Security
Shield — AI login protection.
Auto-locks IPs after failed logins, runs AI threat analysis on the cheapest model (< $0.01/day), and pushes one-tap block buttons to your phone.
Learn about ShieldFor WordPress owners, freelancers and agencies
An AI chatbot for your visitors. An admin agent for you
The free plugin answers visitors from your own pages and links the page it used. Pro adds an admin agent that edits posts, SEO, WooCommerce and plugins from chat. You review its changes before they run, and edits to posts and SEO can be undone for a day.
Bring your own Claude, Gemini, OpenAI, DeepSeek or Ollama Cloud key. No per-message fees. Pro is $29 a year.
Free chatbot up front · 128-tool operator in Pro · Also on WordPress.org · Built by greenscript.dev
Follow the ghost
Tested, not promised.
On our benchmark of hard WordPress admin tasks, Claude Haiku 5.5 passed 33 of 33, at about $0.006 a task.
Read how we tested →- 33/33 hard tasks
- ~$0.006 per task
- Review before changes · Undo for a day
Two faces · one plugin
Answer your visitors free. Run the whole site for $29 a year.
Visitors get answers. You get leverage. The free chatbot handles front-door questions, while Pro adds an admin agent that can publish content, update plugins, run store ops, and keep the site moving.
Free · Visitor chatbot
Answer visitor questions without adding another SaaS bill.
Streaming replies, dark mode, knowledge base, WooCommerce product search, and full branding control. It is the easiest way to make your site more helpful before you touch the operator side.
Hi! I can answer anything about the menu, hours, or bookings. What are you looking for?
Do you have a vegan tasting menu?
Yes — our 7‑course vegan tasting runs Wed–Sun. Want me to check tonight’s availability?
- Unlimited conversations
- Claude, Gemini, GPT, DeepSeek, or Ollama Cloud — your choice of model
- Built-in knowledge base, conversation logs, CSV export
Pro · Admin agent
Run the site from chat, not from ten tabs.
Content, plugins, settings, security, WooCommerce, AI images, and recurring work live in one WordPress-native agent. Reach it from wp-admin, Telegram, MCP-compatible IDEs, and the visitor chat.
Audit security and update outdated plugins
→security_audit()12/12 ok
→get_plugins()2 outdated
→update_plugin(yoast-seo)22.5 → 22.6
→update_plugin(cf7)5.9.1 → 5.9.2
- Content pipeline with AI images, critique, categories
- Scheduled automations with Trusted Plan review
- Telegram bot, MCP server, 9 alert types
What's new · v1.17.2 · October 2026
Check your site for signs of a hack. Free.
Site Check looks for the traces a hacked site usually leaves and shows you the evidence for each one. It detects; it doesn’t remove anything, and it isn’t a full malware scan.
- Seven checks — new administrators, core and plugin files compared with WordPress.org’s checksums, executable files in uploads, must-use plugins, and scheduled tasks traced to the file that runs them.
- Evidence, not guesses — every finding shows what was seen and where, so you can judge it. Premium plugins and themes are listed as such, not flagged.
- Pro closes the loop — a Telegram alert when anyone becomes an administrator (and who did it), a weekly re-check, and fixes you approve on the review card.
Live demo · right here
Try the front door first. No signup, no install.
This is the visitor chatbot side of PressBot. Ask how it fits agencies, store owners, or your own workflow, then decide whether the admin agent is worth bringing in.
128 tools · 20 categories
It does the WordPress work you repeat every week.
Drafting and publishing posts. Rewriting Yoast titles and meta descriptions in bulk. Checking orders and stock. Installing and updating plugins. Auditing security. All of it by asking, without leaving WordPress.
Content
12
AI Visibility
7
Yoast SEO
4
ACF
7
Media & AI images
5
Plugins
7
WooCommerce
10
WP Booking Pro
3
Menus
4
Taxonomy
3
Users & comments
3
Settings
3
Theme
2
Cron events
3
Security
8
Analytics
2
Knowledge base
6
Automations
5
Feedback & memory
3
Explain CTAs
2
Where operators feel it fastest
It blocks attacks, works from your phone, and answers your AI editor.
The dashboard is only the start. Pro matters most when it protects the site, keeps work moving from your phone, and lets external AI clients reach real WordPress actions.
Post: “Friday deals”
Draft saved. Publish?
Published
Mobile
Telegram bot — WordPress in your pocket.
All 128 tools from your phone. Send a photo, get it in your media library. Get pinged when something goes wrong, fix it without opening a laptop.
See Telegram setup
> create post “Launch”
→ tool: create_post()
✓ Post #214 created
For developers
MCP server — expose tools to your IDE.
