Netseg proprietary infrastructure — the pillars that guarantee security, licensing and communication between all products. Not sold separately.
Silent WordPress security agent. Continuously monitors with 14 CWE-based rules. War Room with full incident and action history. Autonomous auto-repair in a 60-minute window for safe-classified actions — complex actions require manual approval. Daily security scan at 07:00 PT. Read-only architecture: NSC (Netseg Security Client) is the sole owner of mu-plugins and wp-config. Central radar on netseg.ai.
Licensing backbone of the entire ecosystem. HMAC-SHA256 anti-replay on all requests, automatic heartbeat every 24h per plugin, auto-provisioning on activation and auto-deactivation on expiry or revocation. Automatic invoicing: Portugal (VAT 23%), Spain (VAT 21%), EU B2B (reverse charge, Art. 196 Dir. 2006/112/EC). Multibanco, MB WAY and IBAN support. Per-product KPIs in the control panel.
Loose-coupling event bus that unites the entire ecosystem without creating direct dependencies. Each plugin uses function_exists() before calling netseg_bus_register() — no plugin depends on the Bus to function. Typed events with namespace: chat.lead.scored, blkcloner.block.saved, blkcloner.block.deleted. Synchronous dispatch. Zero-coupling architecture.
Multi-engine AI platform that powers the entire ecosystem. Claude Sonnet 4.6 with native extended thinking, Gemini Flash, Gemini Flash-Lite, Groq and MiniMax. Agentic loop with configurable depth limit. PHP auto-repair with php -l syntax validation and automatic 300s rollback. SSE streaming. Desktop and mobile templates. Runs on cPanel shared hosting without Composer — pure PHP 8.1+.
All Netseg plugins and platforms run on pure PHP 8.1+, without Composer. Guaranteed compatibility on any cPanel shared hosting.
All AJAX communication uses admin-ajax.php. The REST API is blocked by AIOS on all client sites — this architecture guarantees zero conflicts.
All server-to-server communication uses HMAC-SHA256. No plaintext tokens, no JWT in contexts that don't require it.
Each delivery has a unique incremented version. The ZIP root always matches the installed folder name — WordPress auto-detects updates correctly.
Database migrations run on admin_init, never only on activation. Ensures silent updates don't leave tables in inconsistent states.
All exit points in standalone platforms use ob_start()/while(ob_get_level()>0) ob_end_clean(). Prevents partial output and headers already sent.
Because the infrastructure we built is proof of what we can build for you. If you need something similar — autonomous security, centralised licensing, custom AI platform — let's talk. We build bespoke.
Talk about your project →