Websites and CMS
WordPress
What is happening on a client's WordPress site: posts out, posts scheduled, drafts waiting and pages changed.
WordPress is coming soon. We're finishing the last setup; until then it cannot be connected.
Free for 14 days. No credit card needed.
What it does
Connect WordPress to your client work.
- The content pipeline
Posts published in the last 30 days, posts scheduled and when they go out, drafts and posts pending review, and the last post.
A tile on the client's Overview - Recent changes
Pages updated in the last 30 days, and the newest posts when nothing is scheduled.
A tile on the client's Overview - Plugins
Active and inactive plugins, when the connected user is an Administrator. WordPress's API does not say which updates are waiting, so that is not shown.
A tile on the client's Overview
How it works
Connect once. It keeps itself current.
- 1Connect through the site
Type the site's address and approve BravaSpace on the site's own WordPress page. Or paste an application password.
- 2A fresh password, kept sealed
The password WordPress sends back is replaced at once with a new one made for BravaSpace, and only that one is kept.
- 3Match the client
One site is one client. A client's own site is matched to them by itself.
- 4About once a day
The site syncs again on the scheduled run once the last sync is a day old, or with Sync now.
Before you start
What you need.
- A self-hosted WordPress 5.6 or newer on https, reachable from the internet, with Application Passwords on (some hosts and security plugins turn them off).
- A user with the Editor role, or Administrator for the plugin list. A dedicated "BravaSpace" Editor user is best.
Setting it up
Where to find it.
- Easiest: press Connect through your site, type its address, log in to WordPress if asked, and approve BravaSpace.
- To paste instead: log in as the Editor or Administrator BravaSpace should use, open Users, then Profile.
- Under Application Passwords, type BravaSpace, press Add New Application Password and copy the password.
In the app, Connect WordPress opens a guided setup with Brava: it asks for each thing in turn, tests the connection and tells you it is working.
Data and privacy
What BravaSpace keeps, and what it can touch.
What is stored
The site address, the user name and the application password, encrypted (AES-GCM) in a table no browser can read, and the synced counts and post titles per client for 60 days.
Access
Read only today: BravaSpace reads post and page titles, dates and statuses, and the plugin list. It does not write anything. Sending an approved blog post as a draft is planned, and will happen only when you press Apply.
Disconnecting
Disconnect WordPress on its page: the password, the client match and the synced numbers are deleted here. Revoke "BravaSpace" under Users, Profile, Application Passwords to end it on the site too.
Questions
WordPress questions.
The content pipeline; recent changes; plugins. Read only today: BravaSpace reads post and page titles, dates and statuses, and the plugin list. It does not write anything. Sending an approved blog post as a draft is planned, and will happen only when you press Apply.
Open Connect WordPress in BravaSpace and paste the site address and user name and application password; Brava tests the connection before saving it. Easiest: press Connect through your site, type its address, log in to WordPress if asked, and approve BravaSpace. To paste instead: log in as the Editor or Administrator BravaSpace should use, open Users, then Profile. Under Application Passwords, type BravaSpace, press Add New Application Password and copy the password. Then match each client to their WordPress site.
The site address, the user name and the application password, encrypted (AES-GCM) in a table no browser can read, and the synced counts and post titles per client for 60 days.
Disconnect WordPress on the WordPress app page in BravaSpace: the password, the client match and the synced numbers are deleted here. Revoke "BravaSpace" under Users, Profile, Application Passwords to end it on the site too.
Brava reads the error and suggests the fix. The common ones: Application passwords are off on this site. Turn them on (the host or a security plugin such as Wordfence controls it), or ask the host for help. The site did not answer with its API at /wp-json/. Check the address, and that a security plugin does not block the REST API. Check the user name (the login, not the email) and the application password. If they are right, the host may strip the Authorization header.
Try it with one client.
Add some work. Share a file. Ask for feedback. See what your client sees, with your name on it. Free for 14 days. No credit card needed.