Three Weeks After “The Silent Crisis,” the NSA Told PHP Sites to Patch or Go Offline

On October twenty-first, the NSA, America's top cyber-defense agency, issued an urgent warning. PHP, the programming language that runs about seventy percent of all websites, including every WordPress site, had two serious security holes. Their advice: patch immediately, or take your website offline. Several governments did exactly that.

To be fair, PHP and WordPress built the modern web. Shopify and Webflow put millions of businesses online. And the fix shipped fast. But that day exposed something bigger than one bug.

In the last year, Google quietly changed how customers find you. Most businesses haven't noticed yet.

When someone searches today, Google's AI often writes the answer itself, right at the top of the page, and credits just a few websites as its sources. You're either one of those sources, or you're invisible. Your short videos from TikTok, Instagram and YouTube now show up in Google results too. And since July, Google's free reporting tool for website owners, called Search Console, tracks your social accounts the same way it tracks your website. Local search is becoming a conversation, judged on your reviews, photos and details. And more and more, the visitor isn't a person at all. It's an AI assistant, like ChatGPT, or an AI agent: software that can shop, compare and book on someone's behalf.

Every one of those channels points back to one place. Your website is no longer a brochure. It's the source of truth that Google, AI and agents use to decide who you are.

So how do you build a website for that world? This is where agentic engineering comes in. In plain terms: an experienced strategist decides what to build, and AI coding agents write the actual software, fast, under that strategist's direction. Instead of assembling your site from a theme and a stack of plugins, you get a custom website built around your business, that you own outright.

Let's compare fairly. A well-tuned WordPress site can be fast. Mine is. But it needs a caching layer, which stores ready-made copies of each page, plus plugins and constant tuning to stay that way. An agentic build starts fast, because there's almost nothing standing between your visitor and your page.

Click through a typical website, and the whole page goes blank and reloads every time. Agentic builds feel like an app on your phone: tap, and the next screen is just there.

Every plugin and every layer is another piece someone has to update, and another door an attacker can try. Fewer moving parts means fewer updates, fewer surprises, and fewer doors. On a day like October twenty-first, that's the difference between a war room and a normal Wednesday.

Here's something most owners don't realize: AI doesn't look at your design. It reads hidden labels in your website's code, called structured data, that spell out who you are, what you sell, your prices, your reviews, and which social profiles belong to you. Think of it as a name tag your website wears for machines. Agentic builds generate those labels from your own business data, so they're always complete and always consistent. On most platforms, they come from three different plugins, often disagreeing with each other.

AI agents need three things from your website. First, that map of who you are. Second, a set of buttons made for software, so an agent can check your availability, request a quote or book a call, instead of guessing its way through pages built for human eyes. The technical name is MCP, and a new browser standard called WebMCP is being built right now to bring it to every website. Third, a safe way to pay, so an agent can complete a purchase with the customer's approval. That's called agentic checkout. The big platforms are working on this. WooCommerce, the store plugin for WordPress, has started, and that's real progress. But on a site with forty plugins, every plugin has to learn this new language. An agentic build has it in the foundation.

Platforms are excellent at what they were designed for. The moment you need something custom, like a pricing calculator, a customer portal, or an AI assistant of your own, you're fighting the template, and you're renting it. Agentic builds are yours. Your code, your data, and you can host it anywhere.

Here's the real shift. With agentic engineering, your website, those machine-readable labels, your short-form video and your reporting can all run from one system, built and maintained by AI agents, directed by a strategist. Not five vendors and a pile of plugins. One engine.

You don't have to tear everything down tomorrow. Some businesses tune what they have. Some keep the familiar WordPress editor for their team, and rebuild just the part visitors see, so it's fast and modern. That's how my own site runs today. And some go fully agentic. The point is to choose on purpose, before the gap gets wider.

I spent years as a WordPress loyalist. I still respect it. But once I started building this way, I couldn't unsee the difference. I made this case with Jason Falls this month, before October twenty-first made it urgent.

I'm Chris Slater. I help businesses see the whole picture: search, social, AI and agents, and build the website at the center of it. Request your complimentary AI-readiness audit at chrisslater dot A I.