Most sites collect a stack of single-purpose plugins: one for search stats, one for cron, one to switch off XML-RPC, one for a CAPTCHA, one more for store reports. DANGO System Utilities puts the useful parts into one tidy settings screen. Every module starts switched off, so you load only what you use.

Free, complete and private. Nothing here is time-limited, capped or unlocked by a key. The plugin sets no cookies, adds nothing to your pages unless you ask it to, and sends nothing anywhere (the one exception is the optional Cloudflare Turnstile CAPTCHA, with your own keys).

For WooCommerce stores

Order analytics that answer real questions. Revenue, orders in progress, rejection rate, average order value, order statuses and top products for any period.
Channel performance. Orders received against orders actually delivered for every traffic source: Google, Facebook, Instagram, WhatsApp, TikTok and the rest. Paid ads are kept apart from free traffic from the same place, and names read the way you would say them, with WooCommerce’s own value shown underneath.
City performance. Which delivery cities complete their orders and which ones send parcels back.
Weight-based shipping. Price delivery by cart weight in bands you set, for the delivery options you tick.
Checkout tidy-ups. Password rules with presets, international phone number checks, a cart that updates itself, an empty-cart button, terms ticked by default, and auto-completion of virtual and downloadable orders.
Safety nets. An email when an order is moved to the bin, and a “Customer page” link on every order.

Works with High-Performance Order Storage and the older order tables.

Know what your visitors want

Search analytics. Top searches today and over any period, searches that found nothing (missing products you could be selling), and CSV export. Admin-only: no public widgets.
“Check again now” re-runs every zero-result search against your site as it is today, so you can see which gaps you have already filled.
One-click import from Search Meter.

Security and speed, without the guesswork

Security switches. Turn off XML-RPC, the file editor, version fingerprints, pingbacks and application passwords.
Cloudflare Turnstile CAPTCHA on login, registration, lost password and comments.
Performance switches. Throttle Heartbeat, cap post revisions, remove asset query strings, and switch off emoji, oEmbed, jQuery Migrate and Dashicons for visitors.
A recommended-settings checklist on the Overview tab lists what is not in place yet and applies it in one click. Nothing changes until you press the button.
Help on every setting: what it does, the WordPress default, what we recommend and what you give up.

Tools for whoever looks after the site

Diagnostics. Your server, PHP, database and WooCommerce settings checked against recommended values, the biggest autoloaded options, and database table sizes.
Cron manager. See, run, pause and delete scheduled events.
Background jobs. Every scheduled job with its last result, its next run and a “Run now” button.
Housekeeping. Plugin-only data purging, settings backup and one-click clone to another site, maintenance mode, security headers, an email attempt log, failed-login alerts and a plugin and theme inventory export.

The plugin only ever cleans up its own data. It never deletes WordPress, WooCommerce or other plugins’ data.

External services

This plugin does not contact any external service on its own. On a default install, nothing leaves your site.

The only outbound connection it can make is to Cloudflare Turnstile, and only after you enable the CAPTCHA module and save your own API keys. If you never enable CAPTCHA, this plugin makes no external request at all.

Cloudflare Turnstile

What it is and what it is used for: Cloudflare Turnstile is a bot-detection service operated by Cloudflare, Inc. It is used solely to provide the CAPTCHA challenge on the forms you choose to protect. The challenge cannot be performed locally — issuing and verifying it is the service’s entire purpose, and the widget script must be served from Cloudflare’s own domain for the token to be valid.

What is sent and when:

When a page containing a protected form is rendered (login, registration, lost password, or comments — whichever you have enabled), the plugin enqueues the Turnstile widget script from https://challenges.cloudflare.com/turnstile/v0/api.js. Loading that script means the visitor’s browser contacts Cloudflare directly, and Cloudflare receives the visitor’s IP address, browser user agent, and the address of the page containing the form.
When that form is submitted, your server sends a single request to https://challenges.cloudflare.com/turnstile/v0/siteverify containing the Turnstile secret key you entered, the single-use challenge token generated by the visitor’s browser, and the visitor’s IP address. Nothing else is transmitted, and nothing is sent at any other time.

Terms and privacy:

Cloudflare Website Terms of Use: https://www.cloudflare.com/website-terms/
Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/

Want more?

DANGO also offers DANGO System Utilities Pro, a separate plugin installed alongside this one. Nothing in this plugin is locked, limited or held back for it, and everything above keeps working without it. If you add it, it adds:

Store growth: traffic source by city and by device, month-to-date pacing, a tax-year sales summary, abandoned-cart recovery emails, advance payment on cash-on-delivery orders, and order calls for verifying cash-on-delivery orders by phone.
Monitoring: uptime checks with alerts, a broken link scanner, file integrity checks, a slow query log and a live health dashboard.
Security: two-factor login, login lockout, a REST API firewall, Google reCAPTCHA v3 and CAPTCHA on WooCommerce forms, and login and admin activity logs.
Automation and integrations: scheduled cleanup, cache warm-up and email reports, a redirect manager, WebP conversion, and Telegram, Discord, Zapier and Cloudflare cache purge.

Details: https://solutions.dango.pk/software/dango-utilities

DANGO System Utilities

About this plugin