What Is Protuno

Protuno gives you a way to hand WordPress work to software and still know what happened.

You point it at a site. It reads the site, tells you what it found in plain words, and, once you allow it, does the work on your staging site, on a schedule if you like, and writes down what it did. You check the fixes there, then move them to your live site in your own way.

That is the whole idea. The rest of this page is how it works and what is live today.

Start with the free audit

The audit takes a domain and nothing else. No plugin, no login, no access to your server.

It runs 54 checks from the address alone. Connect the site and that becomes 85, across eight areas: Security, Mail and DNS, SEO and Indexing, WordPress, Certificates, Performance, Commerce and Backups.

Every one of them is read only. Nothing is written, nothing is changed, and the site does not know it is being looked at any more than it knows a visitor arrived.

You get a score, and underneath it the findings that produced it. Not only a grade: “A certificate expires in 9 days” rather than “Security: B minus”. A finding you can forward to a client without rewriting it first.

Run one at protuno.com. It takes about forty seconds.

Connect a site to see inside it

An address only tells you so much. Connecting a site adds 31 checks that can only be read from inside the install: which plugins are actually active, what version of PHP is really running, whether the debug log is writing to a file anyone can download.

Connecting is three steps and takes about two minutes. Start with your staging site. Protuno does the work on staging. Your live site is only read.

Step one: install the connector

Download the Protuno Super Agent Connector from your dashboard, upload the zip in your staging site’s Plugins, Add New, Upload Plugin, and activate it. It is free, and it is the only thing you install.

Step two: the site declares what it can do

The connector reads which abilities the site can offer and shows them to you before anything is granted. You see the list; you are not asked to trust a description of it.

Step three: paste a credential you own

The plugin creates a WordPress application password and shows it to you once. You paste it into Protuno along with your username. The plugin keeps no copy.

You can revoke it from your own WordPress user profile at any moment, without asking us, and the connection dies immediately. The key is yours, it lives in your site, and you can burn it whenever you like.

Playbooks are the unit of work

A playbook is one job, written out step by step before it ever runs.

Take a backup. Check the backup is sound. Apply these updates. Load the site. Walk the checkout. If the site stops answering, put it back.

No model decides at runtime what looks reasonable. You can read the entire sequence before you allow it, and it does the same thing on Tuesday that it did last Tuesday.

That matters more than it sounds. An agency cannot audit a vibe. It can audit a list of steps.

Super Agents run playbooks on a schedule

A Super Agent is a standing brief over a set of playbooks. It has a name, an area it looks after, and a schedule.

• Wren, Care. The updates, the backups, the restore point that actually restores.
• Rook, Security. Reads what your site really has installed and closes the doors most installs leave open.
• Dash, Performance. Finds the 4MB hero image and the cache that is not caching.
• Iris, SEO. Crawls your site the way a search engine does.
• Till, eCommerce. Walks one of your real products to the payment step.
• Echo, Marketing. Confirms your forms still post and your tracking still fires.

The Super Agents are not live yet. They are built and named, and none of them is released. The playbooks they will eventually group are live and you can run them today; what has not shipped is the layer above them. We would rather say that here than let you find it out on a client site.

Permission is the product

Permission is set per site, and there are two settings:

• Read only. It analyses and reports. It changes nothing.
• Execute. It may change files, the database and settings.

A site you connect as a live site starts in Read only. A staging site starts in Execute, because staging is where Protuno does the work. Keep it that way: fix on staging, check the result there, then move the fixes to your live site in your own way, with your host’s push-to-live or the tools you already use.

On a Read-only site the tools that could change anything are taken out of the run before it starts, so the work is not a matter of asking the software nicely. An instruction is a policy. Taking the tool away is a good deal stronger than a policy.

Ten of the seventeen playbooks only read. The other seven exist to change something, and they say so on their own card before you switch one on.

A playbook that changes a site takes a backup first and checks it is sound before it goes any further. Plugin updates go further still: each plugin folder is stashed before its update and put back if the site stops answering. Three playbooks can also be rolled back from the run report afterwards, and the report tells you which changes it can undo and which it cannot.

Run history is the receipt

Every run across every site you can see, newest first, each with its own report.

It is the least exciting screen in the product and possibly the most important one, because “what did you actually do this month” is a question every agency gets, and the honest answer should not be a memory.

What is live today

• Live now. The free site audit. 54 read-only checks from a domain alone.
• Live now. Connecting a site, the connector plugin, and the 31 deeper checks that come with it.
• Live now. Seventeen playbooks, switchable per site, run by hand or on a schedule.
• Live now. Ask Agent, the chat on a site’s own screen that reads the connected site as it is right now and explains what it found.
• Not yet. Every Super Agent. Built, named, and unreleased.

We are shipping in order of least risk to most: the playbooks that only read, then updates behind a backup that has been checked, then the ones that change more.

Where to go next

• Run a free audit on a site you look after.
• Read why we are building this, and what we think agencies got wrong about AI.