WordPress Manager Guide
Use the official WordPress.org plugin with WebKernelAI Dashboard WordPress Manager for SEO, security headers, CSP, robots.txt, llms.txt, and crawl controls—all from one authenticated workflow.
- Home
- WordPress Manager Guide
WordPress Manager: full-stack control with an official, directory-listed plugin
WebKernelAI separates concerns the same way serious operators do: the lightweight WebKernelAI Security plugin stays on your WordPress host as a secure executor, while the Dashboard WordPress Manager is where you review, approve, and push policies. Analysis and AI-heavy workflows run in WebKernelAI cloud; your token only authorizes the requests you trigger.
Why WordPress.org matters
Plugins in the official WordPress Plugin Directory have a public listing page with version history, support threads, and downloadable ZIP files independent of any vendor CDN. That transparency helps your security and compliance reviewers validate what ships before you paste a site token into WebKernelAI.
The plugin readme documents external services, data categories (connection metadata, hashes—not raw file contents—SEO payloads, security policy text), and when transmissions occur—typically when an administrator connects a site or when you run dashboard actions. Privacy and terms live at webkernelai.com/privacy and webkernelai.com/terms.
Plugin responsibilities (on-site)
What stays inside WordPress
Secure REST bridge
Token-authenticated endpoints so only WebKernelAI requests you approve can trigger actions on your site.
File integrity signals
Path, SHA-256 hash, size, and modification time for supported scans—no raw file contents leave your server.
SEO metadata sync
Title, description, canonical, and Open Graph fields coordinated between your dashboard and WordPress.
Security headers & CSP
Apply hardened HTTP headers and Content-Security-Policy options driven from your dashboard workflow.
robots.txt & llms.txt
Publish crawler directives and AI-facing policy text without editing theme files by hand.
Crawl & archive controls
Random-page behaviour and taxonomy archive modes (for example noindex patterns) applied consistently.
Heavy crawling, scoring, and AI drafting stay in WebKernelAI cloud; the plugin validates requests and applies approved changes—similar to how enterprise SaaS connectors work.
Dashboard responsibilities (control plane)
What you drive from WebKernelAI
Security Audit (WebKernelAI Standard)
Run the dashboard-driven audit against your connected site, review header coverage and CSP asset discovery, then apply hardened presets or custom CSP modes (report-only vs enforce). Changes route through the plugin over HTTPS when you click apply.
Manage SEO
Pull WordPress content objects into a searchable table, edit meta title, description, canonical, and OG fields inline, push updates to WordPress in bulk, and optionally use AI-assisted generation where your plan includes credits—with confirmation and usage estimates before heavy jobs.
Manage Random Pages
Configure how WebKernelAI manages supplemental URLs for crawl experiments—manual lists or scan-assisted discovery—without touching wp-config or fragile theme hacks.
Taxonomy archive controls
Scan registered taxonomies, choose policies per taxonomy (including custom types beyond categories/tags), and save noindex or redirect-style behaviours straight from the dashboard.
robots.txt & llms.txt controls
Draft or sync crawler rules and llms.txt policy blocks from one place. Ideal when marketing, SEO, and engineering need the same source of truth.
Plans that include AI credits can estimate spend before bulk SEO generation runs—the same safeguards shown in the WordPress Manager confirmation panel.
First-time setup
Connect WordPress in four deliberate steps
- 1
Install WebKernelAI Security from the WordPress.org plugin directory (recommended) or your dashboard plugin package.
- 2
In WP Admin open Settings → WebKernelAI Security, generate a site token, and confirm your Site URL and REST base.
- 3
In WebKernelAI open Dashboard → WordPress Manager, pick your WordPress-marked domain, paste Base URL, API endpoint, and token, then Connect Now.
- 4
Toggle SEO override when you want live SaaS control of titles, descriptions, canonicals, and OG tags; turn it off to restore WordPress/theme defaults.
Operational hygiene
Caching after policy pushes
Full-page caches, edge CDNs, and optimisation plugins can delay visibility of header or SEO updates. After applying security or SEO changes from the dashboard, clear relevant caches once—the same reminder appears inside WordPress Manager after critical applies.
Revoke & rotate
Tokens are yours to rotate
Treat the site token like an API key: regenerate inside WP Admin if staff change roles or if you complete a security review. Disconnect from Dashboard WordPress Manager and reconnect with the fresh secret—no need to reinstall WordPress.
WordPress Manager surfaces plugin compatibility signals after connection so you know when to upgrade the on-site plugin.
Continue learning
Pair WordPress Manager with crawl-quality fundamentals
Strong dashboard automation works best when WordPress already emits clean canonicals, sitemaps, and crawl directives—see our WordPress technical SEO and security guides next.
Related Guides
Continue with these guides to strengthen your technical SEO workflow.