[04]Plugins / Open tools

Tools I ship because client work keeps asking for them.

Three small plugins, each built to answer one question a real site owner kept asking. All are free, GPL, written the way the core handbook says (sanitized, escaped, capability-checked, nonce-checked) and covered by integration tests against a real WordPress install. All three are in the WordPress.org directory, free to install from your dashboard.

3 live on WordPress.orgCustom plugins from $100

BuildWithHumza Application Password Audit

Sessions, last login and site access

Approved and live on WordPress.org, version 1.0.0, published 26 Sep 2026

66 integration tests, 155 assertions, run against a real WordPress install. Plugin Check clean.

View on WordPress.org

What it does

One screen under Tools that lists every application password, active login session and user account that can reach your site, with unused and stale access flagged and sorted to the top. Revoke a password or sign a user out from the same screen, or export the report as CSV for a handover.

Why it exists

WordPress keeps application passwords on each user's own profile. On a site with twenty users, checking them means opening twenty profiles, and nothing warns you when a password or an administrator account has gone quiet for months.

BuildWithHumza Go Live Check

Find noindex, debug mode and launch mistakes

Approved and live on WordPress.org, version 1.1.0, published 29 Sep 2026

104 integration tests, 354 assertions, run against a real WordPress install. Plugin Check clean.

View on WordPress.org

What it does

Twenty checks for the mistakes that survive a launch: search engines still discouraged, a robots.txt that blocks every crawler, a staging site address, plain http, WP_DEBUG printing to visitors, open registration, guessable usernames, leftover default content and more. It scores the site out of 100, groups findings by area, and gives you a report to copy as text or download as a page that prints to PDF, ready to send to a client. Also appears in Site Health, on the dashboard and in WP-CLI. It reports and never changes anything itself.

Why it exists

A common launch slip is easy to miss. A site built on staging with indexing discouraged goes live, nobody unticks the box, and it asks search engines not to index it. The only sign is a short line in the dashboard's At a Glance box.

BuildWithHumza Broken Link Checker

Find and fix dead links, 404s and broken images

Approved and live on WordPress.org, version 1.0.0, published 1 Oct 2026

461 integration tests, 978 assertions, run against a real WordPress install. Plugin Check clean.

View on WordPress.org

What it does

Reads your published posts and pages, checks every link and image in the background, and lists the dead links, 404 pages, broken images and redirects under Tools. Replace an address in every post at once, remove a link and keep its text, or ignore it, all without opening the post. It reads and fixes links inside Elementor, Beaver Builder, SiteOrigin and block plugins, saves a revision before every change, and only calls a link broken after three failed checks hours apart.

Why it exists

Links stop working without warning: a cited page moves, a recommended plugin closes, a domain expires. A page builder keeps its links in its own data, so they need to be read and fixed where the page is really built, not in the post content.

The first cleared review on 26 September 2026, the second on 29 September 2026 and the third on 1 October 2026. Need a feature one of them lacks, or a plugin of your own? Send a message.

On the bench, not built

Ideas that have come up in client work more than once. None of these exist yet as code, and none has a date. They are listed so the record is honest, not so they look like releases.

  • LeadRoute for WordPress

    Route form submissions to different inboxes by service type, with a submissions log and a daily digest.

  • Vitals Guard

    Track Core Web Vitals from real visitors and flag the templates that fail, inside the WordPress admin.

  • Elementor Ledger Widgets

    The custom Elementor widgets clients ask for most: pricing tables, comparison matrices, numbered ledger lists.

Have a plugin idea of your own?

Custom plugin development is a core service: business logic, integrations, sellable products with licensing and update servers. From $100, scoped in writing.