Help protect a big slice of the web
WordPress powers a huge share of the internet. Securing it is meaningful work, and there is plenty left to do.
How we work
Remote-first
We work where we are productive and communicate in writing.
Verify, then ship
Security code earns extra review. We test, audit and document before release.
Honest by default
The same rule for marketing and code review: say what is true, plainly.
How hiring works here
Three steps, no puzzles, no whiteboard theatrics.
1. Apply
A short note and something you have built. A repo, a plugin, a writeup: real work beats a polished CV.
2. Paired task
A small, paid, time-boxed task close to the real codebase. You see how we review; we see how you think.
3. Decision
A conversation about the work, then a clear yes or no within days, not weeks of silence.
Open roles
There are no openings listed right now. We still want to hear from PHP and React engineers who care about security. Strong speculative applications get read.
Send a short note and something you have built through the contact page, with the topic set to Something else.
Secure your site today
Install the free plugin from WordPress.org and set up real protection with the guided setup wizard. Upgrade to Pro whenever you need more.