Description
Brambyl detects common indexing issues in WordPress and provides repair tools in the same dashboard.
Free Features:
- Connect Google Search Console via OAuth (secure, read-only)
- Full diagnostic dashboard with health score (0-100)
- 17 automated checks detecting sitemap issues, broken canonicals, indexing gaps, position regression, and more
- Daily monitoring with admin bar health indicator
- Top queries table (clicks, impressions, position, CTR)
- Compatible with major SEO plugins
PRO addon (95 USD/year at brambyl.com):
Repair tools are provided by the separate Brambyl PRO addon — with automatic rollback, IndexNow push to Bing/Yandex/DuckDuckGo, SEO drift detection, weekly email reports, position comparison, and fix history with revert. The addon is purchased and downloaded from https://brambyl.com/.
What makes Brambyl different:
Brambyl detects sitemap issues, broken canonicals, and indexing gaps — and provides repair tools in the same dashboard.
Privacy and Data Usage
Brambyl sends data to third-party services only for the features you use:
- Google APIs (OAuth + Search Console): When you connect, your Google account is used for read-only Search Console API access. Your site’s clicks, impressions, and position data is retrieved from Google and stored in your own WordPress database. Tokens are stored encrypted in your database. Nothing is sent to any server other than Google’s.
- brambyl.com (PRO addon only): If you install the Brambyl PRO addon and enter its license key, the key and your site’s domain are sent to https://brambyl.com/ to validate the license. This happens on license activation and periodic re-checks. The free plugin makes zero calls to brambyl.com. All diagnostics data stays on your WordPress site.
- IndexNow API (PRO addon only): If the PRO addon is active and IndexNow is enabled, your post URLs are sent to api.indexnow.org to notify participating search engines (Bing, Yandex, DuckDuckGo, Seznam, Naver) of new or updated content.
- Data storage: All diagnostics, fixes, and rollback data are stored in your own WordPress database (
wp_brambyl_*tables). We never receive this data.
Installation:
- Upload
brambyl.zipto your WordPress admin (Plugins > Add New > Upload Plugin) - Activate the plugin through the ‘Plugins’ menu in WordPress
- Go to Tools > Brambyl (or the Brambyl menu item)
- Click “Connect Google Search Console” and authorize with your Google account
- The plugin auto-detects your site’s URL and connects to the matching Search Console property — nothing to configure
- Click “Run Scan Now” to see your first diagnostic report
External services
This plugin connects to Google’s APIs to retrieve Search Console data for your site:
-
Google OAuth 2.0 (https://accounts.google.com/o/oauth2/v2/auth + https://oauth2.googleapis.com/token)
Used to authenticate your Google account and obtain read-only access to your Search Console data.
Tokens are stored encrypted in your WordPress database. Google’s Terms of Service: https://policies.google.com/terms and Privacy Policy: https://policies.google.com/privacy apply. -
Google Search Console API (https://www.googleapis.com/webmasters/v3)
Used to retrieve your site’s search analytics (clicks, impressions, position, CTR) and URL inspection results.
No data is sent to Google beyond your authentication tokens. Data is stored in your own WordPress database only.
Google’s Terms of Service: https://policies.google.com/terms and Privacy Policy: https://policies.google.com/privacy apply. -
Google URL Inspection API (https://searchconsole.googleapis.com/v1/urlInspection/index:inspect)
Used to check the indexing status of individual URLs on your site. Google’s Terms of Service: https://policies.google.com/terms and Privacy Policy: https://policies.google.com/privacy apply. -
IndexNow API (https://api.indexnow.org/indexnow) (PRO addon only)
Used to notify Bing, Yandex, DuckDuckGo, Seznam, and Naver when your content is published or updated. No personal data is transmitted. Terms: https://www.indexnow.org/terms-of-service and Privacy: https://www.indexnow.org/privacy-policy apply.
FAQ
-
Does this modify my Google Search Console data?
-
No. The free tier uses read-only Google Search Console API access. PRO fixes modify your WordPress database (your SEO plugin’s database tables, rewrite rules) — never your Google account. Every fix generates a rollback SQL snippet before execution.
-
Is it safe?
-
Every PRO fix:
* Generates rollback SQL before executing
* Stores the rollback in the fix history table
* Shows a confirmation modal with affected row count
* Can be reverted from the Fix History page -
Does it work without an SEO plugin?
-
Yes. Brambyl auto-detects major SEO plugins. For sites without an SEO plugin, WordPress core sitemap support is used. The diagnostic checks that read SEO plugin tables (canonicals, is_public) are skipped when no compatible plugin is detected — the remaining checks still run.
