Security Researchers Flagged My Plugin Twice. Here's Why It Wasn't Scary.I have had two independent security researchers find bugs in my WordPress plugin this year. Both were valid. Both got fixed. I would gladly take another one tomorrow. If that sounds like a strange thiJul 12 · 6 min readroyalplugins.hashnode.dev
How to Audit AI Bot Traffic on WordPress Without Signing Up for CloudflareMost guides for controlling AI crawlers on WordPress open with a Cloudflare signup form. That's fine if Cloudflare fits your stack. If it doesn't, here's the manual audit process you can run today witJul 8 · 6 min readroyalplugins.hashnode.dev
Royal MCP: 37 → 67 Tools, and the OAuth Refactor That Made It PossibleOver the last six months, Royal MCP grew from 37 tools to 67 — near-doubling the surface area. That growth gets asked about a lot, mostly by people trying to figure out whether it's a real production Jul 5 · 8 min readroyalplugins.hashnode.dev
My Async Backup Engine Worked Perfectly. Until A Customer's Shared Host Filtered Out The One Cron Hook We NeededSiteVault Pro's full backup engine splits work across WP-Cron resumptions. Each cron tick processes a chunk of files, schedules the next tick 5-10 seconds out, releases its lock. The pattern handles sJun 2 · 5 min readroyalplugins.hashnode.dev
"S3-Compatible" Means "Spec-Compliant Or You Lose." AWS Is The Lenient One.SiteVault Pro shipped S3-compatible cloud backup support. Tested it against Amazon S3, watched backups upload, watched them restore, watched the dashboard tick from "Syncing…" to "Synced." Marked the May 25 · 5 min readroyalplugins.hashnode.dev
