Overview

Irozon AI Assistant is a WordPress plugin designed to make adding a powerful AI assistant to a website simple, secure and accessible.

Instead of requiring another monthly chatbot subscription, website owners can connect their own AI provider, configure their business information and launch a fully branded assistant directly from WordPress.

The product was designed around two core principles: extreme simplicity for the user and uncompromising security underneath.

The Challenge

Many AI chatbot solutions are either technically complicated or dependent on external subscription platforms.

Website owners often need to understand models, prompts, API configuration and other technical concepts just to add a simple assistant to their site.

At the same time, an AI assistant handling real business information requires strong boundaries around API credentials, website data and visitor input.

We wanted to create something different:

an AI assistant that feels simple on the surface while maintaining a carefully designed security architecture underneath.

The Solution

We built Irozon AI Assistant as a native WordPress plugin with a guided, minimal settings experience.

A website owner can:

Choose an AI provider.
Add their API key.
Tell the assistant about their business.
Choose which website content it may use.
Customize its appearance.
Enable the assistant.

The visitor-facing assistant automatically adopts the client’s branding rather than presenting itself as an Irozon chatbot.

For example, a business named Vinaz automatically receives:

Ask Vinaz AI ✦

while another company receives its own corresponding assistant identity.

Key Features

Multiple AI Providers

Support for:

OpenAI
Anthropic Claude
Google Gemini

Available compatible models are discovered dynamically instead of relying entirely on permanently hard-coded model lists.

For non-technical users, a Recommended model option keeps configuration simple.

Secure API Key Handling

API credentials remain server-side and are never exposed to frontend JavaScript.

Keys can be configured through:

WordPress
wp-config.php
environment configuration

Externally managed credentials can be locked so they cannot accidentally be replaced through the admin interface.

Site Knowledge

Website owners can choose public WordPress pages that the assistant is allowed to use as reference information.

The plugin:

extracts safe public text
excludes private and unpublished content
maintains a bounded knowledge index
retrieves only relevant information for each question
treats website content as reference data rather than AI instructions

This allows the assistant to answer questions about services, shipping, support, company information and other website content without giving the AI unrestricted WordPress access.

Smart Knowledge Selection

Planned smart selection can automatically suggest useful website pages such as:

About
Services
Contact
FAQ
Shipping
Returns

The site owner can accept the suggested pages with one click and refine the selection if needed.

Answer Flexibility

The assistant can be configured to behave at different levels of flexibility:

Conservative
Stays very closely within supplied business information.

Balanced
Helpful while remaining grounded in business context.

Helpful
More willing to answer related questions and make reasonable inferences.

This affects business grounding behavior without weakening the plugin’s security boundaries.

Streaming Responses

AI responses can appear progressively instead of making visitors wait for the complete answer.

The streaming architecture is provider-independent and supports graceful fallback when streaming is unavailable.

Visitors can also stop an active response while keeping the partial answer already received.

Client-Branded Chat

The assistant belongs visually to the website using it.

Site owners can configure:

assistant name
welcome message
accent color
bottom-left or bottom-right position

The plugin automatically generates branding such as:

Ask {Business Name} AI ✦

WooCommerce Product Intelligence

The WooCommerce integration is designed as a narrowly scoped, read-only product layer.

The assistant can help visitors discover products using information such as:

product name
category
price
availability
attributes
public product information

The AI never receives direct database, order, customer or administrative access.

Security by Design

Security was treated as a core architectural requirement rather than a feature added at the end.

The plugin includes principles such as:

API keys never exposed to frontend JavaScript
strict REST request validation
bounded payload sizes
visitor rate limiting
capability and CSRF protection for admin operations
trusted and untrusted context separation
no arbitrary SQL
no arbitrary filesystem access
no model-controlled WordPress privileges
no direct WooCommerce database access
safe output processing
secret-redacted logging
bounded conversation history
prompt-injection-resistant knowledge boundaries

The AI model is deliberately treated as an untrusted reasoning component, never as a privileged WordPress user.

User Experience

The WordPress settings interface was designed to avoid the complexity normally associated with AI configuration.

Technical concepts are hidden behind plain-language controls.

The main setup areas are:

Connect AI
About your business
Site Knowledge
Assistant behavior
Appearance
Preview & Enable
Advanced Settings

Advanced model configuration remains available without forcing ordinary users to understand it.

Technology

WordPress
PHP 8.1+
WordPress REST API
Vanilla JavaScript
CSS
OpenAI Responses API
Anthropic API
Google Gemini API
WooCommerce
Server-Sent Events / streaming HTTP
PHPUnit
PHPCS
Playwright

Quality & Testing

The plugin is developed with automated testing around:

secrets
provider communication
REST security
rate limiting
settings validation
site knowledge
streaming
frontend conversation behavior
WooCommerce boundaries
client branding
malformed requests
secret leakage

It is also tested against real local WordPress and WooCommerce installations using Playwright at both desktop and mobile viewport sizes.

Design System

The plugin administration experience uses the Irozon visual system:

Irozon Green
#02C685

Irozon Lime
#9BE15D

Irozon Ink
#082A38

The visitor-facing assistant remains fully customizable to match the client’s own website branding.

Outcome

Irozon AI Assistant is being developed as a free WordPress plugin designed to remove the complexity of deploying an AI assistant on a business website.

The goal is simple:

Choose your AI provider, connect your key, tell it about your business, and start helping visitors.

No unnecessary complexity. No forced external chatbot platform. No compromise on security.

Website / Plugin Link

Coming soon

Replace this with the WordPress.org plugin URL when released.

Developed by

Irozon AB

WordPress Plugins

irozon AI Assistant – Free AI Chat Plugin for WordPress

Irozon PostNord for WooCommerce – Free