Protuno Connect · version 1.0.4 · GPL-2.0

Protuno Connect.

A small open-source plugin. It is read-only by default, it registers no shell and no code execution, and every action it takes is written to a log on your own server. It is the only way Protuno reaches a site.

01

Install, pair, verify.

About two minutes.

01
Install

Add the plugin from your Protuno workspace or the WordPress directory and activate it. Nothing leaves the site yet.

02
Pair

Paste the single-use pairing code from your workspace. The plugin generates a key pair, keeps the public half on the site and sends nothing else. There is no API key to store.

03
Verify

Six checks run before the connection counts: the endpoint answers, the plugin version is supported, the signature verifies, the clock is within tolerance, the abilities read back, and the domain is pinned.

04
Deeper scan

The public scan read what anyone can see. Connecting unlocks the 31 checks that can only be run from inside the site.

What verifying actually checks

All six pass, or the connection does not count
Endpoint reachableThe site answered the signed request.
Pass
Plugin version supported1.0.4, current.
Pass
Signature verifiedPublic key stored on the site, private half never sent.
Pass
Clock within toleranceSigned requests are refused past five minutes of drift.
Pass
Abilities read18 read, 0 write.
Pass
Domain pinnedAny other domain is refused until you re-pin.
Pass

Once paired the site sits in read only mode with 18 read abilities and 0 write. The log lives at wp-content/uploads/protuno/log on your own server, and revoking is deactivating the plugin. Turning on writing is a separate switch, per site, and it re-issues the key.

02

The plugin can only do what is written in it.

A WordPress plugin runs as PHP with whatever the web server can do, so the honest question is never “what is it capable of” but “what code is actually in it”. Protuno Connect is open source. Every action it can take is a named function you can read.

It can

The complete list, not a summary of it
Read your settings and configuration
Read
List every plugin and theme with its version
Read
Compare your core files against the official WordPress release
Read
Read the debug log
Read
Count what is in the database, without reading your content
Read
Take a restore point before anything changes
Write
Each of these is one named function in the plugin.

It cannot

Absent, not disabled
Run code we send it. There is no eval anywhere in the plugin
Never
Run a shell command. It never calls exec or shell_exec
Never
Run a query we compose. Every statement is written into the plugin and takes only bound values
Never
Write to your theme, your plugins, or anything outside its own folder
Never
Change anything while the site is in read mode
Never
These are not switches that are turned off. The code to do them is not in the plugin, so there is nothing for us or for anyone else to turn on.

There is no other route in. No SSH, no application password, no database credentials, and nothing that speaks to your site except this plugin.

03

When pairing fails.

Every failure names its own fix. “Connection failed” is not a message we use.

Blocked

The site never answered

A firewall or a security plugin is blocking us before WordPress sees the request. Allowlist our range, or pause the security plugin for two minutes and pair again.

Mismatch

The domain does not match the pin

The site now reports a different hostname. If you migrated, re-pin it. If you did not migrate, disconnect it now and find out who moved it.

Clock

The server clock is out

Signed requests are refused when the clock drifts more than five minutes, so pairing cannot complete. Ask the host to enable time sync, then pair again.

Start with the free audit, connect only if it is worth it.

55 checks from the address alone, then 31 more once the plugin is on. The 2 free Super Agent playbooks stay free forever either way.

Run a free audit