Blog

  • Grok Build finally made my AI email triage a real workflow

    process-emails drains noise. draft-email writes replies. /email-worker plus Grok Build todos is the first time hammering the customer queue felt as fast as the rest of my AI stack.

  • SandyWP is awesome. And I exploited it.

    The owner of SandyWP asked me to look for bugs. I went in blind, drove the whole test with Claude Code, and found a single shared secret that unlocks every sandbox on the platform. Here is how, and why I still recommend it.

  • My AI Security Pipeline for WordPress Plugins

    One person with a Claude subscription and a local WordPress install can audit a large portion of the plugin repository. Here is the four-step pipeline, why every AI finding has to be proven before you trust it, and what the coverage actually looks like.