Complete SSL Security Management for WordPress Glimbyte SSL Guardian is a comprehensive yet simple SSL management plugin for WordPress. Set up HTTPS security in just 5 minutes and protect your visitors with automatic SSL certificate monitoring, mixed content fixing, and HSTS security headers. Ideal
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 5.0 and PHP 7.4.
SourceWordPress plugins · Oct 20, 2026
01 / Source details
About this tool.
Complete SSL Security Management for WordPress
Glimbyte SSL Guardian is a comprehensive yet simple SSL management plugin for WordPress. Set up HTTPS security in just 5 minutes and protect your visitors with automatic SSL certificate monitoring, mixed content fixing, and HSTS security headers.
Ideal for:
WordPress site owners migrating to HTTPS
Developers managing multiple client sites
E-commerce stores requiring SSL compliance
Anyone who wants secure SSL management
Key Features
HTTPS Enforcement
One-click HTTPS redirect (301/302/307)
Force HTTPS across entire site
URL exclusion patterns (for specific pages)
Proxy/CDN compatible (CloudFlare, AWS, etc.)
Works with subdirectory installations
Mixed Content Detection & Fix
Real-time automatic fixing via output buffer
Comprehensive database scanner (posts, pages, custom post types)
🎯 Simple Yet Powerful Unlike complex SSL plugins with hundreds of settings, Glimbyte SSL Guardian gives you exactly what you need with a clean, intuitive interface. Most users complete setup in under 5 minutes.
⚡ Performance Optimized
Transient caching for certificate checks (24 hours)
Conditional asset loading (only on admin pages)
No database queries on frontend
AJAX for long operations
Minimal memory footprint
🔐 Security First
WordPress coding standards compliant
All functions properly prefixed
Settings API used throughout
Nonces on all forms
Capability checks everywhere
Input sanitization & output escaping
No eval() or create_function()
ABSPATH checks in all files
📱 Works Everywhere
Compatible with all hosting environments
Works with CloudFlare, AWS CloudFront, other CDNs
Supports reverse proxies and load balancers
Subdirectory installation compatible
Multisite network ready
🌍 Translation Ready
Text domain: glimbyte-ssl-guardian
All strings translatable
Ready for localization
Perfect For These Use Cases
Migrating to HTTPS Moving from HTTP to HTTPS? Glimbyte SSL Guardian handles everything: 1. Enable HTTPS redirect 2. Scan and fix mixed content 3. Enable HSTS 4. Done!
E-commerce Sites WooCommerce, Easy Digital Downloads, and other e-commerce plugins require SSL. Glimbyte SSL Guardian ensures:
All pages load securely
No mixed content warnings
Certificate never expires (with alerts)
HSTS for extra security
Client Sites & Agencies Managing SSL for multiple clients? Features you’ll love:
Quick dashboard overview
Automatic expiry alerts
Remote monitoring capability
Professional support system
Multisite support
Developers Clean, well-documented code that’s easy to extend:
WordPress coding standards
Action and filter hooks
Modular class structure
No deprecated functions
What Users Say
⭐⭐⭐⭐⭐ “Finally, an SSL plugin that just works!” ⭐⭐⭐⭐⭐ “Saved me hours of manual work fixing mixed content” ⭐⭐⭐⭐⭐ “The certificate monitoring gives me peace of mind”
Support & Documentation
Need Help?
Use built-in support form: SSL Guardian > Dashboard
Hooks & Filters: Full documentation in plugin files
About Glimbyte
Glimbyte SSL Guardian is developed by Glimbyte Ltd, a Dublin-based web development company specializing in WordPress security, e-commerce, and custom development.
Our Services:
SSL Certificate Installation
WordPress Security Audits
Site Migration & HTTPS Setup
WooCommerce Development
Custom Plugin Development
Priority Plugin Support
Visit https://glimbyte.ie for more information.
External Services
This plugin connects to an external API service operated by Glimbyte when you use the built-in support request form.
Service Details:
Service Provider: Glimbyte (https://glimbyte.ie)
Service URL: https://glimbyte.ie/wp-json/glimbyte/v1/support-request
Purpose: To process and deliver support requests from users to the Glimbyte support team
When Used: Only when you manually submit the support form via the plugin’s Support tab
Data Transmitted:
When you submit a support request, the following data is sent to this API endpoint:
Your name (as provided in the form)
Your email address (as provided in the form)
Your phone number (optional, if provided)
Your message/support request
Your website URL
WordPress version
PHP version
SSL certificate status
Active/inactive SSL features
Important Notes:
This service is ONLY used when you explicitly click “Submit” on the support form
No data is sent automatically or during normal plugin operation
You must explicitly check the consent checkbox before submission
The data is transmitted over HTTPS for security
Service Terms & Privacy:
Terms of Service: https://glimbyte.ie/terms
Privacy Policy: https://glimbyte.ie/privacy
By using the support form, you consent to sending this data to Glimbyte for the purpose of receiving technical support for the plugin.
