Nikola Jocic

Founder @firephagehq | 10 years in web security & WAF systems | Protecting WordPress & WooCommerce at the edge. Building in public.

[Nikola Jocic @nikolajocicdev]

Just reserved my Cloudflare Wallet...🔶

Cloudflare is building the identity + payment layer for the agentic web: a stable handle tied to your account, so agents acting on your behalf can be verified and transact safely.

https://t.co/6nXRtKSXMp is going to be big!!

[Nikola Jocic @nikolajocicdev]

@levelsio @pieter Thanks @levelsio, just got mine!

[Nikola Jocic @nikolajocicdev]

This doesn't apply to Serbia. No one will sabotage you from setting up AC, except in Belgrade, where we have a new law that whoever has an external AC unit installed it needs to move it on a balcony but that law is still far from happening yet and it's not preventing you from having an AC, it just prevents you from setting up cables and hoses whenever you want, which is completely reasonable.

The stuff you're frustrated with are mostly related to Western Europe.

[BijanBowen @bijanbowen]

Had Claude Fable 5 log network packets and display them as cars on a highway, different car types = different packet types

[Defused @DefusedCyber]

🚨 cPanel CVE-2026-41940 post-exploit activities we have observed in the past 24 hours:

/json-api/listaccts - lists the accounts on the server
/json-api/system - chained with a command parameter to execute commands on the target
/json-api/version - returns cPanel and WHM version (attackers likely checking if exploit works)
/json-api/authorizesshkey - used by attackers to add their SSH keys onto the target
/json-api/passwd - used to modify an account's password

Track live cPanel exploit activity against our honeypots 🍯https://t.co/iRDhHlDkep

[Nikola Jocic @nikolajocicdev]

@ProductHunt WordPress security, done at the edge: https://t.co/aInsMuNlAK

[Nikola Jocic @nikolajocicdev]

@cinamarina Hey Marina... 👋 Let's connect!

[Nikola Jocic @nikolajocicdev]

@anupamrjp Meet https://t.co/aInsMuNlAK - edge security for WordPress & WooCommerce. 🔥

Spent 10+ years fixing hacked sites. Got tired of it. Built the prevention instead.

[Nikola Jocic @nikolajocicdev]

@delveroin Meet https://t.co/aInsMuNlAK - edge security for WordPress & WooCommerce. 🔥

Spent 10+ years fixing hacked sites. Got tired of it. Built the prevention instead.

[Nikola Jocic @nikolajocicdev]

@csaba_kissi https://t.co/aInsMuNlAK - WordPress Edge Security

[Nikola Jocic @nikolajocicdev]

@upen946 https://t.co/aInsMuNlAK - edge WAF + bot protection built specifically for WordPress and WooCommerce

[Nikola Jocic @nikolajocicdev]

@robert_shaw Launched https://t.co/aInsMuNlAK recently.

10+ years of cleaning up hacked sites eventually make you want to build something that actually solves the problem. 😂

[Nikola Jocic @nikolajocicdev]

@PLBompard https://t.co/aInsMuNlAK - Managed Edge WordPress Security

[Nikola Jocic @nikolajocicdev]

6 years ago I had the idea for this.

Today, FirePhage Security is live on the https://t.co/PcNmGe1R9g plugin directory.

Malware scanning, file integrity, brute-force protection, and health checks - free, directly from WordPress admin.

If you run WordPress or WooCommerce, install it: https://t.co/lyr9iELTQX

This one feels personal. 🔥

#WordPress #WordPressSecurity #malware #FirePhageSecurity

[FirePhage @firephagehq]

Our FirePhage Security is now live on https://t.co/CSlhiMvRzI!

Malware scanning, file integrity checks, brute-force protection, update visibility, health checks, and optional FirePhage dashboard sync for WordPress sites.

https://t.co/0uNFQXZYSW

#wordpress #security #malware

[Nikola Jocic @nikolajocicdev]

If you're vibecoding on a remote server and SSH with Codex/Claude Code, do yourself a favor:

• use tmux (persistent sessions = no pain)
• keep a clean memory.md
• split panes for logs/code/prompts

One disconnect and you’ll understand why 😄

#vibecoding #codex #claude #linux

[Nikola Jocic @nikolajocicdev]

@heyblake Hey Blake, looking forward to your feedback: https://t.co/aInsMuNlAK 👈

[Nikola Jocic @nikolajocicdev]

@JaykhatriDev Definitely! Building is easy part. You can build a solid product in weeks, but getting your first real users is where most people get stuck.

[Nikola Jocic @nikolajocicdev]

That's what I did with @firephagehq! Name, background, verified track record - all public at https://t.co/Ydbpe8xTkE page.

If you're asking someone to point their DNS at your product, the least you can do is prove you're a real human who won't abandon the project after a couple of months or ignore your support requests. #wordpress

[Freek Van der Herten @freekmurze]

Trying out a new app, and what immediately gives me confidence is that I see the name of a real human there, with a link to their track record.

This hints to me it's not AI slop, but somebody is proud of the app. This builds trust.

[Nikola Jocic @nikolajocicdev]

@TVanWelsenes Hey Thomas, let's connect!