. Use it as a prioritization layer to decide which SEO or performance issues to address first.
• Skip this if you need detailed product, funnel, or revenue breakdowns inside WordPress — Site Kit focuses on high-level Google metrics rather than full reporting.

6. Jetpack Boost — Best for one-click performance improvements

• Who should use it: Site owners who want core security, monitoring, and basic SEO handled automatically with minimal setup.
• Rating: 4.7/5
• Pricing: A free version of Jetpack is available. Paid plans start at $119.40/year for the first year (introductory discount; regular price is $239.40/year).

Jetpack Boost improves Core Web Vitals using a small set of safe, automated performance optimizations, including Critical CSS, deferred JavaScript, and improved image loading. 

When I tested it on a lightly optimized site, it immediately highlighted issues related to Critical CSS, deferred JavaScript, and oversized images. 

Instead of tweaking dozens of technical settings, the SEO plugin focuses on a narrow set of optimizations designed specifically to safely improve Google’s performance metrics. 

It’s a good fit for site owners who want quick, measurable improvements in Core Web Vitals with minimal effort.

Tip: The full Jetpack plugin also covers security, backups, analytics, and more. It’s included for WordPress.com users, with features like real-time backups and SEO support available on Business plans and higher.

Our favorite features 

• One-click Critical CSS: Jetpack loads essential page styles first so content appears faster, without breaking layouts.

• LCP-focused optimization: The most important content appears sooner, improving Core Web Vitals scores.

• Deferred JavaScript: It delays non-essential scripts so text and layout load first, reducing blank screens on slower devices.

• Page Cache: It saves pages as static files so they load faster for visitors, reducing server load and improving overall response times.

Pros and cons

Pros:

• Jetpack improves Core Web Vitals with one-click optimizations like Critical CSS, deferred JavaScript, and lazy loading.
• You can feel the difference quickly, especially on content-heavy pages, making it a solid baseline performance upgrade.
• The optimizations are designed to be safe and WordPress-friendly, so you’re less likely to run into layout issues or broken functionality.

Cons:

• Boost is designed to stay simple; it won’t replace a fully custom performance setup for advanced needs.
• Controls are mostly toggle-based, which means you get less flexibility than with tools built for deep tuning.

Our take

• Choose Jetpack Boost if you want a simple, low-maintenance way to improve site speed and Core Web Vitals.
• Skip it if you already have a heavily customized performance setup — you’ll get more value from a tool built for advanced tuning.

7. SureRank — Best for simple setup and guided SEO assistance

• Who should use it: Content creators who want a “set it and forget it” SEO for essentials.
• Rating: 4.6/5
• Pricing: A free version is available. Paid plans start at $149/year. $99 with a first-year discount. They also offer lifetime plans.

SureRank keeps SEO basics in one place: titles and meta descriptions, social previews, sitemaps, and default schema.

When I tested it, the first audit surfaced a short list of fixes I could act on immediately. Then, the editor kept flagging common issues as I worked, like missing alt text, oversized images, or titles that ran too long.

It adds default schema (like BreadcrumbList and Article) and keeps your SEO titles/descriptions consistent with your social share previews.

Altogether, SureRank works best for small blogs, portfolios, and simple business sites that need essential SEO with minimal setup. 

Our favorite features

• Focused SEO audit: SureRank highlights only the most important issues, so you know what to fix first without noise.
• Unified metadata workflow: SEO titles, schema, and social previews live in one place, reducing mismatches.
• Search Console integration: It shows key performance metrics, clicks, impressions, and top queries inside WordPress.
• Indexing controls (robots + canonicals): It lets you noindex low-value pages and set canonical URLs to reduce duplicate-content issues.

Pros and cons

Pros:

• The plugin is lightweight by design, so it keeps site overhead low and performance impact minimal.
• It helps you catch practical on-page SEO issues as you write, like missing alt text or overly long titles, without pushing you toward rigid scores.
• It keeps SEO, schema, and social metadata in a single workflow, reducing mismatches between search results and social previews.

