{"summary":{"analyzed":true,"build_worthy":false,"build_worthy_family_key":"integration-api-ops","build_worthy_family_name":"API and integration reliability operations","build_worthy_reason":"This row is supporting evidence for the linked opportunity family; use the family card, not this row, for the build decision.","build_worthy_scope":"opportunity_family","comments_returned":2,"commercial_card_missing_count":0,"commercial_card_status":"complete","commercial_context_status":"linked_opportunity","commercial_context_status_label":"Evidence linked to opportunity","evidence_context_status":"linked_opportunity","evidence_context_status_label":"Evidence linked to opportunity","evidence_role":"supports_opportunity_family","evidence_role_label":"Evidence supporting opportunity family","evidence_role_reason":"This row is supporting evidence for the linked opportunity family; use the family card, not this row, for the build decision.","intelligence_role":"supporting_evidence","intelligence_role_label":"Supporting evidence","is_build_worthy":false,"opportunity_context_status":"linked_opportunity","opportunity_context_status_label":"Evidence linked to opportunity","opportunity_decision_status":"supporting_evidence","opportunity_decision_status_label":"Supporting evidence","opportunity_relevance":0.86,"plugin_name":"Disable XML-RPC Pingback","promotion_reason":"This row is supporting evidence linked to a commercial opportunity family, not the build-worthy opportunity itself.","promotion_status":"linked_opportunity","promotion_status_label":"Evidence linked to opportunity","recommendation_role":"evidence_input","recommendation_role_label":"Evidence input","reply_count":2,"row_is_build_worthy":false,"row_is_opportunity":false,"row_role":"supporting_evidence","row_role_label":"Supporting evidence","sentiment":"complaint","severity":"medium","slug":"disable-xml-rpc-pingback","source":"support","source_link_count":2,"url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","worth_validating":false,"source_count":0,"source_evidence_summary":{"total":30,"source_evidence_rows":2,"source_link_rows":2,"source_count_only_rows":0,"missing_source_evidence_rows":28,"source_evidence_not_applicable_rows":0,"source_link_coverage_percent":6.7,"evidence_required_rows":0,"evidence_required_rows_missing_source_links":0,"build_worthy_rows_missing_source_links":0,"decision_rows_missing_source_links":0,"missing_source_examples":[]},"commercial_readiness":{"total":30,"validation_ready":0,"core_validation_ready_rows":0,"family_wide_validation_ready_rows":0,"core_only_validation_ready_rows":0,"validation_scope_status":"not_ready","validation_scope_label":"Not ready","validation_scope_warning":"","validation_scope_counts":[{"scope":"not_validation_ready","label":"Not validation-ready","count":30}],"blocker_count":30,"caution_count":0,"status_counts":[{"status":"needs_thesis_sharpening","label":"Needs thesis sharpening","count":29},{"status":"research_first","label":"Research first","count":1}],"blocker_counts":[{"label":"Commercial gate not complete: investigate pain","count":29},{"label":"Outside proof is partial for this family.","count":1}],"caution_counts":[],"ready_for_buyer_validation":0,"needs_external_proof":0,"needs_family_proof":0,"needs_report":0,"needs_thesis_detail":0,"needs_thesis_sharpening":29,"research_first":1,"research_only":0,"hold":0,"unclassified":0,"core_wedge_validation_ready_rows":0,"full_family_validation_ready_rows":0,"scope_limited_validation_rows":0,"full_family_claim_ready_rows":0,"validation_claim_scope_policy":"Core-only validation rows are worth buyer testing, but they must not be presented as full-family commercial opportunities until family_wide_validation_ready is true."},"commercial_readiness_summary":{"status":"research_first","label":"Research first","validation_ready":false,"family_key":"integration-api-ops","family_name":"API and integration reliability operations","decision_bucket":"investigate_pain","decision_bucket_label":"Investigate Pain","proof_status":"partial","proof_status_label":"Partial proof","commercial_gate_status":"complete","commercial_gate_label":"Gate complete","commercial_gate_passed":7,"commercial_gate_total":7,"commercial_card_status":"complete","commercial_card_complete":true,"commercial_card_missing_count":0,"blockers":["Outside proof is partial for this family."],"blocker_count":1,"cautions":[],"caution_count":0,"next_action":"Sharpen the buyer, pain, and paid workflow around monitor xml API failures, payload drift, webhook issues, and external handoff risk; interview developers before validation.","dossier_url":"/opportunities/families/integration-api-ops/dossier","dossier_api_url":"/api/opportunities/families/integration-api-ops/dossier"},"readiness_summary":{"status":"research_first","label":"Research first","validation_ready":false,"family_key":"integration-api-ops","family_name":"API and integration reliability operations","decision_bucket":"investigate_pain","decision_bucket_label":"Investigate Pain","proof_status":"partial","proof_status_label":"Partial proof","commercial_gate_status":"complete","commercial_gate_label":"Gate complete","commercial_gate_passed":7,"commercial_gate_total":7,"commercial_card_status":"complete","commercial_card_complete":true,"commercial_card_missing_count":0,"blockers":["Outside proof is partial for this family."],"blocker_count":1,"cautions":[],"caution_count":0,"next_action":"Sharpen the buyer, pain, and paid workflow around monitor xml API failures, payload drift, webhook