A safer WordPress image workflow in five steps.

Cyphex works with native attachments and adds capability checks, review points, and recovery around the tasks that usually waste editorial time.

Step 01

Install and capability check

Install the GPL plugin directly from WordPress.org. On activation, Cyphex runs a server check to detect which local image libraries (GD or Imagick) are active, format support (WebP, AVIF), and if optional API connector extensions are enabled.

Step 02

Search or create asset

Search royalty-free stock proxy pools (Pexels, Pixabay) locally, or type optional prompts to generate unique imagery using your own Groq, Gemini, or OpenAI credentials.

Step 03

Process locally & back up

Set target constraints, scale dimensions, and apply compression. Cyphex creates an original backup index inside your server uploads directory first before writing any changes.

Step 04

Insert & attach safely

Save the image directly to the WordPress Media Library with stable attachment relationships, preserving creator copyrights, dimensions, and theme fallbacks.

Step 05

Continuous Media Audits

Monitor overall site health with the resumable scan, finding broken local media urls, missing accessibility records, and duplicates as you scale.

Data Architecture

Local-first vs. provider data flow.

Cyphex operates on a strict **zero-middleman** privacy model. All core operations take place directly on your server, ensuring full ownership of your data.

Local Processing Flow

Your Host Server: Scans, checks capabilities, resizes images, parses duplicates, and handles WebP sibling creation locally without routing files to external proxy systems.

Optional AI & API Flow

Your Browser/Server ➔ Third-Party API: When generating alt-text or stock images, requests connect directly from your site to the respective endpoint (e.g., Groq, Gemini, Pexels) using your own secret keys. No user or image data is ever routed or saved to a Cyphex licensing portal.

System Capabilities & Permissions

Directory Permissions: The plugin requires standard read/write permissions on the /wp-content/uploads/ directory to manage media files and save original backups.
WordPress User Roles: Access is limited to users with the manage_options or upload_files capability to prevent subscriber access.
API Limits: Rate limiting and transient caches are handled locally on your database to prevent over-consuming external keys.

Backup-First Safety (Rollback)

Any batch toolkit operation that changes an image structure triggers a backup creation. Original images are archived in a secure /uploads/cyphex-backups/ folder, allowing you to restore the master file in a single click from the dashboard ledger if needed.

Free and open source

Take control of your WordPress images.

Install the free plugin, scan your library, and use only the tools your site supports.

Download from WordPress.org See how it works