Ahmad Developer Toolkit brings practical agency, SEO, media, lead-generation, and developer utilities into one WordPress dashboard. All included tools are available without a license key, paid upgrade, trial, remote unlock, or private update server.

Media Tools

Image filename renaming and bulk renaming.
JPG/PNG to WebP conversion.
Same-format image compression with backup support.
Oversized image detection for large original uploads.
Missing ALT text scanning with inline updates.
Background unused-image scanning.
Quarantine-first unused media cleanup with restore and permanent-delete controls.

SEO & Indexing

Advanced on-page and technical SEO audit.
Strict earned-points scoring instead of a generous subtractive score.
SEO category breakdowns and page-level scores.
SEO scan history with previous-vs-current comparisons.
New, fixed, remaining, and regressed issue tracking.
Duplicate and near-duplicate content checks.
Heading, metadata, canonical, indexability, internal-link, image, schema, social, robots.txt, and sitemap checks.
Manual page-by-page IndexNow submission.
Local IndexNow request history and first-confirmed-indexed timing records.
Page indexability checker with HTTP status, canonical, and noindex checks.

Email Delivery

Optional built-in SMTP Mailer for standard SMTP servers.
Configurable From Email and From Name with optional force settings.
None, SSL, and TLS encryption options with configurable port and Auto TLS.
SMTP authentication with encrypted local password storage.
Optional AHMAD_TOOLKIT_SMTP_PASSWORD wp-config.php constant for environment-managed credentials.
Real test-email tool with mailer error reporting for administrators.

Content, Contact & Form QA

Phone number consistency scanner across rendered public pages.
Email address consistency scanner.
Form and booking health checks for common WordPress form systems.
Safe same-site form testing where automatic submission is appropriate.
Ten ready-made Toolkit lead forms using WordPress wp_mail().
Universal custom HTML form connector using data-ahmad-form="1" for same-site lead/contact forms.
Local form-entry inbox and email delivery handoff status.
MetForm successful-submission tracking support.

Site Widgets & Conversion Tools

Floating contact widget with phone, SMS, WhatsApp, Facebook Messenger, email, maps, Instagram, and form actions.
Announcement bar generator.
Popup builder with message/CTA and form modes, delay, scroll, exit intent, frequency, theme, and position controls.
Trust Badge Builder with configurable icons, text, layouts, colors, and shortcode output.
Local aggregate conversion tracking for calls, forms, WhatsApp, SMS, email, and directions.

Developer & Site Management Tools

Page Notes column, modal, and editor meta box.
Duplicate Page utility that copies page content, featured image, template, Elementor/page metadata, and custom fields into a Draft.
Login URL Customizer with optional default wp-login.php blocking.
Maintenance and hosting-expired notice generator.
Ten ready-made maintenance/hosting notice templates.
Elementor cache clearing after supported media-reference operations.

Manual IndexNow

The IndexNow tool is intentionally page-by-page. Nothing is submitted automatically. An administrator chooses a published URL and clicks the IndexNow action or submits the URL from the plugin screen.

The plugin records the request time and IndexNow response locally. IndexNow acceptance is not presented as proof that Google or another search engine has indexed the URL. An administrator can record the first confirmed indexed time after checking the search engine, allowing the plugin to calculate how long confirmation took.

External Services

Administrator-configured SMTP server

When an administrator enables SMTP Mailer, outgoing WordPress email is sent directly to the SMTP server configured by that administrator. The data sent to that server can include recipient addresses, sender details, message subjects, message bodies, and attachments supplied to WordPress wp_mail() by this plugin, WordPress core, or another plugin.

The SMTP server and provider are chosen by the site administrator. Ahmad Developer Toolkit does not proxy SMTP traffic through the developer and does not send SMTP credentials to the developer. SMTP credentials are stored locally on the WordPress site; the password is encrypted before database storage unless the administrator supplies it through the AHMAD_TOOLKIT_SMTP_PASSWORD configuration constant.

IndexNow

When an administrator explicitly uses the IndexNow feature, this plugin sends the selected URL, the website host, an automatically generated IndexNow key, and the key-location URL to the IndexNow API at https://api.indexnow.org/indexnow.

This request is required to provide the IndexNow submission feature. No IndexNow request is sent merely because the plugin is installed or activated.

IndexNow documentation: https://www.indexnow.org/documentation
IndexNow privacy information: https://www.indexnow.org/privacy

The plugin does not send analytics, feature-usage telemetry, license data, or website content to the developer.

Privacy

Toolkit Forms can store submitted form information locally on the WordPress website as private entries. Depending on the form, this can include names, email addresses, phone numbers, service selections, and messages.

The plugin also stores local administrator notes, SEO scan history, IndexNow submission history, popup/widget settings, aggregate conversion counters, and optional SMTP settings. SMTP passwords saved through the plugin interface are encrypted before database storage. These records remain in the site’s WordPress database unless an administrator removes them.

Conversion tracking stores aggregate event totals locally. It does not store visitor names, phone numbers, email addresses, or message content as part of the tracking counters.

The plugin adds suggested text to WordPress’s Privacy Policy Guide.

Important Safety Notes

No automated WordPress media scanner can guarantee detection of every possible media reference. Keep a full site backup before bulk media operations and use the reversible quarantine workflow before permanent deletion.

The form-health test intentionally avoids automated submission for booking, payment, CAPTCHA, file-upload, and external-action forms.

The Login URL Customizer changes authentication routing. Test the custom login URL in a private/incognito window before enabling the option to hide direct wp-login.php access. Deactivating the plugin restores normal WordPress login routing.