Nolimit Security
Protection
Firewall, login protection, country filtering, honeytraps, malware and vulnerability scanning — with no telemetry and no cloud account. The firewall inspects every request against around sixty rules before WordPress decides what to do with it.
- Monitor mode. Records what it would have blocked and blocks nothing. The honest way to put a firewall in front of a shop that is already taking money.
- Content rules skip editors. A post about SQL injection contains SQL injection — the single biggest source of false positives, closed in one place.
- Break-glass. One line in wp-config.php disables every block without touching the database.
Full-page caching, asset optimisation, a Redis object cache and database upkeep. A cache plugin that says what it is doing and what each setting costs.
- Safe by construction. Never a signed-in visitor, never a basket, never a page that did not finish rendering.
- WooCommerce-aware. Basket, checkout and account pages are found from WooCommerce's own settings, not guessed from English slugs — a Danish shop checks out at
/kasse/.
- Every option states its cost , not just its benefit. No JS minification, no concatenation, and the screen explains why.
Nolimit Assistant
Monitoring
Watches for the problems that do not announce themselves — an expired PHP branch, a payment method that quietly stopped being available, a queue that stopped draining, a plugin with a published vulnerability.
- The ordering matters more than the list. Thirty findings with no sense of priority is the same as no plugin at all.
- Around twenty checks across security, performance, maintenance and shop health, matched against published advisories with CVE references.
- The AI is optional and off by default. Everything above works with it switched off.
Nolimit Discounts
WooCommerce
Discounts for named email addresses and customer groups. Create a group, add the addresses that should get the discount, and set the rate — either as a percentage on the whole basket or limited to certain product categories.
- Shipping rules attach to the same groups , so a group can get free delivery without getting a discount on the goods.
- The discount follows the email address on the order , so it works for account holders and guest checkout alike.
- Every change is written to an audit log with user and timestamp.
Nolimit Subscriptions
WooCommerce
Turns any WooCommerce product into a subscription. Customers pick an interval and a discount at checkout, then pause, skip a delivery, change plan or edit what's in it from their account — without writing to you.
- Renewals are real WooCommerce orders with line items, tax, shipping and discounts, so your books and stock stay right.
- Gateway-agnostic and HPOS-compatible.
- Updates through WordPress's own updates screen.
Titles, meta descriptions, canonicals, robots rules, Open Graph, structured data and a sitemap that leaves out the pages you told it to — plus two things most SEO plugins do not do.
- It can write for you. Point it at Nolimit Assistant, or paste a key for your own model, and it drafts titles and descriptions for the pages that have neither. Every draft appears next to the field, never in it, drawn the way a customer will see it in a search result.
- And it tells the search engines. IndexNow needs no account and no quota — one tick box, and Bing, Yandex, Seznam and Naver hear about a page the minute after you publish it.
- It reads back what Google did. Connect a service account and it reports whether Google has actually indexed each page, in Google's own words, instead of guessing.
Saved, named views of the WooCommerce product list — and catalog visibility as a column and a filter, which the product list has never had. On the shop it was built for, 19 of 30 live products were hidden from the catalog, and no screen in wp-admin said so.
- No new labelling layer. Every view is built from fields WordPress and WooCommerce already fill in. A plugin that asks you to tag thirty products before it does anything is a plugin nobody uses twice.
- A column and a filter for visibility. Which of WooCommerce's four states each product is in, shown next to SKU — and a filter for it in the row with category and product type.
- It never writes to a product. It reads status, visibility, categories and tags. Delete it and it takes its saved views with it and nothing else.
A drag-and-drop form builder with nothing kept back for a paid tier. Twenty-two field types, conditional logic, multi-step forms, file uploads, an entry inbox with CSV export, and Turnstile, hCaptcha or reCAPTCHA if you want one.
- Every submission is kept. Not just mailed and forgotten. Entries land in an inbox you can search and export as CSV, so a message that bounced, or went to spam, is still there when you go looking for it.
- The parts normally behind a paywall are here. Fields that appear when an earlier answer calls for them, forms split across steps, and file uploads. There is no pro version to move up to, because there is no pro version.
- Your email goes out through your own account. SMTP through Brevo, SMTP2GO, Mailgun, SendGrid, Postmark, SES, Google Workspace or Microsoft 365 — whichever you already pay for. Nothing is relayed through us.
Nolimit Send
Deliverability
WordPress hands its mail to the web host, and that is the mail that lands in spam or never arrives at all. Nolimit Send routes every message the site produces — orders, receipts, password resets — through SMTP2GO, Brevo, Mailgun, SendGrid, Postmark, Amazon SES, Google, Microsoft, or any SMTP server you type in.
- The fields fill themselves in. Pick a provider and the host, port and encryption are set, with a note under each field saying what that provider actually wants. Brevo wants an SMTP key rather than your password; Google wants an App Password.
- A test message that says what went wrong. Send one from the settings screen and you get the mail server's own answer rather than “could not send”, with the last failure kept and timestamped. What SMTP cannot tell anyone is whether a message was read or bounced — it reports only that the server accepted it.
- It stands down for another mail plugin rather than fighting it. Two plugins both claiming the same hook is how a site ends up sending nothing at all. And since Microsoft 365 is retiring password logins for SMTP, the screen says so — rather than leaving you to find out from a bounce.
A newsletter list is one of the few audiences a shop owns outright, and it usually lives on somebody else's server at a price that rises with how well it works. Nolimit News writes, sends and archives it from inside WordPress: composed in the block editor, sent in batches through whatever the site already uses to send mail.
- Composed in the editor, kept as a page. Start from a template and pull in images from the media library and products from the shop. Each issue is also published as a public archive page, so a newsletter is something you can link to afterwards rather than something that exists only in inboxes.
- Double opt-in — and an honest way to bring an old list over. Sign-up arrives from a block, a shortcode or a Nolimit Forms form, and everyone confirms by email before they are on the list. An import from Mailchimp is the one exception and the screen says so: those people land subscribed but unconfirmed, and a button mails them to ask, rather than inventing a confirmation nobody gave.
- Open counting is off until you switch it on. Switch it on and the count is stored in your own database — which issue, which subscriber, first and last seen — with no IP address, no browser string and no click tracking. Nothing about it is reported to Nolimit, and the rows are covered by WordPress' own export and erase tools.
