Stinoment Growth Assistant Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
We run websites for clients every day, and the same questions keep coming up: Why did traffic drop? Which pages are close to page one? Is the site safe? Growth Assistant answers them, and we use it on our own projects.
It reads your Google and Bing numbers, checks your whole site once a day, and turns what it finds into a short list of things worth doing this week. Each finding says what is wrong, where exactly, why it matters and how to fix it. Nothing changes unless you click a fix button, and every change can be undone.
What you get
- Search Console, explained: clicks, views and position for 7 days up to 16 months, pages close to page one, pages losing traffic, Images and Discover, sitemap warnings with their cause, and links from other sites.
- Daily check-up: more than 50 checks for security, site health, SEO, content, links, speed, WooCommerce and comments, in plain words. Turn off any reminder that is a choice on your site.
- Toolbox: backups (content or full), WebP images, redirects for missing pages, robots.txt and .htaccess editing with safety checks, email delivery (SMTP), protection switches and a cookie banner that really waits for consent.
- Security: login protection, private login address, two-step login, file health, alerts by email, Telegram, Bale or webhook, and an activity log.
- Growth: speed test like GTmetrix with the plugin that makes a page heavy, site strength and trust month by month, weekly growth moves, competitor watch, store money leaks, push notifications and a monthly report.
Built for everyday hosting
Work runs in short steps in the admin area or small background jobs, never while visitors load your pages. English and Persian, with short “?” notes on every screen.
Works with AI assistants
On WordPress 6.9 and later, the report, check-up, fixes and undo are in the Abilities API, so MCP-connected assistants can use them. Only administrators can run them.
External services
This plugin can connect to these services. Nothing personal is sent.
- IndexNow (api.indexnow.org) – only when you turn on the IndexNow switch. When a post is published or updated, its address, your site host name and your IndexNow key are sent, so search engines that use IndexNow (Bing, Yandex and others) learn about the change. Documentation: https://www.indexnow.org/documentation · Microsoft privacy statement: https://privacy.microsoft.com/privacystatement · Yandex legal documents: https://yandex.com/legal/
- stinoment.com – only if you turn on the Health badge and keep its link on: the badge links to https://stinoment.com/ . Nothing is sent; it is a normal link a visitor may click. Privacy policy: https://stinoment.com/privacy-policy/
- WordPress.org Plugins API (api.wordpress.org) – during a check-up, the folder names of your active plugins are sent to learn when each plugin was last updated. Privacy policy: https://wordpress.org/about/privacy/
- WordPress.org files (api.wordpress.org, downloads.wordpress.org, core.svn.wordpress.org) – only when you use File health: your WordPress version and locale, and the folder name and version of each plugin, are sent to download the original file fingerprints; to repair a WordPress file, that original file is downloaded. Privacy policy: https://wordpress.org/about/privacy/
- Google Search Console API (searchconsole.googleapis.com, oauth2.googleapis.com) – only with the “own key” Search Console method: your site’s property address and the date ranges are sent with your own service account, to read your search numbers. Terms: https://developers.google.com/terms · Privacy: https://policies.google.com/privacy
- STINOMENT server (api.stinoment.com) – only with the “STINOMENT email” or “Sign in with Google” methods: your site address and a random check token are sent once to register the site, then the property and date ranges of each Search Console request. The server reads Google’s numbers for you and returns them; it does not keep them. Privacy policy: https://stinoment.com/privacy-policy/
- STINOMENT contact form (api.stinoment.com) – only when you fill in the form on the “About us” screen, tick the agreement box and press “Send message”: your name, email, phone (if given), website address, the service you chose and your message are sent so the STINOMENT team can answer you. Nothing is sent before that. Privacy policy: https://stinoment.com/privacy-policy/
- STINOMENT Web Report (api.stinoment.com) – off by default; only if you turn on “Share anonymous monthly totals” in Growth STINOMENT Web Report. Once a month a summary of the month before is sent: Google and Bing totals (clicks, views, position, device and country shares, click rate by position), the health score and which checks pass, real speed numbers, the trust score, domain strength and phone speed test score of the month (when you use those tools), the count of wrong password tries and spam comments, whether two-step login and a private login address are on, and the WordPress and PHP versions, language, number of posts, whether WooCommerce is active, and the month you started using the plugin. With the first summary only, the Google totals (clicks, views, position) of the two months before are also sent, so STINOMENT can measure how sites change after they start. It also includes kinds of searches without the words (questions or not, short or long, with or without your site name). Only if you also turn on “Also share popular search words”, your top Google searches are sent, after any search with an email, link, phone number or your site name is removed. Page addresses, visitor data, emails and user names are never sent. You can read the exact summary on that screen before you agree. STINOMENT publishes only numbers that at least 10 sites share. Turning sharing off deletes everything your site shared. If you also turn on “List my site among STINOMENT users”, your site name and address may be shown as a STINOMENT user. Privacy policy: https://stinoment.com/privacy-policy/
