Skip to main content
Robert DeVore
Menu

About / Robert DeVore

Software engineer.
Security researcher.
Builder.

More than 20 years building commercial products, open-source software, and developer tools.

See what I’ve builtExplore the research

01 / Background

From the web
to languages and tools.

I’m Robert DeVore, a software engineer, security researcher, open-source developer, and technical writer. I’ve spent more than 20 years building commercial products, publishing systems, and tools that help people do their work.

I started with PHP, WordPress, and publishing systems. Building plugins led to commercial products, along with the maintenance, support, and integrations that customers relied on.

I’ve worked independently and with agencies on custom software, security audits, performance, and ongoing support. That work shaped how I approach architecture and technical leadership: a system has to make sense to the people who run it, change it, and inherit it.

Today I build programming languages, developer tools, and systems for AI-assisted engineering. Kujo brings that work together. I want people to understand how their software works, verify its behavior, and maintain it long after launch.

From the archive: agency work and independent development · building a long-lived product.

  1. Foundation

    The open web

    PHP, WordPress, publishing workflows, and software built around real users.

  2. Ownership

    Products & teams

    Commercial plugins, client systems, maintenance, and the decisions that outlast a release.

  3. Investigation

    Security research

    Tracing trust boundaries, reporting vulnerabilities responsibly, and learning from failure.

  4. Current work

    Languages & tools

    Kujo, local applications, and inspectable infrastructure for AI-assisted engineering.

02 / Security research

I don’t just build software.
I find where it breaks.

My research examines how software handles untrusted input, enforces permissions, and fails when those checks are missing.

My published disclosures cover WordPress plugins, from cross-site scripting to authorization failures. I report findings through coordinated disclosure programs so maintainers can address them and users have a public record to consult.

40credited discoveries on Wordfence
Individually cross-checked against CVE Program records

Verified 21 October 2026: 40 discoveries map to 40 unique published CVE IDs. Patchstack’s 31 reports overlap this set; they are not an additional 31 discoveries.

Wordfence researcher profile · Patchstack researcher profile

Selected disclosures

Six examples from the verified disclosure record.

Explore all 40 verified disclosures

Scores are the assigning authority’s CVSS 3.1 assessments; dates are CVE Program publication dates. Wordfence may use different scores or publication dates. Each record links to the advisory and researcher credit. Download the sourced dataset (JSON).

03 / Open source & software

Software I’ve built.

Languages, local applications, and publishing tools from my current and earlier work.

Language / Current focus

Kujo

A programming language and ecosystem for AI-native software. My work extends from the language and runtime into SDKs, agent workflows, package infrastructure, static publishing, evaluation, and developer tools.

These are connected engineering problems: defining what a program may do, making its state visible, and giving people a way to check the result.

Explore KujoEcosystem source
Local knowledge

Strata

A local-first Markdown notes application with keyboard navigation, an optional AI assistant, and CLI and HTTP interfaces. A place to preserve decisions and context alongside the work.

Strata source ↗
Repository operations

RepoRadar

A local Git repository dashboard written in Kujo. It shows branch divergence, recent commits, file changes, and repository health in one place.

RepoRadar source ↗
Version-controlled content

DB Version Control

A WordPress plugin that saves content as JSON files for Git workflows. I created the project; WebDevStudios now maintains it.

DB Version Control source ↗
Desktop utilities

Snips

A local-first macOS text expander with an Electron library, SQLite storage, and a native Swift helper for expanding abbreviations across applications.

Snips source ↗
Content portability

Markdown Exporter

A WordPress plugin for exporting posts, pages, and custom content types into Markdown. A practical bridge between a publishing platform and files you can version, move, and reuse.

Markdown Exporter source ↗

Open source also means making room for the next maintainer. In 2025, WebDevStudios adopted 20 of my WordPress plugins. Explore more of my software.

04 / Writing, education & community

Build it.
Understand it.
Explain it.

Writing helps me explain how things work and gives others a way to build on what I’ve learned.

Read the field notes

I publish technical guides, project histories, release notes, and essays about the people and decisions behind software. The archive connects years of PHP and WordPress work with current language, tooling, and AI engineering projects.

Independent courses

My courses combine lessons with practical exercises to help you learn by building.

Independent educational resources. CPC is not affiliated with AAPC and awards no certification; Edge Academy is not affiliated with Cloudflare. Browse the course catalog.

05 / Engineering principles

Leave the system
easier to understand.

Make the boundaries explicit.
Know what an input can affect, which permissions an action needs, and where a person should stay in control.
Prefer evidence to assumptions.
Keep the inputs, checks, and results close enough that someone else can reproduce the work.
Choose clarity that lasts.
A smaller, understandable system is easier to secure and maintain. Documentation and useful errors belong in the design.
Build for the next person.
Good interfaces, open source, and honest handoffs help work remain useful after its original author moves on.

06 / Connect

Have a problem worth thinking through?

I’m interested in working with engineering teams, open-source contributors, and security researchers on difficult software problems. If that sounds like your work, let’s talk.

Get in touchFind me on GitHub ↗