How I built a Zero-Trust WP Security System with Gemini AI & Cloud Run (BYOI Architecture)
Hi everyone, Antonio here. I’m a Lead Systems Architect with 25+ years of experience managing bare-metal infrastructure, KVM virtualization, and enterprise deployments.
I noticed a critical margin-killer for Web Agencies: burning hours on "forgot password" support tickets, and paying expensive monthly SaaS fees for bloated security plugins to fight off botnets.
So, I engineered a decoupled, Zero-Trust solution.
Enter Sovereign AI Overseer - Enterprise Edition (https://devnet-microsystems.com/auth/).
Here is the technical architecture:
1. Zero-Knowledge Passwordless Authentication
I completely deprecated the WordPress password field. It’s replaced with native WebAuthn/FIDO2 device enclaves (Face ID, Touch ID, Windows Hello). No passwords stored, no hashes to leak. Recovery is handled via a server-generated, one-way hashed 12-word BIP-39 cryptographic phrase.
2. Autonomous AI Sentinel on Google Cloud Run
I built a stateless security gateway that delegates threat analysis to an AI. When anomalous auth failures occur, the system sends the HTTP headers to a serverless container running Google Gemini 1.5 Pro. The AI deterministically analyzes the threat and autonomously bans the botnets via a 403 Forbidden firewall loop.
3. The BYOI / BYOK Business Model
Instead of charging a massive SaaS fee to cover AI compute costs, I implemented a Bring-Your-Own-Infrastructure model. Agencies use my 1-click GitHub integration to deploy the Cloud Run container to their own GCP account, and insert their own Gemini API Key (BYOK).
Cost of server idle time: $0.00.
Agency profit margin: 100%. Data sovereignty: Absolute.
This architecture was recently submitted for the Google Build with Gemini XPRIZE & Devpost Agentic Hackathons, and is now fully commercialized for high-ticket WP agencies via Freemius.
If you are an agency owner or CTO tired of credential stuffing and support tickets, check out the live demo and infrastructure breakdown here:
👉 https://devnet-microsystems.com/auth/
The Proof of Work:
If you want to see the architectural breakdown, the 4-minute technical pitch, and the original submission for the $500k Google Gemini Hackathon, you can review the public Devpost repository here:
👉 https://devpost.com/software/sovereign-auth-ai-operated-zero-trust-security
Always open to discussing bare-metal, Linux, or Zero-Trust architectures.
Cheers,
Antonio
Lead Architect, DEV-NET Microsystems
