About PerfLocale

A multilingual plugin built from scratch with care for performance, security, and WordPress standards.

Why PerfLocale exists

Multilingual WordPress sites shouldn't have to choose between features and speed. PerfLocale was built from the ground up to handle translation without adding unnecessary weight to your pages.

Every architectural decision is guided by three principles: keep it fast, keep it safe, and do it the WordPress way. No third-party PHP libraries.

Keep it fast
3-layer cache · a small slice of page time
Keep it safe
Zero third-party libs · WCAG & GDPR aligned
The WordPress way
Hooks, filters & core APIs

Thoughtful performance

PerfLocale uses a 3-layer caching architecture that serves most operations from memory. Batch preloading prevents repeated database queries. Hooks and filters are registered conditionally - if a feature isn't needed on a page, its code doesn't run.

Internal benchmarks show the plugin’s own code is a small fraction of total page time — across single-site and multisite, with and without a persistent object cache. Sites over ~2,000 translation links need a persistent object cache such as Redis to stay fast. Real-world page speed depends mostly on your theme, hosting, and other plugins.

Performance-first by design
3 cache layers
A static per-request cache, the object cache, and transients — so repeated lookups on a page cost nothing after the first. PerfLocale’s own callback time stays a small fraction of total page time; what a visitor actually experiences depends on your theme, hosting and other plugins.
  • 3-layer cache
    In-memory → Redis/Memcached → database
  • Batch preloading
    One query for the whole list, never N+1
  • Conditional hooks
    Loaded only when a feature is actually used

Security as a foundation

Security is built into every layer of PerfLocale, not added as an afterthought. We follow WordPress security best practices throughout:

  • All database operations are protected against injection attacks
  • All output is sanitized to prevent cross-site scripting
  • All form submissions and API requests are verified for authenticity
  • All actions are permission-checked so users can only do what they're allowed to
  • Every outbound URL is checked before the request goes out — loopback, link-local, private-range and cloud-metadata destinations are rejected, and redirects are never followed. Use HTTPS for endpoints you configure yourself (LibreTranslate, a custom agency endpoint, webhooks); PerfLocale does not force the scheme
Security guarantees
  • Tamper-proof database
    Queries are parameterized.
  • Safe page output
    User content is escaped before display.
  • Verified form submissions
    Forms use single-use tokens.
  • Permission-aware actions
    Admin actions check the user’s role.
  • Trusted external calls
    Outbound URLs are SSRF-checked; private ranges rejected.

Built for developers

PerfLocale provides 200+ action and filter hooks, a full REST API, WP-CLI commands, and a clean addon architecture. Extending or customizing PerfLocale should feel natural to any WordPress developer.

The addon system auto-detects compatible plugins and themes — if a host plugin is active, the matching integration switches itself on. Need something custom? Implement AddonInterface, register on a single action hook, and you have a first-class addon. The developer docs cover the full lifecycle including schema, migrations, and uninstall.

use PerfLocale\Addon\AddonInterface;use PerfLocale\Plugin;class AcmeAddon implements AddonInterface {    public function boot( Plugin $plugin ): void {        add_filter(            'perflocale/translatable_meta_keys',            [ $this, 'register_meta' ]        );    }}// Auto-detected by PerfLocale on activation.add_action( 'perflocale/addons/register',    fn( $r ) => $r->register( new AcmeAddon() ));
200+ hooks REST API WP-CLI AddonInterface

Free and open source

PerfLocale is licensed under GPL-2.0+ — the same license as WordPress itself. You can use it on as many sites as you want, run it commercially, study the source, modify it for your own needs, and redistribute your changes. The four classic GPL freedoms apply, in full.

The source code is available on WordPress.org. Contributions, bug reports, feature requests, and translations into your language are always welcome.

❤

Try PerfLocale Today

Free, open source, and built the WordPress way. Install PerfLocale and start translating in minutes.

Download Free from WordPress.org