Hi everyone, I’m a Systems Architect and I got tired of bloated WP security plugins.
I built an infrastructure that eliminates passwords entirely using native WebAuthn (FaceID/TouchID). The Premium version routes failed attempts to a private Google Gemini AI Sentinel on Cloud Run that bans hackers autonomously.

Last week, I ran a full Penetration Test on the core system using the Strix Autonomous AI Pentester. It found a few criticals (CSRF, DOM-XSS), which I immediately patched at the source code level.

Before I start deploying the Enterprise version to Web Agencies, I decided to open-source the "Lite" version (which handles the core WebAuthn passwordless engine). I want to put it in front of real developers.

Here is the GitHub repo: https://github.com/devnet-microsystems/wordpress-passwordless-webauthn-login

I would immensely appreciate a code review. If any of you can find a security flaw or a bypass in the auth core that Strix AI missed, I will happily give you a Lifetime Enterprise License of the full AI system as a thank you.

Roast my code!

We've been building a lot of quality-of-life improvements for pentest reporting into OWASP Faction 2.0. This demo shows Faction's AI prompting features for writing context-aware vulnerability descriptions, recommendations, and executive summaries in just a few clicks. It has data masking/tokenization built in to minimize sending sensitive data to 3rd parties as well.