Pair PressBot with Claude Code, Cursor, Codex, or any MCP-compatible agent. Free includes 15 read-only tools; Pro unlocks the full 128.
MCP server docsShipping fast
Built differently. Updated often.
We are not shipping novelty features for the sake of it. Recent releases keep pushing PressBot toward one job: becoming a more useful operator layer for real WordPress work.
Username protection.
- Site Check shows where your admin and editor logins are public: sitemap, author pages, the REST users list, feeds and login messages. New free switches hide usernames and turn off XML-RPC.
- New free tool: the WordPress username checker looks at any site from the outside and tells you whether its admin username is public. It never logs in.
- WordPress can’t rename a login. PressBot can, for your own account: it asks your password, refuses guessable names, keeps you signed in and emails you.
- Pro: Shield tells you when a real login is being attacked, and the Telegram alert says where it leaks.
- Fixed in 1.20.5: the chatbot no longer fails with “Cookie check failed” on sites with page caching.
- Security in 1.20.11: your AI keys, Telegram token and Google credentials are now stored with stronger encryption, and are never shown or logged in full.
- Security in 1.20.13: Site Check now tells you whether your PHP version still gets security fixes, and Pro sites get a Telegram alert when it doesn’t.
- Security in 1.21.0: Key Relay lets your Claude key live in your own Cloudflare account, so your site only holds a limited token you can revoke. Every stored key also gets a Remove button.
- Security in 1.22.1: Key Freeze locks your stored AI keys behind an unfreeze code, and the chatbot keeps answering from your site while they are frozen. Pro sites also get an Inbox to review, apply and undo changes for 30 days.
- Pro in 1.23.0: edit a change in the Inbox before applying it. Untick what you do not want and reword the text, then PressBot applies exactly what you saved. Home and the Inbox now show the same counts.
- Security in 1.24.0: freeze your keys from Telegram or by asking the agent, and nothing remote can unfreeze them. Site Check also looks at PHP session upload progress, and agent edits now get proper headings and lists.
- Improver in 1.25.2: your AI finds and writes real improvements from evidence (search descriptions free; tags, outdated facts, answers and alt text in Pro), and you approve each one, with undo.
Link cards in the chatbot.
- Add pages or YouTube videos with a note on when to share them, and the chatbot shows the right one as a card. It can only share links from your list.
- Pro: manage shared links and knowledge files from the agent and AI apps. Archive instead of delete; replacing a file keeps the old version.
- Fixed: the chatbot no longer mentions its own searches, and updating a plugin from the agent checks for new versions first.
A simpler admin and a new Home.
- A new Home shows what happened this week, what needs you, and one suggested next step. Related pages are now tabs under fewer menu items.
- Automations and Telegram ask before risky actions: publishing, deleting and settings changes wait for your approval.
- Visitor questions answered without any page from your site are flagged as “No page found”, with a shortcut to add the answer.
PressBot is on WordPress.org.
- Search “GreenScript PressBot” in Plugins → Add New to install the free plugin from the directory.
- Installed from pressbot.io before? The new version turns off the old copy and keeps your settings.
A clearer admin, and a settings fix.
- Fixed: saving Google Analytics or Search Console settings could reset other settings, including API keys. It now saves only those fields.
- Shield, Google and the agent’s background user each have one home, and rarely used options fold into Advanced.
Check your site for signs of a hack.
- Free Site Check looks for the traces a hacked site usually leaves: new administrators, changed core and plugin files, executable files in uploads. It shows the evidence and removes nothing.
- Pro adds a Telegram alert when anyone becomes an administrator, and fixes you approve on the review card.
Why it fits serious WordPress teams
It asks before it changes anything on your site.
Bulk edits and automations arrive as a plan you approve first, with a preview of every change and a way back. Three decisions that matter when you hand an AI the keys to a live site.
01 / BYOK
Your keys. Your data.
API keys are encrypted on your server with XChaCha20-Poly1305, locked with your WordPress security keys. Conversations never leave it. We don’t see them, store them, or train on them.
02 / Direct calls
No proxy. No markup.
Your server talks straight to provider endpoints like api.anthropic.com, generativelanguage.googleapis.com, api.openai.com, or api.deepseek.com. You pay your provider directly at their published rates — nothing in the middle.
03 / WordPress-native
It speaks the platform.
Built on WordPress APIs, hooks, capability checks, and database tables. No SaaS account, no external dependencies, no black boxes — just a plugin you install and own.
Security
Built to be safe.
Keys encrypted, never shown
Your AI keys are encrypted on your server and never displayed again after you save them.
Asks before it acts
The admin agent shows a review card before changes run, and most can be undone.
