/ Plugin Category

/ Community & Social

/ Membership Sites & Subscriptions

/ Intranet & Private Site – All-In-One Intranet

Intranet & Private Site – All-In-One Intranet

By Syed Balkhi

Community & Social / Membership Sites & Subscriptions

Reviewed by Abdul Hameid

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Intranet & Private Site – All-In-One Intranet Review - In-Depth Analysis

Create a private intranet site with ease. Features include auto-logout, login redirects, and multisite privacy controls.

Performance Overview

WPS Score

6.86/10

User Rating

5/5 (based on 11+ reviews)

Active Installations

3,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

WordPress is a popular platform for building corporate intranets and private company websites. However, it was designed for public-facing sites, making it challenging to configure for private use. All-In-One Intranet simplifies this process by providing everything needed in a single plugin.

This plugin allows you to enable privacy with one checkbox, set up auto-logout for security, configure login redirects, and manage multisite access controls all from one settings page. It is perfect for corporate intranets, private knowledge bases, restricted client portals, or internal communications hubs.

With features like one-click private site activation, auto-logout for inactive users, custom login redirects, and multisite sub-site privacy, All-In-One Intranet provides a comprehensive solution for managing access control and privacy on your WordPress site.

Comparing to Alternatives

This plugin competes with several membership and content restriction plugins, offering a focused solution for intranet and private site needs.

Top alternatives

Strengths

Simple and quick setup with minimal configuration.
Highly rated with consistent 5-star reviews.
Regular updates and responsive developer support.
Effective for creating private intranet sites.
Free to use with no paid version required.

Weaknesses

Limited visibility on front-end appearance and customization options.
Has a known medium severity security vulnerability fixed in recent update.
No clearly promoted premium features or advanced options.
Less suited for complex membership management compared to some alternatives.

User Sentiment Analysis

Users overwhelmingly rate this plugin 5 stars, praising its simplicity and effectiveness, with no negative reviews reported.

Positive highlights

"Works as expected!" – jfreake
"Excellent plugin that does the job." – sg2211
"Simple and effective. 3 crucial settings and it's done!" – karendean
"Outstanding customer support and perfect for members-only training sites." – helpubuy
"Great plugin, regularly updated and set it and forget it." – surnet

Common complaints

Weaknesses

Lack of clarity on how the site looks after setup.
Limited documentation or demos for visual guidance.
Known security vulnerability prior to version 1.9.0.

Who Should Use This?

Best for

Users seeking a straightforward, no-fuss plugin to quickly set up private intranet or membership sites without complex features.

Not ideal for

Those needing extensive customization, advanced membership management, or who require detailed visual previews and demos before installation.

Pricing & Value

Free version includes

The free version offers all core features needed to create private intranet sites with simple configuration.

Final Verdict

Intranet & Private Site – All-In-One Intranet is a highly rated plugin praised for its simplicity, effectiveness, and responsive support. It is ideal for users who want a quick and easy way to create private intranet sites without the complexity of larger membership plugins. The free offering is robust, making it accessible to a wide range of users.

However, potential users should be aware of a past medium severity security vulnerability that has been fixed and the lack of detailed visual previews or demos. Those needing advanced customization or comprehensive membership features may find better options among the listed alternatives.

Other Notable Features

Here are a few other notable features of this free Intranet & Private Site – All-In-One Intranet plugin.

private intranet

access control

multisite privacy

Screenshots

FAQ

Install and activate the plugin, then go to Settings > All-In-One Intranet and check “Force site to be entirely private.” All pages, posts, and custom content types will require login. The REST API and XML-RPC are also locked down automatically.

Yes, but it requires a small amount of code. Use the aioi_allow_public_access filter in your theme’s functions.php file or a custom plugin. For example, to keep a page with the slug “public-info” accessible without login:

add_filter( 'aioi_allow_public_access', function( $allow ) {     if ( is_page( 'public-landing' ) ) {         return true;     }     return $allow; } );

Yes, all five, on a private site, with nothing to configure: ManageWP Worker (the same connector GoDaddy Pro uses), MainWP Child, InfiniteWP Client, WP Umbrella and WP Remote. Their dashboard requests are signed with their own keys instead of relying on a browser login, so site syncing, plugin and theme updates, backups, and the dashboard’s one-click login into wp-admin keep working with “Force site to be entirely private” enabled.

ManageWP, MainWP and InfiniteWP answer their dashboards from their own hooks before the privacy gate runs, so they need no exemption at all. WP Umbrella works through the WordPress REST API and WP Remote routes part of its traffic through admin-ajax.php, both of which a private site closes to unauthenticated callers, so each gets one narrow exemption while its plugin is installed. Neither is a blanket hole: WP Umbrella’s namespace opens only for a request that presents its credentials, and WP Remote’s action only once WP Remote has verified the caller’s signature itself. An anonymous request to either endpoint is still sent to the login wall, and a credentialed one still has to pass the platform’s own checks. The exemption hands the decision to the platform rather than removing it.

Auto-logout understands these requests as well. A dashboard poll is never logged out in the middle of an API call, and it does not count as the connected administrator’s own activity, so it cannot keep a real person signed in past the idle limit you configured.

The parts that cannot work on a private site are the ones that fetch your pages anonymously from the vendor’s servers: uptime monitoring, broken-link checking, and SEO or page-speed scans. Those requests carry no login, so they receive the login redirect and the service will usually report the site as down or its links as broken. Switch those particular monitors off for private sites. There is no way to satisfy them and stay private.