Cons:

• SureRank is not well-suited for large or complex sites that require granular control or agency-level workflows.
• It has a smaller ecosystem and potentially fewer third-party resources due to its relatively recent launch.

Our take

• Choose SureRank if you’re a content creator, blogger, or small business that needs basic SEO applied with minimal effort. It’s most useful when updating existing content or managing content on a smaller site.
• Skip it if you’re an SEO consultant, power user, or enterprise site that needs advanced control.

8. Xagio SEO — Best for AI-driven SEO management and keyword research

• Who should use it: Agencies and advanced teams managing SEO across multiple WordPress sites.
• Rating: 4.9/5
• Pricing: A free version is available. Paid plans start at $467/year.

Xagio is an SEO system built for planning and managing SEO at the site level, not just optimizing individual pages. 

When I tested it, this SEO plugin analyzed existing pages first and grouped them by the keywords they were already ranking for. It then surfaced where pages were competing with each other or missing clear search intent.

Instead of fixing posts individually, you work from a central planner where titles, descriptions, and headings can be updated across multiple pages at once. 

This makes site-wide cleanup and restructuring far faster than editing pages manually.

Our favorite features 

• Cluster-based optimization: Xagio optimizes each page for groups of related keywords, not just a single focus term.
• Centralized project planning: You can see all pages, keyword groups, and rankings in one site-wide dashboard.
• Intent-aligned page editor: It keeps titles, H1s, schema, and metadata tied to a single keyword group.
• Integrated rank tracking: This plugin connects keywords directly to the pages they rank for, without external tools.

Pros and cons

Pros:

• You can manage SEO at the site level, so updating titles and metadata across many pages doesn’t require page-by-page edits.
• It groups keywords by page and intent, helping prevent keyword overlap and content cannibalization.
• Xagio provides clear competitive direction by showing which keywords and page structures already perform in the SERPs.
• It reduces the need for multiple SEO tools by combining keyword planning, competitor research, and bulk optimization in one system.

Cons:

• It has a steeper learning curve than in-editor SEO plugins, especially for non-technical users.
• The interface can feel heavy, with many settings and views visible at once.
• Teams using dedicated analytics or keyword tools may find some features redundant or less substantial than specialist competitors.

Our take

• Go for Xagio SEO if you’re running multiple WordPress sites or need advanced SEO automation. It’s built for managing SEO across projects, not optimizing pages one by one.
• Skip it if you’re a solo blogger or a small business with basic SEO needs.

9. Schema & Structured Data for WP & AMP — Best for fine-grained schema and rich snippets control

• Who should use it: Ecommerce stores, review sites, and local businesses that rely on rich results and need strong support for Product, Review, and LocalBusiness schema.
• Rating: 4.5/5
• Pricing: It has a free plan. Paid plans start at $99/year.

Schema & Structured Data for WP & AMP is built for sites that need more control over structured data than most SEO plugins offer. 

Instead of applying one generic schema type site-wide, it lets you assign schema by content type — so products, articles, FAQs, and How-To pages stay correctly marked up.

Once configured, those rules apply automatically across your site, keeping markup consistent and reducing manual work.

I especially like that you can add schema directly from the block editor using dedicated schema blocks, which is especially useful for FAQ, How-To, and review content.

Our favorite features 

• Site-wide schema control: It defines core entity data once and applies it consistently across the site.
• Content-type–based rules: It applies the schema by post type or taxonomy, so markup stays predictable and accurate.
• Gutenberg schema blocks: This plugin converts visible FAQ, How-To, and review blocks into matching structured data.
• Explicit AMP schema handling: It separates AMP schema from non-AMP pages to reduce mobile validation issues.

Pros and cons

Pros:

• Schema can be assigned by content type, so product pages, blog posts, and FAQs don’t end up using the same generic markup.
• Templates let you define a schema once and apply it across multiple posts, keeping markup consistent at scale.
• The free version includes a broad set of schema types, covering most common use cases without needing an upgrade.

Cons:

• This plugin requires some schema knowledge to use effectively, especially when configuring advanced rules or templates.
• It can conflict with other SEO plugins if schema output isn’t carefully managed, leading to duplicate markup.