Read-only visitor chatbot
Visitors can ask questions, but the chatbot cannot create, edit or delete anything.
Every release tested
Plugin Check, browser tests and a live AI smoke test run before anything ships.
Pricing
$29 a year. Less than most chatbots cost per month.
Free is the visitor chatbot, forever. Pro is the admin agent. Every paid tier is the same product — you are only choosing how many sites you run. Compare that to $29 per month for a hosted chatbot that still is not allowed to touch your site.
Free
$0 · forever
Visitor chatbot only
- Unlimited conversations
- Claude + Gemini + GPT + DeepSeek + Ollama Cloud
- 10 knowledge entries
- No admin agent
Most popular
Pro · 1 site
$29 /yr
Best for solo operators and owner-managed sites
- Admin agent · 128 tools
- Scheduled automations + trusted plans
- Telegram bot + 9 alert types
- Shield · WooCommerce · AI images
- Unlimited knowledge entries
14-day money-back guarantee
Business · 5 sites
$59 /yr
Best for freelancers and small agencies
- All Pro features
- Up to 5 site activations
- Priority support
14-day money-back guarantee
Agency · 50 sites
$99 /yr
Best for shops with a real client fleet
- All Pro features
- Up to 50 site activations
- Priority support
14-day money-back guarantee
14-day money-back guarantee · cancel anytime
FAQ
Honest answers.
What does “Bring Your Own Key” actually cost me?
You pay your AI provider directly at their published rates. Anthropic Claude, OpenAI, and DeepSeek are paid usage-based options. Ollama Cloud usage depends on the selected model and your account credits or plan. Google Gemini has a Free tier for supported models, projects, quotas, and request regions — Google requires a paid project when Free access is unavailable for the region serving your WordPress site. Treat the Free tier as a way to test: limits are low and Google may use Free-tier chats to improve its products, so a live site should use a paid Google project. A typical visitor conversation costs a fraction of a cent on Claude Haiku 5.5, GPT-6 Luna, or DeepSeek V4.1 Flash. PressBot itself never touches your spend.
Will the agent actually change things on my site without asking?
Destructive actions trigger a confirmation dialog before they run. Scheduled automations can be set to “review-required” mode — the agent prepares a Trusted Plan, and nothing touches your site until you approve it from the Automations workspace. Capability checks gate every tool by your WordPress role.
Is my data private?
API keys are encrypted at rest with XChaCha20-Poly1305, locked with your WordPress security keys, and never shown again after you save them. Your server makes direct calls to the AI provider — nothing is proxied through PressBot. We can’t see, store, or train on your conversations.
What’s the difference between Pro, Business, and Agency?
Only the number of sites you can activate the license on. Pro is 1 site, Business is 5, Agency is 50. Every paid tier includes the full feature set — admin agent, Telegram bot, Shield, WooCommerce, scheduled automations, AI images, MCP server, the lot.
Can I install PressBot from WordPress.org?
Yes. In wp-admin go to Plugins → Add New, search for “GreenScript PressBot” and install it. The listing is under GreenScript’s name; the product is PressBot. You can also use the “or download the zip” link above and upload the zip in Plugins → Add New → Upload Plugin. Either way, the free plugin is the same.
What are the technical requirements?
WordPress 6.2 or higher, PHP 7.4 or higher, and an API key from Anthropic, Google, OpenAI, or DeepSeek. Standard shared hosting is fine — no Node, no Docker, no cron daemon required. WordPress’s native cron handles scheduled automations.
Compare chatbot options
Four ways teams ship a WordPress chatbot in 2026.
Same plugin underneath — four landing pages that walk through the specific reasons teams come looking for a chatbot. Pick the angle that matches what you are solving.
01
WordPress Chatbot
WordPress chatbot that answers from your own site
How the visitor chat, BYOK pricing, and the admin agent fit together in one plugin.
Read the guide 02 Free WordPress ChatbotFree WordPress chatbot, no per-message fees
What the free tier actually covers, where the upgrade lives, and why there are no per-message fees.
Read the guide 03 ComparedBest WordPress chatbot plugins compared (2026)
PressBot next to AI Engine, MxChat, Tidio, and Crisp: pricing models, BYOK, and agent depth.
Read the guide 04 WordPress RAG ChatbotPlug retrieval into the WordPress chat
Connect your retriever once, answer from transcripts, manuals, docs, courses — with citations.
Read the guideReady when you are
Start with the chatbot. Bring in the operator when you need leverage.
PressBot is built for people who actually run WordPress sites. Use the free chatbot now, then upgrade when content, maintenance, store ops, or security work starts piling up.