Turn selected WordPress configuration observations into a clear next-step brief and dated client report.
Install
Back up and use a staging site first. Requires single-site WordPress 6.8+ and PHP 8.2+. In Plugins → Add New → Upload Plugin, choose the original ZIP, install and activate. Open Security Brief. Each AgenticEcom plugin is standalone; you do not need to install the others.
First useful steps
Open Security Brief and run a fresh assessment.
Read each observation’s evidence, limitations and next step. A not-verified area requires a separate check.
Add a local next-step note where helpful. A note never changes the observation status.
Set the business/prepared-by/contact details under Report details.
Open Client report and print or save as PDF in your browser. Review its scope and private information before sharing.
Use Assessment history to open an exact prior snapshot. Only the latest 12 are retained. Clearing history is separate from deleting branding.
Optional: connect your purchase under Updates & support for eligible updates. The installed features work without a key.
What this release covers
- 14 bounded configuration observations, with evidence and a practical next step.
- Needs attention, review, not verified and no issue observed are separate states. There is no safety score.
- Keep the latest 12 dated snapshots and compare actual status changes.
- Save local next-step notes, personalise report details, print/save PDF and export JSON. Historical reports retain the notes saved with their snapshot.
Administrator access (manage_options) is required. This is a limited configuration review, not a security certificate, malware scanner, firewall, penetration test or vulnerability-feed service. Backup restore, account-level 2FA and malware/vulnerability coverage are not independently verified. No automatic setting changes are made. Core/plugin/theme update observations use WordPress’s cached metadata. Reverse proxies and hosting policies can require human interpretation. PHP support guidance was checked on 23 October 2026 and becomes not verified after 90 days without a guidance update. History is local and is not tamper-evident. No scheduled scans or email alerts. English interface. Multisite network activation is not supported.
Data and removal
Assessment history (latest 12), evidence, site address, runtime versions, notes and report contacts stay in your WordPress database. Exports and reports may contain private configuration details. No scan fleet, vulnerability API or analytics is contacted. Optional purchase connection sends only your key, product identifier and site address to AgenticEcom over HTTPS for update access. Deactivation keeps data; deleting the plugin removes its own history, notes, branding, purchase connection and cached entitlement check.
Purchase, downloads and updates
The purchase includes the stated number of site entitlements for updates/support for 12 months. It is a one-time charge with no automatic renewal. The GPL software licence is separate from paid updates/support; installed features continue without a key or after the term. Optional renewal is by written quote. Do not share purchase keys publicly.
Save the private JSON purchase access file after checkout. At https://agenticecom.net/wordpress-downloads, paste its key or upload the file. Download eligible ZIPs, refresh links (valid for five minutes), or release an old connected site. There is no automatic email recovery; if you lose all private access details, contact support with your Paddle receipt for ownership verification.
Under Updates & support, connecting sends your key, this plugin identifier and site URL to AgenticEcom. Updates are checked through WordPress and downloaded only when you initiate installation; the ZIP checksum is verified. Disconnecting releases this site’s update entitlement. For a bundle, site slots are shared across both products. If the service cannot be reached during disconnect, the saved connection remains so you can retry. Deleting the plugin removes local data but does not contact the service: release the site in purchase access if needed.
Versions first released on or before your update term ends remain eligible for download for an otherwise valid purchase. Refunded/revoked purchases cannot receive new downloads or updates. This does not remove the GPL rights attached to copies already received.
Troubleshooting
- Missing menu: check your WordPress role and capabilities. Admin Answers and Security Brief require manage_options. Client Help Kit readers depend on its selected audience.
- A save fails: reload to refresh your REST nonce, confirm your session is signed in, and check whether a security plugin blocks WordPress REST requests.
- A link is unavailable: the reader may lack permission or the exact page may have moved. An administrator should review its destination.
- Old update information: open Dashboard → Updates to let WordPress refresh its metadata, then reassess if relevant.
- A private download expires: reopen purchase access for a fresh link.
- Back up exports before uninstalling. Deactivation keeps data; deleting the plugin removes its own data.
Compatibility evidence
Tested: WordPress 6.8.11 with PHP 8.2.35; WordPress 7.1.3 with PHP 8.3.35, 8.4.27 and 8.5.12; MariaDB 11.4; Chrome desktop and 390px mobile viewport. Automated accessibility checks cover WCAG A/AA rules; these do not constitute a complete accessibility certification. Multisite network activation, third-party builders and arbitrary custom roles are outside the tested scope.
Licence and credits
Copyright 2026 I Enterprise Ltd trading as AgenticEcom. Plugin PHP, JavaScript, CSS and original artwork are GPL-2.0-or-later. The full GPL v2 text is included in LICENSE.txt. WordPress and Dashicons are provided by WordPress under their own GPL-compatible licences. No third-party runtime libraries or remote fonts are bundled. Commercial entitlements cover AgenticEcom’s delivery, updates and support; they do not add restrictions to the GPL.
Help
https://agenticecom.net/security-brief-guide https://agenticecom.net/wordpress-tools-support support@agenticecom.net
Include plugin version and reproduction steps. Keep passwords, purchase keys and private customer information out of public messages.