Our take

• Choose Schema & Structured Data for WP & AMP if you run an ecommerce store, review site, or local business alongside your existing SEO setup. It handles schema markup, but doesn’t replace a full SEO system.
• Skip it if you’re just getting started with SEO and want an all-in-one solution.

10. Smush — Best for image compression, resizing, and lazy loading

• Who should use it: WordPress beginners, content creators, and small business owners who want hassle-free image compression.
• Rating: 4.8/5
• Pricing: A free version is available. Paid plans start at $30/year.

The Smush plugin focuses on image optimization, automatically compressing images as you upload them to help pages load faster.

New uploads are optimized immediately, and oversized images are clearly highlighted as you browse the site, which makes performance issues easy to spot and fix. 

For best results, I found that enabling both resizing and metadata removal had more impact than compression alone.

All in all, I found Smush works best on smaller or newer sites where ongoing uploads matter more than bulk cleanup. 

Our favorite features 

• Bulk optimization for existing libraries: You can optimize unlimited images without running heavy processes on your own server.
• Lazy loading: Smush delays loading offscreen images until users scroll to them.
• Safe image resizing: It notifies you when you upload images that exceed recommended dimensions.

• Smart compression: It shrinks image file sizes without a noticeable drop in quality, helping pages load faster.

Pros and cons

Pros:

• It starts optimizing images automatically after activation, so new uploads are handled without ongoing manual work.
• This plugin makes it easy to spot oversized or unoptimized images that hurt performance.
• It covers essential image optimization in the free plan, which is enough for basic compression and lazy loading.

Cons:

• Bulk optimization capped at 50 images per batch makes cleaning up large image libraries slow and repetitive.
• It’s focused just on images, so you’ll need additional tools for broader performance or SEO optimization.

Our take 

• Choose Smush if images are slowing your site down. This plugin is best for fixing image-related performance issues on image-heavy sites.
• Skip it if you need basic image optimization while your images are already handled by a CDN and your performance stack covers compression, resizing, and lazy loading.

11. Better Robots.txt — Best for customising crawler access and blocking unwanted bots

• Who should use it: Site owners and SEOs who need precise control over which pages and bots can crawl their site.
• Rating: 4.5/5
• Pricing: A free plan is available. Paid plans start at $109.94/year.

Better Robots.txt lets you control how search engines and bots crawl your site directly from the WordPress dashboard — no file editing required.

It generates and serves a robots.txt file automatically, making it easy to update crawl rules, block unwanted bots, or add sitemap references without touching server settings.

Keep in mind that robots.txt controls crawling, not indexing. It works best for managing bot access and crawl behavior rather than hiding pages from search results entirely.

Tip: The plugin can also generate an llms.txt file. While not essential for SEO, it’s a useful addition if you want to prepare for how AI search engines like ChatGPT may discover content over time.

Our favorite features 

• SEO-safe robots.txt configuration: It applies sensible default crawl rules so you don’t accidentally block important pages.
• Granular bot control: It lets you allow or block individual crawlers, including AI bots, without touching robots.txt syntax.
• Search Console–aware validation: It flags rules that could cause crawl or indexing issues before they become problems.
• LLM-ready configuration: Better Robots includes support for AI crawlers and optional llms.txt generation.

Pros and cons

Pros:

• You can manage crawler rules directly inside WordPress, which is especially useful on managed hosts without server or FTP access.
• It helps improve crawl efficiency by blocking low-value URLs that can waste crawl budget.
• You avoid missing or incorrect sitemap declarations, because sitemap references are added automatically when compatible SEO plugins are active.

Cons:

• It requires SEO knowledge to use safely, since incorrect rules can block important pages from being crawled.
• It uses a virtual robots.txt file, so changes may require cache or CDN refreshes on some hosting setups.
  

Our take

• Choose Better Robots.txt if you need precise control over how bots crawl your site and want to prepare your site for AI search.
• Skip it if your site is simple or you don’t want to manage crawl rules yourself.

