Klusio

Description

Klusio helps small and medium sized businesses improve their visibility in Google and AI assistants. This plugin connects your existing WordPress site to your Klusio account and brings relevant proposals, drafts and results into WordPress.

A Klusio account is required. Installing the plugin alone does not connect your site, send content or publish anything.

Start with a useful improvement

The Klusio menu guides you through connecting your account, choosing an important page and reviewing a concrete proposal. Keep one focus page per administrator, inspect the real website and decide what to improve. Existing package, approval and publication rules remain in force.

Guided setup works from WordPress or your Klusio account. A WordPress administrator confirms the exact website and a Klusio account administrator confirms the account and permissions. The handshake is resumable and verifies both ends before storing a connection. A new connection starts with automatic publication off; reconnecting preserves your existing publication preferences.

Your Klusio work inside WordPress

• Overview: your goal, selected proposals, current work, drafts and verified results, with a visible synchronization time.
• Growth: inspect the same execution contract as in your account. With explicit delegation, approve, reject or defer supported proposals and give feedback. Feedback pauses execution until a new approval.
• Drafts: edit unpublished, unlinked articles, choose a local media image and update its alt text. Saving preserves a backup and invalidates the previous review. Publishing requires confirmation of the exact saved version.
• Pages: find editable pages and posts, open their native editor and use “Improve with Klusio” for page-specific work.
• History: accepted work stays visible on the Klusio server when your browser closes. Repeated submissions do not create a second job; interrupted writes require inspection.
• Settings: manage supported notification and work-mode preferences through the same authorized account services. Without a delegated settings scope, choices open an account confirmation screen.
• Results: see registered changes, live verification, available Search Console comparisons and AI evidence. Retrieved search results, cited pages and actual company mentions remain separate. Missing measurements are never replaced with invented results.

The optional account overview refreshes through the existing hourly synchronization. It shows its age and warns after two hours. Administrators can enable read-only editor access locally. Turning the overview off removes its local copy. Account deep links retain your selected page or proposal and still require the correct account login.

Preserve your Elementor and Bricks website

Klusio can place approved changes in existing builder text fields, headings, buttons, FAQs and internal links. Layout, styling and unrelated content remain intact. Supported objects include Elementor pages, templates and global widgets, and Bricks pages, templates, headers, footers and global elements.

Before each write the plugin checks the page fingerprint and editing lock. If someone changed the page, it refuses to overwrite their work. It creates a compressed backup and WordPress revision, reads the result back and refreshes the affected page’s generated CSS and cache. Restore also checks for newer changes.

Supported query-loop additions use existing public post types, categories and approved text fields. Optional WPML, Polylang and TranslatePress operations preserve independently edited translations. Approved redirects apply only to genuinely missing addresses, so they do not hide existing pages or other plugins’ redirects. Existing Yoast and Rank Math page title and description routes remain compatible.

Preview the real theme and inspect mobile

Administrators can open an unpublished article as a separate private WordPress draft using the active theme. The saved account revision is the source. A new revision creates a new private copy; previous copies and local edits are retained. Featured images are shown when already present in the local media library; missing images are disclosed. Publish the canonical article from Klusio: these preview copies remain drafts while the plugin’s protection is active.

For existing pages and private previews, inspect the actual rendered frontend at desktop and mobile widths. A bounded browser check identifies possible overflow, strong image cropping, missing image alternatives, heading gaps, unnamed fields and missing next steps. Builders and templates participate through their rendered output. The check submits no forms and changes no page content.

Save dated observations with a page fingerprint and read them back in WordPress or your account. Earlier reports remain available locally. Changes to theme, templates or external content can still make an observation outdated. This is not a full accessibility, conversion or SEO audit. A separate collapsed check of stored text remains available.

Explicit connection and permissions

The optional work connection requires local consent and an active account administrator’s confirmation. Scopes separately allow reading, reviewing proposals, editing drafts, publishing/restoring and changing preferences. Only WordPress administrators execute delegated actions; editor access remains read-only. Grants expire after 90 days and can be revoked. Changed integration credentials, website identity or account administrator access invalidate the delegation.

The Connection screen checks WordPress and Klusio in both directions and shows scopes, expiry and the last received overview. New Application Passwords created through guided setup, and exact credentials identified from that setup, are restricted by the active plugin to supported editorial REST routes. User administration, plugin/theme management, general settings, batch calls and unrelated routes are blocked for those credentials. Normal administrator sessions and other integrations remain unchanged.

