Bringing clarity to WordPress builders and companies at the intersection of performance, tooling, strategy & education. 👷🏻‍♂️@Scanfullyapp 👨🏼‍💻@Within_WP

All the links 👉🏻
Joined March 2008
Replying to @remkusdevries
If you’re serious about delivering fast WordPress sites , or just tired of fighting performance without a clear roadmap, this is the course you’ve been waiting for. Let’s make WordPress fast. withinwp.com/courses/make-wo…
7
5
23
4,864
Remkus de Vries retweeted
Community is at the heart of PressConf, and we’re happy to have @greyd_suite and Within WP supporting us as community partners. Thank you for helping bring people together around the WordPress ecosystem and making our first European edition possible. We’re grateful to have you as part of the PressConf Europe community. See you soon in Barcelona! 🌴
1
4
91
What is the best way to track what users do on your WordPress site? For me, an activity log should show who did what and when, with enough detail to investigate a change. When several people manage a site, that history helps you review everyday work and understand unexpected changes. We've rebuilt Scanfully's activity log with much more detail about WordPress user activity. You can track users being created, deleted, or given a different role. For users with elevated permissions, we also record successful logins, password changes, email changes, and application-password activity. That includes application passwords being created, revoked, or used for the first time. Login events include the IP address and browser. This sits alongside content edits, plugin updates, and changes to key settings. Search and the Who filter help you find changes made by a particular person. And because the activity log sits alongside uptime and performance monitoring in scanfully.com, you can review changes around a problem. A role change you weren't expecting, a plugin update, or an edited page gives you something concrete to investigate. If you use Scanfully, open a site's Activity screen and filter by the person whose work you want to review.
2
1
454
Hey WordPress friend! I publish a weekly newsletter about WordPress and its tools + strong focus on Performance and Security. Check it out 👉🏻 withinwp.com/subscribe
45
Having a bunch of Grok @bot s working in tandem, discussing who needs to do what and in what sequence in one chat is a sight to be seen. Took me a little while to see what I could automate with bots beyond the basic stuff, but I've unchained myself this week, so to say. Feels a bit like magic, ngl.
7
15
819
Remkus de Vries retweeted
Bots hit almost every WordPress login. Mostly noise. Sometimes not. Scanfully flags what matters: → failed logins far above normal → wrong passwords on an admin account → the admin login right after → new app passwords → edits in the file editor Catch a takeover early.
1
1
104
Remkus de Vries retweeted
Can an agent finish the whole WordPress job? Andy Peatling proposes testing complete workflows, with public benchmarks, clearer permissions and recovery checkpoints. A useful argument to weigh. apeatling.com/2026/09/14/ide…
2
89
Remkus de Vries retweeted
With version 2.3, we’ve rebuilt Scanfully’s activity log to help you find that history faster. Search, category tabs, a Who filter, and date controls make it easier to narrow down the relevant events.
1
1
110
We added a spiffy little filter on top of Scanfully's WordPress Activity Log:
2
12
560
We had to invent a new form of WAF to mitigate this latest set of vulnerabilities. Now enabled by default for all customers for free.
The new capability that we built to help defend php2shell is live. The @Cloudflare WAF now has full transaction detection that evaluates the request and the origin response together, and response rules block a match before it reaches the requester. Example from the post: unauthenticated hit on /admin that comes back 200 text/html. Block it. Auth failures and redirects can then pass through untouched. blog.cloudflare.com/full-tra…
53
133
34
2,215
97,941
Remkus de Vries retweeted
Yesterday's PHP fix doesn't reach PHP 8.1 or older. Those branches get no security releases, and CERT-EU says every version from PHP 5 on could be affected. Scanfully flags them on every site: → end of life: critical → behind the latest release: warning Upgrade those first.
2
2
1
163
We're looking for Beta users for @scanfullyapp's new WooCommerce Monitoring! If you run a WooCommerce store for your clients, or for yourself, we'd love to have you testing us and your feedback! Learn more about what our WooCommerce Monitoring does: docs.scanfully.com/woocommer…
2
3
429
Remkus de Vries retweeted
"What changed on the shop last night?" Ask Claude, ChatGPT or Cursor. Scanfully's MCP checks the activity log: → which update failed, and why → the plugin installed outside WordPress → the admin login after a run of wrong passwords Your morning check, in one question.
1
1
2
128
Remkus de Vries retweeted
1/12 With 60K+ plugins available, WordPress pretty much allows you to add any functionality you like. Versatile, but not smart to do just anything in WordPress. Here's 2 things you should never (want) to do in WordPress. đź§¶
19
48
14
202
Remkus de Vries retweeted
WooCommerce's named constants make common values easier to read. Check the minimum supported version: the classes arrived across several releases. And mind completed versus wc-completed! developer.woocommerce.com/20…
1
82
Remkus de Vries retweeted
The PHP security release is out. Which of your sites need it? Ask your AI: "Which of my sites need today's PHP security release?" Scanfully's MCP server checks every site's PHP version and answers in Claude, ChatGPT, Cursor or VS Code. Read only by default. Connect Scanfully to your AI app in one click: docs.scanfully.com/account/m…
1
1
2
626
As shitty today was with the PHP thing, being able which sites are running what version in one prompt was quite nice to see. Love that we're having an MCP in Scanfully now!
The PHP security release is out. Which of your sites need it? Ask your AI: "Which of my sites need today's PHP security release?" Scanfully's MCP server checks every site's PHP version and answers in Claude, ChatGPT, Cursor or VS Code. Read only by default. Connect Scanfully to your AI app in one click: docs.scanfully.com/account/m…
1
4
485
Remkus de Vries retweeted
The PHP security release is out. Which of your sites need it? Ask your AI: "Which of my sites need today's PHP security release?" Scanfully's MCP server checks every site's PHP version and answers in Claude, ChatGPT, Cursor or VS Code. Read only by default.
2
1
3
336
Remkus de Vries retweeted
PHP developers right now
29
105
15
1,276
53,396