12. Redirection — Best for managing redirects and tracking 404 errors

• Who should use it: Site owners who regularly update URLs, migrate content, or want visibility into broken links without server access.
• Rating: 4.4/5
• Pricing: Completely free with no paid version.

Redirection manages URL redirects and tracks 404 errors directly inside WordPress, without requiring server access or file edits. 

As soon as it’s activated, it starts logging 404 errors and lets you create, edit, and test redirects from the WordPress admin.

What stands out is visibility: You can see which redirects are active, where users are hitting dead URLs, and whether rules are actually matching real traffic. 

Overall, I found Redirection most useful during migrations or cleanups — when you’re handling lots of URL changes and need reliable 404 tracking in one place.

Our favorite features 

• Regex redirects: This plugin redirects entire URL patterns in bulk using regex, making it ideal for site migrations.
• 404 monitoring: It tracks and logs 404 errors and redirect hits.
• Automatic redirects for URL changes: It creates a redirect when you update a page or post URL, so visitors and search engines don’t hit broken links.
• Bulk import and export: It lets you move redirects between sites or upload them in batches during migrations.

Pros and cons

Pros:

• Redirection protects traffic and rankings by preventing broken links during updates, migrations, and permalink changes.
• It automatically surfaces real 404 errors and patterns, helping you prioritize fixes based on what users and search engines actually hit.
• It scales from simple one-off redirects to large restructures, reducing manual cleanup work even for complex URL changes.
• This plugin is fully usable for free: You can handle redirects and 404 monitoring without committing to a paid SEO suite.

Cons:

• Not ideal for extremely high-traffic sites: On very large sites, handling thousands of redirects inside WordPress may be less efficient than managing them directly on the server.
• Advanced rules can cause mistakes: Pattern-based redirects are powerful, but a small typo can accidentally send visitors to the wrong page or create redirect loops.

Our take

• Choose Redirection if you regularly update content, change URLs, or want an easy way to track and fix broken links inside WordPress.
• Skip it if your site has very high traffic or thousands of redirects, where a server-based redirect setup is usually a better long-term fit.

The right SEO plugins complete your setup

If you want a simple starting point for SEO plugins, focus on the essentials:

• One core SEO plugin (Yoast, Rank Math, or AIOSEO) for on-page optimization and technical controls.
• Jetpack Boost for performance improvements and Core Web Vitals.
• Smush for image optimization.
• Redirection for managing URL changes and 404 errors.
• Schema & Structured Data for WP & AMP if you need advanced schema control.

On WordPress.com, you already benefit from fast managed hosting, built-in security, SSL, sitemaps, and various Jetpack features. 

These plugins don’t replace that foundation — they extend it where you need more control, insight, or flexibility.

When I first learned to build WordPress sites, I had to stitch them together from different tools and vendors. Think of connecting your domain registrar to a hosting provider, installing backup, security, and performance plugins — that sort of thing.

When I switched to WordPress.com, the experience became entirely different. Here are 14 ways it makes site ownership easier.

1. Launch your site in a single, ready-to-run environment

On WordPress.com, getting a domain, hosting, security, backups, and performance are already configured.

Your site runs on WordPress-first infrastructure, built to handle updates, plugins, traffic spikes, and security without you having to tune the stack yourself.

Here’s what you get:

• Hosting optimized specifically for WordPress.
• Your domain automatically connects to your site (if you purchase it through WordPress.com).
• Automatic real-time backups and one-click restore (on Business and higher).
• Ready-to-use, top-notch security features.
• Performance optimization out of the box.

In short, instead of spending time setting up your site’s infrastructure, you can get online — and stay online — while focusing on growing your business.

2. Build with AI, but keep full control

On WordPress.com, AI helps you launch quickly — while still creating a real WordPress site you control.

Some AI website builders generate sites inside proprietary platforms, which can make it harder to customize, add advanced features, or move your site elsewhere later.

That’s different on WordPress.com. 

The AI website builder creates your site using native WordPress functionality, including proven themes, patterns, and the Block Editor. Instead of generating loose code, it assembles your site from building blocks that are designed to work well together.

