Skip to content
Arva SEO

A faster WordPress site, one switch at a time.

The free Arva SEO – Speed Booster & Security Scanner plugin fixes the problems Google’s PageSpeed test finds, checks your site for security problems, and connects it to Arva SEO for health checks, drafts and SEO title updates, without sharing a password.

Get the free plugin Start free

The speed fixes and the security scan work without an account. Connecting is free on every plan.

01Speed Booster

PageSpeed fixes you switch on yourself.

Arva SEO → Speed lists each fix with the PageSpeed problem it solves, in the report’s own words. Every fix starts off.

  • Try a fix first: only you see it while you’re signed in, and visitors see the site as before
  • Turning a fix off puts your pages back as they were. Theme files and content are never changed
  • If WP Rocket, LiteSpeed Cache, Perfmatters or FlyingPress already does a job, that fix stays off, so nothing is done twice
  • Leave a page, script or image alone, from a list, a tick box on each post or the toolbar

02The fixes

What it can fix.

Each one answers a problem in Google’s PageSpeed report. Turn on only the ones your site needs. Two have pages of their own: page caching and image compression.

Images and video

  • Show the main image first: the featured image, and on the homepage the image your latest PageSpeed test named
  • Lazy-load images, videos and maps below the first few images
  • Add missing image sizes to media-library images
  • New uploads as WebP, and the images already in your media library converted in the background, keeping the originals
  • Click-to-play YouTube videos: a preview picture, and the player loads when someone presses play

Styles and scripts

  • Load styles faster: the first screen’s styles go straight into the page (critical CSS)
  • Remove unused CSS: each page gets only the styles it uses
  • Defer scripts in the page’s head, leaving jQuery, consent tools and any scripts you choose alone
  • Remove unused WordPress extras you choose: the emoji script, embed discovery, Dashicons for visitors, jQuery Migrate and block styles on pages without blocks

Fonts and third-party code

  • Faster Google Fonts: text shows straight away while fonts load, or the fonts are served from your own site
  • Delay chat widgets, heatmaps and social widgets until the visitor’s first scroll, tap or key press
  • Analytics and consent tools are never delayed unless you list them

Server

  • Page caching: pages saved as ready-made HTML and sent without running WordPress, cleared when they change and refilled in the background
  • Browser caching and compression on Apache and LiteSpeed, as rules in .htaccess
  • Your homepage is checked straight after either goes on, and everything comes out again if it doesn’t answer normally; your .htaccess is backed up first
  • Add the mobile viewport tag, when PageSpeed says it’s missing

Cloudflare

  • Connect Cloudflare with an API token, stored encrypted
  • Cloudflare’s copy of your pages is cleared when a fix goes on or off, so visitors and your next PageSpeed test see the change
  • A post’s pages are cleared when it’s published, updated or unpublished
  • Warns you when Rocket Loader is on, which clashes with Defer scripts

Staying safe

  • Fixes that can change how a site works, like Defer scripts, are tried first and checked on your important pages
  • WooCommerce and Easy Digital Downloads cart, checkout and account pages are left alone by Defer scripts
  • One line in wp-config.php switches every fix off in an emergency
  • Load styles faster and Remove unused CSS use your plan’s WordPress page optimizations (50 a month on Free)

03Security scan

Signs of a hacked site, found early.

Arva SEO → Health scans your site every week and says what each problem means and what to do. It runs on your own server and changes nothing by itself: you can put back official copies of changed files and quarantine code that shouldn’t be there, and undo either for 30 days. More about the security scanner.

  • WordPress and your plugins from WordPress.org, compared with their official copies
  • Code where WordPress never puts it, such as PHP in the uploads folder, and patterns found in hacked websites
  • Private files anyone can download, like .env, debug.log or database backups, and settings that make an attack easier
  • Every Arva SEO audit also looks for signs of a hack on any platform: hidden links to spam, spam pages in Japanese, and visitors from Google sent elsewhere
  • Connected to Arva SEO, known vulnerabilities in your plugins, themes and WordPress, checked every day, with an email when something serious turns up
  • A deep scan on our servers checks your theme and premium plugins for known malware: included on paid plans, and top-ups add more on any plan

04Connected to Arva SEO

Your speed, health and content in one place.

01

PageSpeed results that link to the fix

Arva SEO’s PageSpeed test says which fixes your homepage needs and links straight to each switch. Before-and-after results show what changed.

02

Switch fixes from Arva SEO

Once a WordPress administrator allows it, the people who manage the website in Arva SEO can try, turn on and turn off fixes from its PageSpeed results. Each change is logged with who asked.

03

About 40 WordPress health checks

Updates, HTTPS, scheduled tasks, debugging, caching and search visibility, as findings that say what’s wrong, why it matters, how to fix it and who should do it.

04

Drafts and SEO titles, sent for you

Drafts from Content arrive in WordPress, and the SEO titles and descriptions you approve update in Yoast SEO or Rank Math, never beyond what the site’s administrator allows.