Privacy Policy
Glimbyte SSL Guardian stores all settings locally in your WordPress database and does not collect or transmit any user data during normal operation.
Support Form Data Transmission:
When you use the built-in support form, the following data is sent to support@glimbyte.ie:
Your name, email, phone (if provided), and message
Your website URL
WordPress version
PHP version
SSL certificate status
This data is used solely for providing support and is not shared with third parties.
Credits
Developed with ❤️ by Ardit Caushi and the Glimbyte team in Dublin, Ireland.
Icons by WordPress Dashicons.
1.0.2
Fixed: Translators comment positioning for better i18n compliance
Note: “Global variable” warnings are false positives (template variables, not globals)
Note: Other warnings are acceptable WordPress patterns
1.0.3
Fixed: Added phpcs:ignore comments for template variables to pass Plugin Check
Note: Template variables in view files are not actual globals – this is standard WordPress practice
Improved: Code standards compliance for WordPress.org submission
1.0.4
Fixed: Corrected phpcs:ignore placement in certificate.php for remaining template variables
All Plugin Check errors resolved (0 errors)
Ready for WordPress.org submission
1.0.5
Fixed: phpcs:disable comment placement in certificate.php (moved to same line as opening PHP tag)
Improved: Added phpcs:ignore directive for multisite uninstall database query
Code quality: Addressed all Plugin Check warnings with proper documentation
1.1.1
Fixed: Complete renaming – all SecureWP references replaced with Glimbyte SSL Guardian
Fixed: Navigation tabs now use correct page slug (glimbyte-ssl-guardian)
Fixed: AJAX actions renamed from securewp_ssl_* to glimbyte_ssl_*
Fixed: CSS classes and JavaScript selectors updated for consistency
Fixed: Multisite network admin menu slug updated
Fixed: Email subject and X-Mailer header updated to new branding
1.1.0
MAJOR UPDATE: Plugin renamed from “SecureWP SSL Manager” to “Glimbyte SSL Guardian”
Changed slug from securewp-ssl-manager to glimbyte-ssl-guardian
Fixed: All inline scripts/styles now properly enqueued per WordPress.org guidelines
Fixed: Added explicit buffer closing for ob_start() in mixed content handler
Fixed: Removed marketing superlatives from description (most comprehensive, perfect, bulletproof)
Fixed: Updated privacy policy to accurately reflect support form data transmission
Fixed: Plugin URI now points to valid URL (https://glimbyte.ie)
Improved: All function/class/constant names updated to new prefix
Note: Existing settings will be preserved – no reconfiguration needed
See it in action
Screenshots & previews.
Dashboard overview showing SSL certificate status, quick statistics for HTTPS redirect, mixed content fix, and HSTS status, plus certificate information including issuer, expiry date, and days remaining.HTTPS Settings page with one-click redirect activation, redirect type selection (301/302/307), URL exclusion patterns, and force HTTPS options for complete site security.Mixed Content scanner displaying detected HTTP resources on HTTPS pages, with detailed breakdown by type (images, scripts, stylesheets) and one-click Fix All button for automatic database updates.SSL Certificate Monitor showing detailed certificate information, expiry countdown, email alert configuration with customizable thresholds, and test email functionality.HSTS configuration page with security warnings, max-age options (1 month to 2 years), includeSubDomains setting, and preload list preparation for maximum HTTPS enforcement.Built-in professional support form on dashboard allowing users to request SSL assistance with automatic system information collection, GDPR-compliant consent, and direct email to Glimbyte support team.Debug and logging interface showing recent plugin activity, with options to view detailed logs, clear all entries, and export logs as text file for troubleshooting.
02 / Source details
Getting started.
Automatic Installation (Recommended)
01Go to Plugins > Add New in WordPress admin
02Search for “Glimbyte SSL Guardian”
03Click “Install Now”
04Click “Activate”
05Go to SSL Guardian in admin menu
06Enable HTTPS redirect
07Scan for mixed content (if needed)
08Done!
Manual Installation
09Download the plugin ZIP file
10Go to Plugins > Add New > Upload Plugin
11Choose the ZIP file and click “Install Now”
12Click “Activate Plugin”
13Go to SSL Guardian in admin menu
14Configure your SSL settings
Via FTP
15Download and unzip the plugin file
16Upload the glimbyte-ssl-guardian folder to /wp-content/plugins/
17Activate the plugin through WordPress admin
18Go to SSL Guardian in admin menu
Getting Started
Step 1: Install SSL Certificate Before using this plugin, ensure your hosting provider has installed an SSL certificate. Most hosts offer free Let’s Encrypt certificates.