This technical restriction depends on the plugin staying active. Revoke the Application Password in WordPress to remove access independently. Older manual credentials are not silently changed; reconnect through guided setup to create a limited credential. Account scopes further limit operations initiated in the plugin. No account browser session or login token is shared with WordPress.

Honest evidence, controlled changes

Google comparisons show their sources, equal-length periods and data limitations. Low-data and later-change warnings remain visible. A difference after a change does not prove that the change caused it. Only explicitly successful live checks are presented as verified.

Complete before/after text is required for native on-page approval. Existing customer pages are not overwritten by the article draft editor. Destructive operations such as deleting or merging pages remain outside the proposal workflow. No visitor tracking, advertising or unsolicited customer messages are added.

External services

The guided connection contacts https://klusio.nl/account/api/wordpress-connect.php only after you choose to check or confirm a connection. It exchanges a short-lived connection ticket, installation URL, account identity, chosen permissions and an automatically generated Application Password for the confirming WordPress administrator. That separate password is sent only in an HTTPS server-to-server request and stored encrypted in Klusio. The active plugin limits positively identified guided credentials to editorial REST routes; the underlying Application Password belongs to the administrator and must be revoked if that protection is no longer wanted. Account scopes separately limit actions initiated from the plugin. Revoke technical access in Users > Profile > Application Passwords. Revoke the account delegation in your Klusio account. No customer content is published by connecting.

This plugin is the WordPress part of the Klusio service (https://klusio.nl/). Without the guided connection or optional work connection, the plugin does not make external requests. The servers of Klusio connect to the REST API routes of this plugin on your website, authenticated with a separate WordPress application password created during guided setup or manually by your administrator.

With the optional work connection, WordPress sends authenticated HTTPS POST requests to https://klusio.nl/account/api/wordpress-native.php when an administrator opens live account data, submits an action or checks its status. Requests include the bound website, WordPress user ID, selected entity/action and any edited article text, media identifier, alt text, feedback or preferences needed for that action. A scoped credential is stored in a non-autoloaded WordPress option; only its hash is stored by Klusio. It is never placed in browser code or links. The endpoint does not accept arbitrary external destinations. Task history, feedback and verified before-state backups are retained by Klusio with the account; turning the connection off does not erase this audit history.

What is exchanged, and when:

• When you connect or test the connection in your Klusio account, and before every change: Klusio reads the plugin status. That is the plugin version, which page builders are active, the capabilities of the connected user and a few recently edited Elementor or Bricks pages with their title and link. Without login, the status route only shows that the plugin is active, its version and its name.
• When you approve a text change in Klusio: Klusio reads the page builder data of that page, sends back the changed data and reads it again to verify the result. Backups stay on your website.
• When you ask Klusio to restore a change: Klusio sends which backup to restore.
• When you publish a prepared blog article from Klusio (only after it was enabled on your site): Klusio sends the article address and a fingerprint of the approved version.
• When you approve a redirect in Klusio: Klusio sends the old address and the new address on your website, and reads the list of redirects back to verify it. When you undo it, Klusio sends the old address to remove.

• When you approve a translated page title or description in Klusio: Klusio sends the title or description of the page in your default language, the translation that your translated page shows and the approved new translation, and reads the dictionary entry back to verify it. When you undo it, Klusio sends which backup to restore.

• When an administrator enables the optional account overview: Klusio sends the account identifier, connected site address, goal, selected proposal titles and descriptions, draft titles and bounded plain-text draft previews (up to 18,000 UTF-8 bytes each), proposal execution summaries, local page-draft references, work statuses, verification timestamps, available aggregate Search Console comparisons, six notification choices and the existing work mode through the existing authenticated WordPress connection. A bounded copy is stored as WordPress options. Short drafts may fit entirely in the preview; longer drafts are truncated and marked incomplete. No embedded media, financial information, account login tokens or visitor data are sent. Only the account and WordPress sender bound on the first successful synchronization may refresh it; a site administrator can reset that binding. No executable content is transferred.

• Clicking a link to your Klusio account passes the website address and, where relevant, the selected page address or item ID. Prepared notification and work-mode choices are also passed to the account confirmation screen when you submit that form. These are navigation context only: Klusio still checks your login, company and access to that item.

Saved browser reviews contain the page address, revision fingerprint, observation time and bounded descriptions of elements needing inspection. Form values and visitor data are not collected. Reports remain in WordPress and are fetched by the bound Klusio account on request. Private article preview copies also remain in WordPress.

No data about your visitors is exchanged.

Klusio terms and conditions: https://klusio.nl/algemene-voorwaarden/
Klusio privacy policy: https://klusio.nl/privacy/