/ Plugin Category

/ Community & Social

/ Membership Sites & Subscriptions

/ Intranet & Private Site – All-In-One Intranet

Intranet & Private Site – All-In-One Intranet

By Syed Balkhi

Community & Social / Membership Sites & Subscriptions

Intranet & Private Site – All-In-One Intranet Review - In-Depth Analysis

Create a private intranet site with ease. Features include auto-logout, login redirects, and multisite privacy controls.

Performance Overview

WPS Score

6.9/10

User Rating

5/5 (based on 11+ reviews)

Active Installations

4,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

5 / 10 (Medium Risk) It is calculated using the weighted average of all versions.

What It Does

WordPress is a popular platform for building corporate intranets and private company websites. However, it was designed for public-facing sites, making it challenging to configure for private use. All-In-One Intranet simplifies this process by providing everything needed in a single plugin.

This plugin allows you to enable privacy with one checkbox, set up auto-logout for security, configure login redirects, and manage multisite access controls all from one settings page. It is perfect for corporate intranets, private knowledge bases, restricted client portals, or internal communications hubs.

With features like one-click private site activation, auto-logout for inactive users, custom login redirects, and multisite sub-site privacy, All-In-One Intranet provides a comprehensive solution for managing access control and privacy on your WordPress site.

Comparing to Alternatives

Intranet & Private Site – All-In-One Intranet offers a comprehensive solution for creating private intranet sites, standing out among popular membership and content restriction plugins.

Top alternatives

Strengths

Comprehensive all-in-one intranet features tailored for private site needs
User-friendly setup for creating restricted access areas
Includes essential tools for internal communication and collaboration

Weaknesses

Lacks advanced membership management features found in specialized plugins
No pro version limits access to premium functionalities
May not integrate as seamlessly with third-party services as some alternatives

User Sentiment Analysis

User feedback highlights the plugin's effectiveness for private intranet setups, though some limitations are noted.

Positive highlights

Easy to configure private areas (User A)
Good for small to medium-sized internal networks (User B)
Reliable access restriction features (User C)

Common complaints

Limited customization options
No premium support or updates
Occasional compatibility issues with other plugins

Weaknesses

Lack of advanced membership features
No dedicated pro version support

Who Should Use This?

Best for

Organizations or teams seeking a straightforward, free solution to create a private intranet or restricted site without complex membership needs.

Not ideal for

Users requiring advanced membership management, extensive customization, or premium support should consider alternative plugins with pro versions.

Pricing & Value

Free version includes

The free version includes all core intranet features necessary to set up a private site with user access control and basic collaboration tools.

Final Verdict

Intranet & Private Site – All-In-One Intranet is a solid choice for users needing a simple, free intranet solution with essential features for private site management.

However, those seeking advanced membership capabilities or premium support may find better options among plugins offering pro versions and more extensive customization.

Other Notable Features

Here are a few other notable features of this free Intranet & Private Site – All-In-One Intranet plugin.

private intranet

access control

multisite privacy

Screenshots

FAQ

Install and activate the plugin, then go to Settings > All-In-One Intranet and check “Force site to be entirely private.” All pages, posts, and custom content types will require login. The REST API and XML-RPC are also locked down automatically.

Yes, but it requires a small amount of code. Use the aioi_allow_public_access filter in your theme’s functions.php file or a custom plugin. For example, to keep a page with the slug “public-info” accessible without login:

add_filter( 'aioi_allow_public_access', function( $allow ) {     if ( is_page( 'public-landing' ) ) {         return true;     }     return $allow; } );

Yes, all five, on a private site, with nothing to configure: ManageWP Worker (the same connector GoDaddy Pro uses), MainWP Child, InfiniteWP Client, WP Umbrella and WP Remote. Their dashboard requests are signed with their own keys instead of relying on a browser login, so site syncing, plugin and theme updates, backups, and the dashboard’s one-click login into wp-admin keep working with “Force site to be entirely private” enabled.

ManageWP, MainWP and InfiniteWP answer their dashboards from their own hooks before the privacy gate runs, so they need no exemption at all. WP Umbrella works through the WordPress REST API and WP Remote routes part of its traffic through admin-ajax.php, both of which a private site closes to unauthenticated callers, so each gets one narrow exemption while its plugin is installed. Neither is a blanket hole: WP Umbrella’s namespace opens only for a request that presents its credentials, and WP Remote’s action only once WP Remote has verified the caller’s signature itself. An anonymous request to either endpoint is still sent to the login wall, and a credentialed one still has to pass the platform’s own checks. The exemption hands the decision to the platform rather than removing it.

Auto-logout understands these requests as well. A dashboard poll is never logged out in the middle of an API call, and it does not count as the connected administrator’s own activity, so it cannot keep a real person signed in past the idle limit you configured.

The parts that cannot work on a private site are the ones that fetch your pages anonymously from the vendor’s servers: uptime monitoring, broken-link checking, and SEO or page-speed scans. Those requests carry no login, so they receive the login redirect and the service will usually report the site as down or its links as broken. Switch those particular monitors off for private sites. There is no way to satisfy them and stay private.