Because of that, you’re building directly on WordPress from day one. You can redesign, add features, or scale your site over time without rebuilding it from scratch.

And it doesn’t stop after launch. With the WordPress AI Assistant, the AI truly understands your site’s content and layout. You can use it to add smart improvements and optimize your site for better results.

3. Grow your site without headaches

On WordPress.com, success doesn’t create extra work or extra fees. When your site starts getting attention, you don’t need to scramble to keep it online or worry about sudden costs.

No matter if you have 10 visitors or 100,000, all WordPress.com plans come with:

• Unlimited bandwidth with no overage fees.
• A 99.999% uptime target.
• Global caching and CDN.
• Free SSL encryption.
• Built-in malware scanning and attack protection.

That means you’ll never be forced to upgrade for performance reasons. While you can upgrade to a Business or Commerce plan for advanced features, your site will remain safe and stable on any plan.

4. Bring familiar AI tools into your WordPress workflow

WordPress.com connects your site to the AI tools you already use.

You can build themes and plugins with AI, connect Claude to analyze your real site data, or use the built-in WordPress AI Assistant directly inside your dashboard. 

These integrations are officially supported and permission-based, so you control what AI can access.

Instead of copying content into a generic chatbot, AI works with your actual WordPress environment — your posts, pages, traffic data, and structure.

All this helps you focus on the actions, pages, content, and opportunities that actually drive business results.

5. Work with real humans who treat your site like it matters

That said, you don’t have to figure everything out alone. 

With WordPress.com’s website design services, real WordPress experts build your site with you — refining your vision, making sure it looks professional, and helping you launch with confidence.

Take Jason, a WordPress.com user who wanted a website to support his son’s motorcycle racing journey.  He worked directly with the WordPress.com team to refine the design and structure, so it felt credible and ready to launch.

But the help didn’t stop at launch. The team continued guiding him through SEO setup, plugin choices, and planning his rollout strategy.

That’s the difference. You’re not just buying a template. You’re getting real people who help you build it right — and stay available as your site evolves. 

6. Restore your website, even if you are locked out

Every WordPress.com site is automatically backed up behind the scenes. You don’t need to install a plugin or set up a backup schedule — it’s handled for you.

On Business and Commerce plans, you can also restore your site yourself with one click — even if you can’t access your WordPress dashboard.

Like all other features, backups and restores happen on the platform level. This means you don’t need to log in to your site or server. Trust me, the last thing you want to do in this situation is struggle to get your website back.

7. Automate site updates without worrying

WordPress.com keeps your site up to date automatically — without you managing core updates, plugins, themes, or server software.

On most setups, it’s your responsibility to update WordPress core, plugins, themes, and even PHP. On WordPress.com, that maintenance is handled for you and coordinated to reduce compatibility issues and update-related errors.

How so?

First of all, core website updates are applied automatically, as are new versions of plugins and themes. Server maintenance is also taken care of for you.

Because the platform and infrastructure are built to work together, updates are tested and coordinated before they reach your site. That reduces the chance of something breaking after an update.

And if you want more control, you still have it. For example, on Business and Commerce plans, you can change your PHP version from the site settings — no server access required.

8. Use plugins to add features, not crucial infrastructure

On WordPress.com, security and performance are built in — so plugins serve to add features rather than fix fundamentals. 

On many setups, you install plugins just to handle backups, security, or caching. Here, that infrastructure is already managed for you. For example, all WordPress.com sites come with Jetpack, which offers SEO tools, analytics, newsletter functionality, additional editor blocks, and more.

That means you can focus on adding capabilities instead — ecommerce, memberships, translations, forums, and more.

With access to over 50,000 plugins, you can shape your site around your goals, not around technical gaps.

9. Build locally, using the same environment

With WordPress Studio, you can test changes on your own computer in the same environment your live site uses — then sync them when you’re ready.

This is more relevant to developers than beginners, but it’s useful to understand. Local development gives you a safe space to experiment, redesign pages, or test features without visitors seeing half-finished work.

