LoopConf25 Sept 2025 • London
← Browse all Sessions

< Multi-Agentic Security Pipeline for WordPress Ecosystem_

Featuring:

Attackers can weaponize a vulnerability in a matter of hours, yet the ecosystem often takes weeks or months to fully patch, creating a massive window of exposure.

With thousands of plugins and themes within WordPress ecosystem, each a potential entry point, human-scale security is no longer a viable defense against machine-scale threats; hence, it's time for a new paradigm.

In this talk, let's design a multi agentic pipeline that can automate the entire security lifecycle, moving from detection to remediation in minutes, not months.

The three key takeaways for attendees from this talk include:

1. Discover practical techniques for fine-tuning code-analysis LLMs (eg, gpt-oss) to identify vulnerability patterns (e.g., improper nonce handling, unsanitized queries, XSS) within WordPress ecosystem.

2. Learn how to design a reliable multi-agent system for a production environment, complete with robust error handling, agent coordination, and fail-safe mechanisms tailored for WordPress.

3. Implement strategies for managing edge cases where automated patching fails, ensuring the system remains both effective and safe.