Description

Overview

Irozon AI Assistant is a WordPress plugin designed to make adding a powerful AI assistant to a website simple, secure and accessible.

Instead of requiring another monthly chatbot subscription, website owners can connect their own AI provider, configure their business information and launch a fully branded assistant directly from WordPress.

The product was designed around two core principles: extreme simplicity for the user and uncompromising security underneath.

The Challenge

Many AI chatbot solutions are either technically complicated or dependent on external subscription platforms.

Website owners often need to understand models, prompts, API configuration and other technical concepts just to add a simple assistant to their site.

At the same time, an AI assistant handling real business information requires strong boundaries around API credentials, website data and visitor input.

We wanted to create something different:

an AI assistant that feels simple on the surface while maintaining a carefully designed security architecture underneath.

The Solution

We built Irozon AI Assistant as a native WordPress plugin with a guided, minimal settings experience.

A website owner can:

1. Choose an AI provider.
2. Add their API key.
3. Tell the assistant about their business.
4. Choose which website content it may use.
5. Customize its appearance.
6. Enable the assistant.

The visitor-facing assistant automatically adopts the client’s branding rather than presenting itself as an Irozon chatbot.

For example, a business named Vinaz automatically receives:

Ask Vinaz AI ✦

while another company receives its own corresponding assistant identity.

Key Features

Multiple AI Providers

Support for:

• OpenAI
• Anthropic Claude
• Google Gemini

Available compatible models are discovered dynamically instead of relying entirely on permanently hard-coded model lists.

For non-technical users, a Recommended model option keeps configuration simple.

Secure API Key Handling

API credentials remain server-side and are never exposed to frontend JavaScript.

Keys can be configured through:

• WordPress
• wp-config.php
• environment configuration

Externally managed credentials can be locked so they cannot accidentally be replaced through the admin interface.

Site Knowledge

Website owners can choose public WordPress pages that the assistant is allowed to use as reference information.

The plugin:

• extracts safe public text
• excludes private and unpublished content
• maintains a bounded knowledge index
• retrieves only relevant information for each question
• treats website content as reference data rather than AI instructions

This allows the assistant to answer questions about services, shipping, support, company information and other website content without giving the AI unrestricted WordPress access.

Smart Knowledge Selection

Planned smart selection can automatically suggest useful website pages such as:

• About
• Services
• Contact
• FAQ
• Shipping
• Returns

The site owner can accept the suggested pages with one click and refine the selection if needed.

Answer Flexibility

The assistant can be configured to behave at different levels of flexibility:

Conservative
Stays very closely within supplied business information.

Balanced
Helpful while remaining grounded in business context.

Helpful
More willing to answer related questions and make reasonable inferences.

This affects business grounding behavior without weakening the plugin’s security boundaries.

Streaming Responses

AI responses can appear progressively instead of making visitors wait for the complete answer.

The streaming architecture is provider-independent and supports graceful fallback when streaming is unavailable.

Visitors can also stop an active response while keeping the partial answer already received.

Client-Branded Chat

The assistant belongs visually to the website using it.

Site owners can configure:

• assistant name
• welcome message
• accent color
• bottom-left or bottom-right position

The plugin automatically generates branding such as:

Ask {Business Name} AI ✦

WooCommerce Product Intelligence

The WooCommerce integration is designed as a narrowly scoped, read-only product layer.

The assistant can help visitors discover products using information such as:

• product name
• category
• price
• availability
• attributes
• public product information

The AI never receives direct database, order, customer or administrative access.

Security by Design

Security was treated as a core architectural requirement rather than a feature added at the end.

The plugin includes principles such as:

• API keys never exposed to frontend JavaScript
• strict REST request validation
• bounded payload sizes
• visitor rate limiting
• capability and CSRF protection for admin operations
• trusted and untrusted context separation
• no arbitrary SQL
• no arbitrary filesystem access
• no model-controlled WordPress privileges
• no direct WooCommerce database access
• safe output processing
• secret-redacted logging
• bounded conversation history
• prompt-injection-resistant knowledge boundaries

The AI model is deliberately treated as an untrusted reasoning component, never as a privileged WordPress user.

User Experience

The WordPress settings interface was designed to avoid the complexity normally associated with AI configuration.

Technical concepts are hidden behind plain-language controls.

The main setup areas are:

• Connect AI
• About your business
• Site Knowledge
• Assistant behavior
• Appearance
• Preview & Enable
• Advanced Settings

Advanced model configuration remains available without forcing ordinary users to understand it.

Technology

• WordPress
• PHP 8.1+
• WordPress REST API
• Vanilla JavaScript
• CSS
• OpenAI Responses API
• Anthropic API
• Google Gemini API
• WooCommerce
• Server-Sent Events / streaming HTTP
• PHPUnit
• PHPCS
• Playwright

Quality & Testing

The plugin is developed with automated testing around:

• secrets
• provider communication
• REST security
• rate limiting
• settings validation
• site knowledge
• streaming
• frontend conversation behavior
• WooCommerce boundaries
• client branding
• malformed requests
• secret leakage

It is also tested against real local WordPress and WooCommerce installations using Playwright at both desktop and mobile viewport sizes.

Design System

The plugin administration experience uses the Irozon visual system:

Irozon Green
#02C685

Irozon Lime
#9BE15D

Irozon Ink
#082A38

The visitor-facing assistant remains fully customizable to match the client’s own website branding.

Outcome

Irozon AI Assistant is being developed as a free WordPress plugin designed to remove the complexity of deploying an AI assistant on a business website.

The goal is simple:

Choose your AI provider, connect your key, tell it about your business, and start helping visitors.

No unnecessary complexity. No forced external chatbot platform. No compromise on security.

Website / Plugin Link

Coming soon

Replace this with the WordPress.org plugin URL when released.

Developed by

Irozon AB