The tricky part with local development is usually deployment. If your local setup doesn’t match your live environment, things can break when you push changes.

WordPress Studio solves that by mirroring your WordPress.com environment, making it much easier to move changes from local to live without surprises. It also comes with reusable site blueprints, shareable preview sites, and selective push and pull. 

Tip: Other WordPress.com developer features include free staging sites, SFTP/SSH, WP-CLI, Git commands, and GitHub deployments.

10. Keep your site fast and secure over time

Website performance and security are usually ongoing projects. But, as we’ve already settled, on WordPress.com this happens at the platform level, so you don’t have to worry about it at all.

Keeping a site fast and protected means adjusting cache plugins, configuring security tools, and monitoring logs over time. Here, that work happens behind the scenes.

Features that keep your site resilient include:

• Automated data center failover.
• Built-in spam protection.
• A detailed site activity log.

And if you ever need a hand, WordPress.com’s Happiness Engineers are available 24/7 to help.

Besides, WordPress is one of the most rigorously tested and actively maintained software projects in the world, with thousands of contributors and a dedicated security team. 

On WordPress.com, that foundation is reinforced with managed infrastructure that keeps your site protected as you grow.

11. Expand what your site can do — without starting over

On WordPress.com, you can redesign, extend, and turn your site into something bigger without changing platforms or rebuilding from scratch.

Your website might start as a simple blog or portfolio. Later, you might add a shop, memberships, bookings, or a newsletter. On many setups, that means migrating systems, upgrading servers, or reworking your entire stack.

Here, you build on the same foundation.

You can refresh your design using native blocks, patterns, and themes — and use tools like newsletters. You can also add ecommerce, payments, or other features through plugins. 

And you can do it all without touching hosting, security, or performance settings behind the scenes.

12. Keep full ownership of your website

With WordPress.com, your content and data remain yours forever — and you can export them if you ever decide to move.

Some proprietary website builders make it difficult to take your site elsewhere, limiting how easily you can export your content, structure, or integrations. While self-hosting WordPress gives you full ownership, it also means full responsibility for managing everything.

WordPress.com runs on the open-source WordPress software, which means your content isn’t trapped in a proprietary system. If your needs change, you can export and migrate your site without rebuilding it from scratch.

13. Get out of the maintenance loop

On WordPress.com, most routine upkeep happens automatically, so you’re not constantly managing your site behind the scenes.

It’s great that WordPress and its components receive regular updates. But keeping WordPress core, themes, plugins, and infrastructure up to date can turn into an ongoing cycle of small tasks and checks. 

Here, those updates — along with performance and security management — are handled for you.

That means less time maintaining your website and more time using it to move your work or business forward.

WordPress core is updated automatically on all plans; themes are maintained for you.

On Business and Commerce plans, plugins can be updated automatically as well. Server-level components like PHP are managed by WordPress.com behind the scenes.

14. Migrate your site without downtime

Finally, WordPress.com also helps you seamlessly migrate your website, whether you do it yourself or with expert help.

Moving hosting providers comes with a long list of to-dos. You have to move all parts of your site, fix compatibility issues with the new environment, and cross your fingers that the website won’t go down during the switch.

To avoid this, on WordPress.com Business and Commerce, migration and launch happen as separate steps:

1. Create a new, empty site.
2. Clone your existing site into it (your original site stays live on your old host).
3. Review the WordPress version, pages, plugins, etc., in the new environment.
4. Switch your domain when you are 100% ready.

Your visitors won’t even notice the change. Better yet, you can choose the “do it for me” option and the WordPress.com team will handle the migration for you, and then guide you through the final steps.

Make your life easy — Choose WordPress.com

The difference of hosting your site on WordPress.com versus elsewhere doesn’t come down to a single feature — it changes your entire experience of website ownership.

From the beginning, your site lives in an optimized, centrally managed environment that it never has to leave, no matter how much you grow. 

This reduces the technical work necessary to keep it running smoothly, allowing you to focus on what really matters and moves the needle. At the same time, you retain full ownership and control over your site.

Ready to make this a reality for yourself?