WP Manifestindependent plugin directory
manifest / security / kiln-cleanup

Kiln Cleanup

Wordpress cleanup that is affordable and safe for the regular Joe

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/garaged/kiln-cleanup/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

A safety-first, self-hosted WordPress cleanup plugin for site owners who need to remediate large volumes of unwanted accounts without treating a heuristic as permission to destroy data.

Status

M2 — explainable detection and review in progress. The plugin contains no user mutation path.

Product principles

  • local administration only; no relay, telemetry, credential store, ML, or external reputation service;
  • explainable detection rather than opaque bot verdicts;
  • explicit allowlists take precedence over every detector;
  • review and quarantine before permanent deletion;
  • resumable background execution for large jobs;
  • redacted, auditable outcomes;
  • no automatic destructive action from a detection score.

Current capability

Administrators can inspect users through Tools → Kiln Cleanup using a cursor-based page (100 users per page) and an optional exact registration-date filter. M2 adds a deterministic local scoring engine for use by the future review view; it does not change user accounts.

Planned account-cleanup flow

discover → classify → review → quarantine → grace period → permanent deletion

For a large incident, workers will use keyset pagination and compact, idempotent batches rather than OFFSET queries or one background task per account.

Development

composer install
composer test
composer lint

See the M0, M1, and M2 specifications.