05The connection

What connecting adds.

Free on every Arva SEO plan, including Free. Nothing is shared until a WordPress administrator connects the site.

Connecting

  • A WordPress administrator connects it and approves in Arva SEO, with no Arva SEO password typed into WordPress
  • The administrator sees exactly what’s shared first, and can connect only to receive content
  • Connecting also verifies the website in Arva SEO, with no meta tag or DNS record to add

Website Health

  • The site’s plugins and themes, with their versions and updates, and about 40 WordPress checks
  • Findings that say how to check the fix worked, and how to undo it
  • Mark findings done, dismiss them or reword them for your client
  • In client reports (PDF and CSV), with individual findings left out when you choose
  • Every connected site in one list, with 180 days of history

Sending content

  • Drafts from Content go to WordPress as a draft, for review, scheduled in the site’s time zone, or published
  • Categories, tags, a featured image with alt text, and the post type
  • The site’s administrator sets the limit: Draft only (the default), Editorial review, Scheduling or Full publishing
  • Edits made in WordPress are kept, and you’re told about the conflict

Titles and descriptions

  • SEO titles and meta descriptions from Optimize go into Yoast SEO or Rank Math, many pages at once
  • Only once a WordPress administrator allows it, and each update can be undone
  • New and updated pages are sent to Bing and the other IndexNow search engines, so they recrawl them sooner

Security and privacy

  • Every message from Arva SEO is signed, so forged or replayed requests are rejected
  • Access expires and renews by itself, and stored secrets are encrypted
  • No visitor data, user accounts, emails or passwords are ever sent
  • Disconnecting or uninstalling cleans up after itself

Security findings

  • Installed plugins, themes and WordPress checked every day against a database of published vulnerabilities
  • The security scan’s results too, if an administrator also agrees to share them
  • A notification and an email when something critical or high turns up

06Set up

Faster in three steps.

Needs WordPress 6.5 or later and PHP 8.1 or later.

  1. 1

    Install the plugin

    In WordPress, open Plugins → Add New Plugin, search for Arva SEO, install and activate it.

  2. 2

    Try a fix

    Open Arva SEO → Speed, try a fix, check your pages, then turn it on for visitors.

  3. 3

    Connect it

    Open Arva SEO → Get started, read exactly what’s shared and approve in Arva SEO. The first health check runs within a few minutes.

07FAQ

Questions, answered.

Something else? Ask us.

Is the plugin free?

Yes. The plugin and its speed fixes are free, and connecting works on every Arva SEO plan, including Free. Load styles faster and Remove unused CSS are worked out on Arva SEO’s servers and use your plan’s WordPress page optimizations: 50 a month on Free, more on paid plans.

Do the speed fixes need an Arva SEO account?

No. They work as soon as the plugin is active, except Load styles faster and Remove unused CSS, which need the connection. Connecting also shows which fixes your homepage’s latest PageSpeed test asks for, with before-and-after results.

Can a speed fix break my site?

Most fixes only change attributes on images and links. The few that can affect how a site works, like Defer scripts and Delay chat widgets, can be tried first while only you see them. If something stops working, leave that page, script or image alone, or turn the fix off and your pages go back as they were.

Does it work with WP Rocket, LiteSpeed Cache or Cloudflare?

Yes. If a speed plugin such as WP Rocket, LiteSpeed Cache, Perfmatters or FlyingPress already does a job, that fix stays off and the Speed page points you to that plugin’s setting. With Cloudflare connected, its copy of your pages is cleared whenever a fix changes.

What does the plugin share?

Nothing until a WordPress administrator connects it. Then the plugin list and the health checks, once the administrator agrees on the Get started page, which shows exactly what is shared. The security scan’s results are shared only if the administrator agrees to that too. Untick sharing if you only want to send content.

Does it replace a security plugin?

No. The scan finds known signs of trouble and says what to do, but it isn’t a firewall and doesn’t remove malware. Keep WordPress, plugins and themes updated, keep backups, and use a firewall if your host doesn’t provide one.

Can Arva SEO publish without my approval?

No. In WordPress, Arva SEO → Settings sets the limit: Draft only (the default), Editorial review, Editorial review and scheduling, or Full publishing. Arva SEO never goes beyond it.

Can Arva SEO change my existing pages?

Only their SEO titles and meta descriptions in Yoast SEO or Rank Math, and only after a WordPress administrator ticks Existing content in Arva SEO → Settings. Speed fixes can be switched from Arva SEO only if the administrator ticks Let Arva SEO switch these fixes. Each change can be undone.

Do I type my Arva SEO password into WordPress?

No. You approve the connection in Arva SEO, and WordPress never sees your password.

08Start today

Your first website is free.

Install the plugin, then create an account in a minute to connect it, verify your website and run your first audit. No credit card required.

Start free Get the free plugin