-
What is the sitemap noindex bug?
-
Some SEO plugins emit an
X-Robots-Tag: noindex, followHTTP header on sitemap XML files. Google interprets this as “don’t index these sitemap URLs,” which can prevent your pages from being discovered. This affects sites using those plugins. The free plugin detects it; the Brambyl PRO addon (brambyl.com) repairs it without file editing, survives plugin updates. -
How does IndexNow work?
-
When you publish or update a post, the Brambyl PRO addon automatically sends the URL to the IndexNow API, which notifies Bing, Yandex, DuckDuckGo, Seznam, and Naver. This speeds up indexing of new and modified content without waiting for the search engines to crawl naturally.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“Brambyl” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “Brambyl” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.4.1
- Corrected the Contributors list to match the plugin owner’s WordPress.org username.
- Added escaping annotations on internal table-name interpolations flagged by Plugin Check.
1.4.0
- Added check 18: custom post type listings missing SEO meta (detects DDF/sync-imported inventory shipping with no title/meta — works with major SEO plugins). Fixed SEO plugin detection path (covers multiple plugin directory layouts).
1.4.2
- Fixed collation mismatch in stale-postmeta-canonicals check: postmeta and Yoast indexable tables can use different collations (utf8mb4_unicode_ci vs utf8mb4_unicode_520_ci on migrated sites), causing “Illegal mix of collations” — the query failed silently and reported zero drift. Now uses BINARY comparison (also correct semantically for URLs, where case-only differences are real drift).
1.3.0
- Added 5 new diagnostic checks (17 total): robots.txt CSS/JS asset blocks (critical — Googlebot can’t render blocked pages), doubled canonical tags (critical — conflicting canonical signals), sitemap URL coverage vs published content (critical — stale sitemap caches hide live content from Google), dead sitemap URLs (warning — sitemap entries that don’t return 200), wp-cron.php firewall reachability (critical — bad-UA firewall layers silently killing scheduled tasks).
- All five checks address bug classes found on live WordPress sites, where each caused real indexing loss.
1.2.3
- Moved inline settings-page JavaScript to
assets/js/settings.jsand enqueued viawp_enqueue_script()+wp_localize_script()(Plugin Check inline-script rule). - Guarded
brambyl_detect_seo_plugin()withfunction_exists('is_plugin_active')so the daily monitor can run from WP-Cron without fataling.
1.2.2
- Removed duplicate Author URI (same as Plugin URI) per WordPress.org directory requirement.
1.2.1
- Fixed all Plugin Check (PHPCS) errors: output escaping in dashboard/fix-history templates and OAuth error paths.
- Replaced date() with gmdate() in data-pull date math.
- Added wp_unslash() to superglobal sanitization; switched to wp_safe_redirect().
- Reduced readme tags to 5 per directory limits.
- Query hardening: prepared statements and phpcs annotations on internal table-name interpolations.
- Architecture: PRO features (fix engine, drift detection, IndexNow, email reports, position comparison) moved to the separate Brambyl PRO addon, distributed from brambyl.com. The free plugin now ships complete, unrestricted diagnostics. Existing PRO license keys activate in the addon’s license field.
1.1.1
- Updated PRO checkout links (95 USD/year single site, 225 USD/year 5 sites).
1.1.0
- NEW check: canonical-redirect loop — detects indexable canonicals pointing at URLs that redirect back to the page (slug-rename drift) or at dead URLs (404/410 canonical dead-ends)
- NEW check: stale postmeta canonicals — catches postmeta vs SEO-indexable canonical disagreement (the two-table drift that causes “Page with redirect” in the Search Console report and silent sitemap exclusion)
- NEW check: crawler IP block — detects firewall/country-block plugins serving 403 to search-engine crawlers (site-wide 403 with text/plain body)
- NEW fix: canonical-redirect loop repair (canonical permalink, syncs postmeta, rollback recorded)
- NEW fix: stale postmeta canonical alignment
- All HTTP probes now send a browser User-Agent (server-side self-fetches with the default WP UA get 403’d by ModSecurity on many hosts)
1.0.0
- Initial release
- Google Search Console OAuth connection
- 12 diagnostic checks (sitemap noindex, null/relative/stale canonicals, is_public, is_robots_noindex, missing meta, robots.txt, schema, sitemap status, indexing, position regression)
- Health score (0-100)
- Daily monitoring with admin bar indicator
- PRO: repair tools with rollback
- PRO: IndexNow push
- PRO: SEO drift detection
- PRO: weekly email reports
- PRO: position comparison
- SEO plugin compatibility
