Anchor Hosting

I have a lot of side projects. One of them even runs security scans against the WordPress.org plugin repo. Ironically, I have never personally published anything to WordPress.org. Not because I think the directory isn't valuable. The opposite. WordPress.o

I built a WordPress writing editor for Minn Admin that is one vanilla JavaScript file, no build step, no React. It stores native Gutenberg block markup. Complex layouts survive round trips as atomic islands. The official block editor is a multi-megabyte p

Two weeks ago I replaced /wp-admin/ on my own WordPress sites with /minn-admin/. This is my fourth attempt at building a WordPress backend replacement. This round I used Claude Design with Fable to build a standalone WordPress plugin. This how it started.

I have pushed AI into almost every corner of how I run Anchor Hosting. Security scans. Migrations. DNS. Blog drafts. Website repairs. The one thing that still felt half-broken was sitting down and doing email the way I actually do email. Not summarizing t

It started as a friendly challenge on X. A developer I follow, Riza, was raving about pointing Claude Code at his own codebase. It spun up dozens of subagents and handed him a stack of real security and performance fixes. I replied, "Now let me give it a

I'm not a security researcher. I run a WordPress hosting company. I patch sites, clean up malware, and keep thousands of WordPress sites running smoothly. So when I started pointing AI at the WordPress plugins and finding real vulnerabilities, the first t

Before this year, if you had asked me what a supply chain attack was, I'm not sure I could have given you a straight answer. My focus is WordPress hosting and maintenance. That means keeping my customers' sites safe and running, but it does not make me a

I have wanted a public database of WordPress admin notices for years. Every WordPress professional knows the feeling. You log into /wp-admin/ to do one small thing, and the top of the screen is a wall of banners. Activate your license. Update to the lates

Most plugin closures are uneventful. A developer stops responding, wp.org pulls the plugin, the listing goes dark, and that is the end of it. My WP Beacon scanner flags these all day long. I glance at them and move on. Recently, one of them was different.

The last few weeks have been whack-a-mole with my Mailgun account. My Mailgun account kept getting locked. I would clear a compliance issue, watch everything come back online, and a few hours later it would be frozen again. I could not add a sending domai