Step 2: Enable HTTPS Redirect 1. Go to SSL Guardian > Dashboard 2. Click “Enable HTTPS Redirect” 3. Your site now forces HTTPS!
Step 3: Fix Mixed Content 1. Go to SSL Guardian > Mixed Content 2. Click “Scan Content” 3. If issues found, click “Fix All Issues in Database” 4. Done!
Step 4: Enable HSTS (Optional) 1. Go to SSL Guardian > HSTS 2. Read the warning (HSTS is permanent!) 3. Enable HSTS 4. Choose max-age (recommend 6 months to start) 5. Save settings
Step 5: Configure Alerts (Optional) 1. Go to SSL Guardian > Certificate Monitor 2. Enable expiry alerts 3. Set alert days (default: 30, 14, 7) 4. Enter your email 5. Click “Send Test Email” to verify 6. Save settings
03 / Source details
Frequently asked questions.
Do I need an SSL certificate first?
Yes! This plugin manages SSL after your certificate is installed. Contact your hosting provider for free SSL certificate installation (most offer free Let’s Encrypt certificates).
Will this plugin install an SSL certificate?
No. This plugin manages existing SSL certificates. You need to install an SSL certificate through your hosting provider first.
What is mixed content?
Mixed content occurs when an HTTPS page loads resources (images, scripts, etc.) over HTTP. This triggers browser warnings and security issues. Our plugin automatically detects and fixes these issues.
Is HSTS safe to enable?
HSTS (HTTP Strict Transport Security) is very safe BUT permanent for the duration you set. Start with 6 months (recommended). Once enabled and visited, browsers will ONLY load your site over HTTPS for that duration. Make sure your SSL works perfectly before enabling HSTS.
Does this work with CloudFlare?
Yes! The plugin automatically detects CloudFlare and other CDNs/proxies using X-Forwarded-Proto headers.
Does this work with WooCommerce?
Absolutely! Many e-commerce sites use this plugin to ensure all checkout pages are secure and free of mixed content.
Will this slow down my site?
No! The plugin is highly optimized: – Certificate checks cached for 24 hours – No database queries on frontend – Assets only load on admin pages – Minimal memory usage
Does it work with WordPress Multisite?
Yes! Full multisite support with network admin menu, network-wide settings, and per-site overrides.
Can I exclude specific URLs from HTTPS redirect?
Yes! Go to HTTPS Settings and add URL patterns to the exclusion list. Supports wildcards.
What happens if my SSL certificate expires?
If expiry alerts are enabled, you’ll receive emails at your configured thresholds (default: 30, 14, and 7 days before expiry). This gives you plenty of time to renew.
How do I get support?
Use the built-in support form at SSL Guardian > Dashboard > Get Professional Help. You can also email support@glimbyte.ie directly.
Is this compatible with other SSL plugins?
We recommend using only one SSL management plugin at a time to avoid conflicts. Deactivate other SSL plugins before activating Glimbyte SSL Guardian.
Does it support PHP 8?
Yes! Fully compatible with PHP 7.4, 8.0, 8.1, and 8.2.
Can I use this on a localhost/development site?
The HTTPS redirect and mixed content features require a valid SSL certificate. Certificate monitoring won’t work on localhost. For development, you can disable HTTPS enforcement.
How do I uninstall the plugin?
Simply deactivate and delete the plugin through WordPress admin. All plugin settings and data will be removed automatically.
Website LLMs.txt and LLMs-Full.txt Generator is an LLMs.txt generator and llms-full.txt generator for WordPress. It helps site owners generate, manage, preview, validate, and serve AI discovery files from published public content. Use it to create structured /llms.txt and optional /llms-full.txt end
EngageDock AI is a customizable floating contact widget for WordPress websites that want more leads and faster visitor communication. It helps small businesses turn website traffic into calls, texts, emails, and callback requests from one clean contact panel. Key Features: Click-to-Call – One tap ca
Altify AI is an auto ALT text and AI ALT text plugin for WordPress images. It helps generate descriptive image ALT text for accessibility and image SEO. Use bulk image ALT text tools for your Media Library, generate featured image ALT text automatically, and scale WooCommerce image ALT updates with
The Accepted Payment Methods plugin is a straightforward, lightweight solution that enhances your website by displaying visually appealing icons of the payment methods you accept. This plugin is ideal for a variety of websites, including e-commerce platforms, service-oriented websites, and informati
