Security, Encrypted Guardrails & HMAC Signatures

Security is the #1 priority when allowing external AI models to interact with a production WordPress site. Digent Smart AI is designed with an uncompromising 100% secure encrypted security model with zero stored passwords.

1. Granular WordPress Capability Checks

Every single tool invocation and ability execution validates the authenticated user's native WordPress capabilities:

• edit_posts / publish_posts for content operations.
• edit_theme_options for styling and theme customizations.
• manage_options for administrative settings and plugin configurations.
• moderate_comments for comment approvals and spam trashing.

An AI client cannot perform any operation that the authenticated user does not have permission to execute.

2. Cryptographic HMAC SHA-256 Signatures

When paired with the Digent Smart AI Cloud Gateway (https://digentsmartai.com), every request is verified with dual security headers:

• X-Dgnts-Timestamp: Request timestamp in UTC seconds (enforces a strict ±300-second anti-replay drift window).
• X-Dgnts-Signature: Cryptographic HMAC SHA-256 signature calculated across the HTTP method, URL, timestamp, and request body using your unique shared secret.

Requests with expired timestamps or invalid signatures are instantly rejected with HTTP 401 Unauthorized.

3. Zero Shell Execution (shell_exec Disabled)

Unlike insecure developer plugins that run raw bash commands on your server, Digent Smart AI's wp_cli_run engine operates 100% in-memory using WordPress internal PHP APIs (WP_Plugin_Dependencies, get_plugins(), wp_clean_plugins_cache(), wp_delete_post()).

Dangerous functions like shell_exec(), exec(), system(), and passthru() are strictly forbidden and never used. This makes Digent Smart AI 100% compatible with shared hosting, managed WordPress hosts, and locked-down container environments.

4. Zero Database Bloat

Most WordPress audit plugins write millions of log rows directly into your wp_options or wp_posts tables, causing database bloat and slow backups.

Digent Smart AI streams execution latency metrics, tool call logs, and telemetry directly to your Cloud Gateway dashboard without saving transient logging records to your local MySQL database.