Elpadoro Apex is live on WordPress.org — free forever
WordPress Performance & Security Infrastructure

WordPress that runs
at the speed of hardware not at the speed of PHP

Two plugins. One philosophy. Static cache that serves HTML before WordPress loads, and a security layer that governs every execution surface.

< 5ms TTFB on cache hit
105× under bootstrap budget
0 DB queries on HIT
99 PageSpeed mobile
The Infrastructure

Two tools.
One cohesive platform.

Built from scratch. No legacy code. No compromises on the critical path.

🛡
Aegis
● Free PRO

Runtime REST API protection. Governs every execution surface — routes, authentication, sessions — before WordPress executes a single line.

  • 12-step fail-fast REST gate
  • 30+ known plugin bypass list
  • Custom login URL + PIN protection
  • Three-layer honeypot anti-spam engine
  • IP whitelist / blacklist with CIDR support
  • Bad bot detection (20+ known scanners)
  • User enumeration block
  • Structured activity log
Measured. Verified. Reproducible.

Numbers that matter

19µs
Bootstrap decision time
Budget: 2,000µs · 105× under
<5ms
TTFB — Nginx static serve
PHP never invoked on HIT
99
PageSpeed mobile score
Real-world test, Apache hosting
0
DB queries on cache HIT
Zero WordPress load
Architecture

The fastest request
is the one WordPress never sees

01 — REQUEST
Nginx intercepts

The web server checks for a cached HTML file directly on disk. PHP is never invoked. WordPress never loads.

try_files $apex_cache @wordpress;
→ page.html.br served directly
02 — MISS
Bootstrap decides in 19µs

On a MISS, the ultra-lightweight bootstrap evaluates bypass conditions and generates the cache key — zero DB queries, zero WP load.

BYPASS detection: 0.5µs
Key generation: 13µs
Total decision: 19µs
03 — WRITE
Async cache write

WordPress renders once. The response is sent to the user first. Cache is written asynchronously — the user never waits for disk I/O.

send response → shutdown
→ atomic write (tmp→rename)
→ Brotli + Gzip variants
Elpadoro Aegis

Security at the
execution layer

Aegis governs REST API access before WordPress executes. A 12-step fail-fast gate — the first rule that fires wins.

  • REST gate fires at rest_authentication_errors @99
  • IP blacklist checked before any route logic
  • Per-plugin bypass — WooCommerce, Elementor, CF7
  • Ghost login URL — /wp-login.php returns 404
  • Behavior scoring + adaptive tarpit (PRO)
  • Route intelligence classifier (PRO)
  • Three-layer honeypot: timing, behavior, field
  • Zero performance impact on allowed requests
Coming to WordPress.org
ACTIVITY LOG — LIVE
12:04:22 BLOCKED /wp/v2/users — enumeration
12:04:21 ALLOWED /wc/v3/products — plugin bypass
12:04:19 BLOCKED sqlmap/1.7 — bad bot
12:04:18 RATE LIMIT 192.168.1.x — 60 req/min
12:04:15 ALLOWED /wp/v2/posts — role: editor
12:04:12 BLOCKED Host mismatch — cache poison attempt
Comparison

How Apex compares

Feature Elpadoro Apex WP Rocket W3 Total Cache LiteSpeed Cache
Static HTML served by Nginx (no PHP)
Bootstrap decision time 19µs ~80ms ~120ms ~40ms
Tag-based surgical invalidation
Speculation Rules API
Brotli pre-compression at write time
Server agnostic (Nginx, Apache, OLS)
Environment detection + guided fix
Free, no artificial limitations
Pricing

Start free.
Scale when you're ready.

BASIC is production-ready with no artificial limitations. PRO adds Redis, edge CDN, and enterprise features.

Apex
Basic

Full static cache engine, no limitations, free forever.

$0/yr
Free forever · WordPress.org
  • Static HTML cache engine
  • Tag-based invalidation
  • Nginx + Apache auto-config
  • Brotli pre-compression
  • Smart preload engine
  • WP-CLI command set
  • Environment diagnostics
Download Free →
Coming Soon
Aegis
Core + Pro

REST API protection, login security, and intelligent threat response.

$39/yr
Per site · PRO tier
  • 12-step REST gate (free)
  • Ghost login URL (free)
  • Honeypot anti-spam (free)
  • Behavior scoring engine
  • Route intelligence (PRO)
  • Adaptive brute-force defense
  • Adaptive tarpit