- Browser push services – only if you turn on Push notifications and press “Send”. For each follower the site sends an empty, signed request to the push address their own browser gave (Google Firebase Cloud Messaging for Chrome, Edge on Android and Opera; Mozilla for Firefox; Microsoft for Edge on Windows; Apple for Safari). The message text is not sent to them: the visitor’s browser then reads it from your own site. The push addresses are kept only in your database and are deleted with the plugin. Google: https://firebase.google.com/terms · https://policies.google.com/privacy · Mozilla: https://www.mozilla.org/about/legal/terms/services/ · https://www.mozilla.org/privacy/ · Microsoft: https://www.microsoft.com/servicesagreement · https://privacy.microsoft.com/privacystatement · Apple: https://www.apple.com/legal/internet-services/terms/site.html · https://www.apple.com/legal/privacy/
- STINOMENT bot (api.stinoment.com, with Telegram api.telegram.org or Bale tapi.bale.ai) – only after you press “Connect” in Security Alerts and press Start in the bot. Then your site address, site name, language, the address of your Growth Assistant screen and the plugin’s private health address are sent to the STINOMENT server. The server opens that health address about every 5 minutes to see if the site is up. The text of urgent alerts (fatal error, changed WordPress files, a new administrator or plugin, a certificate or domain about to end) and a short weekly report (health score, number of problems, the three most useful tasks, Google clicks of the week, blocked password tries, backup age) are sent to the server, which forwards them only to the people who connected the bot. Send /stop to the bot or press Disconnect to end it; deactivating the plugin disconnects it too. Privacy policy: https://stinoment.com/privacy-policy/ · Telegram: https://telegram.org/tos · https://telegram.org/privacy · Bale: https://bale.ai/
- Speed test (api.stinoment.com, with Google PageSpeed Insights and Chrome UX Report) – only when you press “Test on phone” or “Test on computer” in Growth Speed test, and then once a week if you keep the weekly test on. The address of the page you test (a page of your own site), the device and your language are sent to the STINOMENT server, which asks Google’s PageSpeed Insights to open the page and sends back the scores, the problems and small screenshots. Pressing “Show the 6 months” sends your site address to read Google’s public real-visitor numbers (Chrome UX Report). No visitor data is sent. Privacy policy: https://stinoment.com/privacy-policy/ · Google terms: https://developers.google.com/terms · Google privacy: https://policies.google.com/privacy
- Site strength (api.stinoment.com, with Open PageRank by DomCop) – only after you press “Check domain strength” in Growth Site strength and trust, then once a month. Only your domain name is sent; the STINOMENT server asks Open PageRank for its public score and rank. The trust score is worked out on your own site and nothing is sent for it. Privacy policy: https://stinoment.com/privacy-policy/ · Open PageRank service and terms: https://www.domcop.com/openpagerank/
- Google Site Kit – with the Site Kit method, data is read from the Site Kit plugin inside your own site; Site Kit talks to Google under its own terms.
- Bing Webmaster Tools API (ssl.bing.com) – only after you add a Bing API key: your site address and key are sent to read your Bing numbers, and the addresses of your most linked pages to read who links to them. Microsoft privacy statement: https://privacy.microsoft.com/privacystatement
- Telegram Bot API (api.telegram.org) and Bale Bot API (tapi.bale.ai) – only if you add a bot token: the alert text (site name, what happened, your site address) is sent to the chat you choose. Telegram terms: https://telegram.org/tos · privacy: https://telegram.org/privacy · Bale: https://bale.ai/
- Your own webhook (Slack, Discord, Google Chat, Teams) – only if you add one: the same alert text is sent to that address.
- RDAP service (rdap.org) – only if you turn on the domain expiry alert. Once a week your site’s domain name (for example example.com) is sent to read when the domain registration ends. Nothing else is sent. Service by the RDAP.org project, which forwards the request to the registry of your domain: https://about.rdap.org/ · Privacy information: https://about.rdap.org/#privacy
- Competitor sites – only the sites you add in Competitor watch are opened, at most once a day each, like a normal visitor (home page, sitemap and news feed).
- Websites you link to (link checker) – during the broken links check, the plugin opens the addresses that appear in your own posts, with a plain request that sends no personal data, to see if the page still exists. Each site is a different service under its own terms.
- YouTube thumbnails (i.ytimg.com) – only if you turn on the lightweight video embeds switch. Visitors’ browsers load the video’s preview picture from YouTube, and YouTube’s player loads only after a click. Terms: https://www.youtube.com/t/terms · Privacy: https://policies.google.com/privacy
Included libraries
- QR Code Generator for JavaScript by Kazuhiko Arase, MIT license (assets/js/vendor/qrcode.js), used to show the two-step login QR code.
- Fonts under the SIL Open Font License 1.1 (assets/fonts, license files next to them): Vazirmatn by Saber Rastikerdar, Lalezar by Borna Izadpanah, Inter by Rasmus Andersson. Used in the admin screens and the cookie banner, loaded from your own site.
Credits
- Vazirmatn font by Saber Rastikerdar and contributors, SIL Open Font License 1.1 (assets/fonts/OFL-vazirmatn.txt).
- Inter font by Rasmus Andersson, SIL Open Font License 1.1 (assets/fonts/OFL-inter.txt).
Copyright
Stinoment Growth Assistant, Copyright (c) 2026 STINOMENT (https://stinoment.com).
The “STINOMENT” and “Stinoment Growth Assistant” names, brands and logos belong to STINOMENT. Publishing any copy or modified version of this plugin under the STINOMENT name or brand without written permission is prohibited.
Screenshots
No screenshots provided
