What Is Protuno

Protuno gives you a way to hand WordPress work to software and still know what happened.

You point it at a site. It reads the site and tells you what it found in plain words. Then you connect the AI app you already use, such as Claude, and ask it to fix things. The AI app plans the work, you approve it in Protuno, and Protuno does the work on your staging site and writes down what it did. You check the fixes there, then move them to your live site in your own way.

That is the whole idea. The rest of this page is how it works and what is live today.

Start with the free audit

The audit takes a domain and nothing else. No plugin, no login, no access to your server.

It runs 54 checks from the address alone. Connect the site and that becomes 85, across eight areas: Security, Mail and DNS, SEO and Indexing, WordPress, Certificates, Performance, Commerce and Backups.

Every one of them is read only. Nothing is written, nothing is changed, and the site does not know it is being looked at any more than it knows a visitor arrived.

You get a score, and underneath it the findings that produced it. Not only a grade: “A certificate expires in 9 days” rather than “Security: B minus”. A finding you can forward to a client without rewriting it first.

Run one at protuno.com. It takes about forty seconds.

Connect a site to see inside it

An address only tells you so much. Connecting a site adds 31 checks that can only be read from inside the install: which plugins are actually active, what version of PHP is really running, whether the debug log is writing to a file anyone can download.

Connecting is three steps and takes about two minutes. Start with your staging site. Protuno does the work on staging. Your live site is only read.

Step one: install the connector

Download the Protuno Super Agent Connector from your dashboard, upload the zip in your staging site’s Plugins, Add New, Upload Plugin, and activate it. It is free, and it is the only thing you install.

Step two: the site declares what it can do

The connector reads which abilities the site can offer and shows them to you before anything is granted. You see the list; you are not asked to trust a description of it.

Step three: paste a credential you own

The plugin creates a WordPress application password and shows it to you once. You paste it into Protuno along with your username. The plugin keeps no copy.

You can revoke it from your own WordPress user profile at any moment, without asking us, and the connection dies immediately. The key is yours, it lives in your site, and you can burn it whenever you like.

Then connect your AI app

Protuno has no AI to buy. The thinking happens in the AI app you already use, such as Claude, Claude Code, Codex or Cursor, on your plan there. You add Protuno to it once, sign in to Protuno and press Allow. There is no API key to copy. Letting it run code on your sites is a separate box, off unless you tick it, and code only runs on sites set to Execute. Connect your AI app has every step.

Playbooks are the unit of work

A playbook is one job, written out step by step before it ever runs.

Take a backup. Check the backup is sound. Apply these updates. Load the site. Walk the checkout. If the site stops answering, put it back.

No model decides at runtime what looks reasonable. You can read the entire sequence before you allow it, and it does the same thing on Tuesday that it did last Tuesday.

That matters more than it sounds. An agency cannot audit a vibe. It can audit a list of steps.

Super Agents do the work, in your AI app

A Super Agent is a named agent that owns a group of playbooks. You ask one in your AI app, for example “Dash, clean up the database on my shop”. It shows you a plan, waits for you to approve it in Protuno, then runs the steps one at a time.

• Wren, Care. Runs your updates behind a restore point, then loads the site again to be sure it still works.
• Rook, Security. Reads what your site really has installed and closes the doors most installs leave open.
• Dash, Performance. Finds the 4MB hero image and the cache that is not caching.
• Iris, SEO. Crawls your site the way a search engine does.
• Till, eCommerce. Walks one of your real products to the payment step.
• Echo, Marketing. Confirms your forms still post and your tracking still fires.

Only you can approve a plan, by pressing Approve on its card in Protuno. Your AI app can propose a plan, check it and decline it, but it cannot approve one.

Permission is the product

Permission is set per site, and there are two settings:

• Read only. It analyses and reports. It changes nothing.
• Execute. It may change files, the database and settings.

A site you connect as a live site starts in Read only. A staging site starts in Execute, because staging is where Protuno does the work. Keep it that way: fix on staging, check the result there, then move the fixes to your live site in your own way, with your host’s push-to-live or the tools you already use. Only you can switch a site to Execute, in Protuno. Your AI app can set a site to Read only, never to Execute.

On a Read-only site the tools that could change anything are taken out of the run before it starts, so the work is not a matter of asking the software nicely. An instruction is a policy. Taking the tool away is a good deal stronger than a policy.

17 of the 27 playbooks only read. The other 10 can change something, and they say so on their own card before you run one.

A playbook that changes a site takes a backup first and checks it is sound before it goes any further. Plugin updates go further still: each plugin folder is stashed before its update and put back if the site stops answering. Three playbooks can also be rolled back from the run report afterwards, and the report tells you which changes it can undo and which it cannot.

Activity is the receipt

Every run across every site you can see, newest first, each with its own report.

It is the least exciting screen in the product and possibly the most important one, because “what did you actually do this month” is a question every agency gets, and the honest answer should not be a memory.

What is live today

• Live now. The free site audit. 54 read-only checks from a domain alone.
• Live now. Connecting a site, the connector plugin, and the 31 deeper checks that come with it.
• Live now. 27 playbooks on every plan. Run any of them from your AI app, and put them on a schedule with routines on Pro and Agency.
• Live now. The six Super Agents, working in your AI app. You approve every change in Protuno, and Protuno takes a backup first and can undo it.

We are shipping in order of least risk to most: the playbooks that only read, then updates behind a backup that has been checked, then the ones that change more.

Where to go next

• Run a free audit on a site you look after.
• Read why we are building this, and what we think agencies got wrong about AI.