Security

Two per-site tools: Site Lock, which puts a password in front of the whole site, and the debug log.

Site Lock

A password prompt on every page of a site, for staging sites and sites under maintenance. It is a small must-use plugin the app installs into wp-content/mu-plugins; nothing to activate in wp-admin, and removing it takes the site public again.

• Install and turn on protection — installs the plugin and sets the password you type. The password is stored hashed, on the server, alongside the plugin.
• Lock / Unlock — turn it on and off without reinstalling.
• Remove — deletes the plugin.

Visitors who know the password get a cookie and are not asked again for a while. Anyone else — including search engines — sees only the prompt.

Debug log

Reads WP_DEBUG, WP_DEBUG_LOG and WP_DEBUG_DISPLAY from the site's wp-config.php, and lets you turn logging on or off. When it is on, the log file (wp-content/debug.log) is shown here, with the newest lines first, and can be emptied.