Rook: The Security Super Agent

Rook looks after Security. Reads what your site actually has installed and watches the advisory feeds against it. Tells you the morning something you run becomes a problem.

Ask Rook in your AI app, for example “Rook, check my site for vulnerable plugins”. Rook shows you a plan, you approve it in Protuno, and it runs the playbooks one step at a time.

Rook’s playbooks

Rook has 6 playbooks. 1 can change the site, and it asks before its change step. The other 5 only read.

Playbook	Reads or changes	Steps	What it does
WP Security Audit	Reads only	8 steps	A security audit graded A to F, covering setup and exposure, vulnerable plugins and themes, and access control. Every finding is checked against real code first.
Plugin Vulnerability Checker	Reads only	4 steps	Checks every installed plugin and its exact version against known vulnerability data, and tells you which need updating first.
WP Malware Scan	Reads only	6 steps	Scans files and the database for malware and checks each finding before it reports it. It finds only; it does not remove.
WP Hardening	Changes the site	5 steps · asks before its change step	Applies safe WordPress hardening one change at a time, after a backup, and lists the risky changes it leaves for you.
New Admin Watch	Reads only	2 steps	Reports every administrator and their application passwords: new admins, the default “admin” username and new or unused application passwords.
Comment & Signup Spam Exposure Audit	Reads only	2 steps	Shows where comments are open, the size of the spam and pending queues, and signups that look like bots.

On Rook’s page

Pick a site under Working on. Recent jobs shows what you gave Rook from your AI app. On this site sets its level there: Read, Ask or Auto. Every playbook is on for that site unless you switch it off.

Where to go next

• Super Agents: ask, approve, undo.
• Run a playbook and read the report.