Modules

Every SafeHouse feature is a module with its own switch. This page lists all 15 modules, explains the status badges on the settings page, and shows the three ways to switch a module on or off.

All modules

Module	ID	Default	What it does
Security
Hardening	hardening	On	Safer WordPress defaults: no file editor, no username discovery, generic login errors, version hidden, XML-RPC off, security headers
Login limits	login_limits	On	Locks out addresses that guess passwords; pauses attacked accounts for new devices only
Bot protection	bots	Off	Honeypot and Cloudflare Turnstile on login, registration, lost password, comments and checkout
Install lockdown	lockdown	Off	Nobody installs plugins or themes until you unlock for a while; updates keep working
Alerts
Change alerts	watch	On	E-mails you when an administrator, plugin, mu-plugin or drop-in appears, or wp-config.php and key settings change
Plugin health	plugin_health	On	Weekly report of closed, abandoned, unknown-source, forgotten and replaceable plugins
Vulnerability alerts	vulnerabilities	On	Known vulnerabilities in WordPress, plugins and themes, from signed Wordfence Intelligence data
Performance
LiteSpeed page cache	litespeed	Off	Cache headers and purges for the LiteSpeed server cache, without the LiteSpeed Cache plugin
Cloudflare cache	cloudflare	Off	Clears changed pages from Cloudflare's cache after edits
WooCommerce
Omnibus price history	omnibus	On with WooCommerce	The lowest price from the 30 days before a reduction, next to reduced prices
Site tools
SMTP mail	smtp	Off	All mail through your SMTP server, credentials in wp-config.php
Header and footer scripts	scripts	Off	Tracking codes and widgets in <head>, after <body> or before </body>
Duplicate posts and pages	duplicate	Off	A Duplicate link that makes a draft copy
Maintenance mode	maintenance	Off	A "back soon" page with HTTP 503 for visitors; staff see the site
Tweaks	tweaks	Off	Switches for comments, search, emojis, embeds, <head> clean-up, Heartbeat, self-pingbacks and revisions

The Redis object cache is not a module. It has no switch on the settings page and is installed and removed only with wp shouse object-cache.

Module IDs

The ID is the name SafeHouse uses for a module in WP-CLI commands and in SHOUSE_MODULES. Two IDs differ from their WP-CLI command names:

Module	ID	WP-CLI command
Plugin health	plugin_health	wp shouse plugin-health
Login limits	login_limits	wp shouse login

The settings page lists the modules in this order: Hardening, Install lockdown, Change alerts, Plugin health, Tweaks, Duplicate posts and pages, SMTP mail, Header and footer scripts, Maintenance mode, Vulnerability alerts, LiteSpeed page cache, Bot protection, Login limits, Cloudflare cache, Omnibus price history.

What the badges mean

Each module row on SafeHouse → Modules shows one badge.

Badge	Meaning
Running	The module is switched on and works on this site.
Off	The module is switched off.
Unavailable	The module cannot run on this site. The reason is shown under its description, for example "Needs WooCommerce." or "Wordfence is active and already warns about vulnerable plugins, themes and WordPress versions."
Enabled, not running	The module is switched on but stopped. In practice this means safe mode is on.

Two more notes can appear in a module:

• "Pinned by SHOUSE_MODULES in wp-config.php." The switch is locked because wp-config.php forces the module on or off. See Configure in wp-config.
• "Handled by Wordfence, skipped here." next to a single setting. Another plugin or wp-config.php already does that job, so SafeHouse skips it and locks the field. The name changes with the provider, for example "Handled by wp-config.php, skipped here." See Running with Wordfence.

A module's buttons (such as Check now) and its status panel appear in Details only while the module is Running.

Switch a module on or off

In wp-admin:

1. Go to SafeHouse → Modules.
2. Turn the module's switch on or off. Switching a module on opens its settings.
3. Select Save Changes.

With WP-CLI:

wp shouse module enable bots
wp shouse module disable maintenance

In wp-config.php, to force modules on or off on every load:

define( 'SHOUSE_MODULES', [ 'lockdown' => true, 'scripts' => false ] );

A forced module ignores the switch on the settings page. A module that is Unavailable does not run even when it is forced on.

Saving SafeHouse settings in wp-admin or with wp shouse module clears the whole page cache when LiteSpeed page cache or Cloudflare cache runs.

Related pages

• Configure in wp-config
• Command line reference
• Replacing other plugins