issues, and external handoff risk; interview developers before validation.","dossier_url":"/opportunities/families/integration-api-ops/dossier","dossier_api_url":"/api/opportunities/families/integration-api-ops/dossier"},"cache_source":"durable_research_stale","cache_age_seconds":9673,"payload_mode":"compact","full_payload_url":"/api/evidence/source?full=true&compact_schema=evidence-source-v2&url=https%3A//wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/&comment_limit=80&text_limit=12000","row_key":"rows","source_row_key":"rows","rows_shown":1,"comments_shown":2,"evidence_summary":{"total":1,"source_evidence_rows":0,"source_link_rows":1,"source_count_only_rows":0,"missing_source_evidence_rows":0,"source_evidence_not_applicable_rows":0,"source_link_coverage_percent":100.0,"evidence_required_rows":0,"evidence_required_rows_missing_source_links":0,"build_worthy_rows_missing_source_links":0,"decision_rows_missing_source_links":0,"missing_source_examples":[]}},"rows":[{"section":"source","row_type":"source","url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","slug":"disable-xml-rpc-pingback","plugin_name":"Disable XML-RPC Pingback","source":"support","sentiment":"complaint","severity":"medium","opportunity_relevance":0.86,"reply_count":2,"comments_returned":2,"analyzed":true,"source_link_count":2,"title":"XML-RPC Attack Haven't Stopped After Installing Plugin","author":"thita","published_at":"2015-05-02T15:24:00+00:00","resolved":false,"collected_at":"2026-05-29T02:51:19+00:00","intent":"problem_report","affected_feature":"compatibility","summary":"XML-RPC Attack Haven't Stopped After Installing Plugin: users show compatibility, support, setup pain that may indicate a product gap.","evidence_quote":"XML-RPC Attack Haven't Stopped After Installing Plugin Samuel, one of our sites have been under an xml-rpc attack, so I installed this plugin five days ago.","confidence":0.68,"analyzed_at":"2026-05-29T02:53:15+00:00","market_key":"xml","market_name":"Xml","market_url":"/markets/xml","opportunity_url":"/opportunities/xml","family_key":"integration-api-ops","family_name":"API and integration reliability operations","opportunity_family_key":"integration-api-ops","opportunity_family_name":"API and integration reliability operations","buyer":"developers, agencies, and SaaS-integrated WordPress teams","what_to_build":"Xml integration reliability for keeping WordPress APIs, connectors, and data handoffs reliable","urgent_problem":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","problem":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","competitor_gap":"Gap to test: can buyers monitor xml API failures, payload drift, webhook issues, and external handoff risk before API, connector, and external handoff reliability risk. pain: API endpoint or connector reliability risk (14 signals). weak-incumbent evidence gives 90 teardown...","proof_support":"Proof base: partial outside proof of paid demand, paid-adjacent plugin or pricing signals, repeated WordPress pain, and weak incumbent coverage around keeping WordPress APIs, connectors, and data handoffs reliable.","needs_validation":"Outside proof is partial for this family.","what_still_needs_validation":"Outside proof is partial for this family.","commercial_attractiveness":"Commercial pull comes from developers: API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics. The first paid wedge is to monitor xml API failures, payload drift, webhook issues, and external handoff risk. Revenue...","first_validation_wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","mvp_wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","decision_bucket":"investigate_pain","decision_bucket_label":"Investigate Pain","row_role":"supporting_evidence","recommendation_role":"evidence_input","evidence_role":"supports_opportunity_family","promotion_status":"linked_opportunity","promotion_status_label":"Evidence linked to opportunity","promotion_reason":"This row is supporting evidence linked to a commercial opportunity family, not the build-worthy opportunity itself.","is_build_worthy":false,"worth_validating":false,"build_worthy_scope":"opportunity_family","build_worthy_family_key":"integration-api-ops","opportunity_decision_status":"supporting_evidence","body_summary":"Samuel, one of our sites have been under an xml-rpc attack, so I installed this plugin five days ago. However I see that the xml-rpc file is still being attacked. I figured this has to do with some of the attackers...","issue_labels":["compatibility","support","setup","easy"],"source_links":[{"source_url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","original_url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","source_page_url":"/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fxml-rpc-attack-havent-stopped-after-installing-plugin%2F","source_api_url":"/api/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fxml-rpc-attack-havent-stopped-after-installing-plugin%2F"}]}],"plugin":{"active_installs":60000,"api_url":"/api/plugins/disable-xml-rpc-pingback","downloaded":425936,"name":"Disable XML-RPC Pingback","rating":78.0,"slug":"disable-xml-rpc-pingback","tags":["ddos","pingback","rpc","xml","xml-rpc"],"url":"/plugin/disable-xml-rpc-pingback"},"conversation":{"url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","slug":"disable-xml-rpc-pingback","source":"support","title":"XML-RPC Attack Haven't Stopped After Installing Plugin","author":"thita","published_at":"2015-05-02T15:24:00+00:00","resolved":false,"reply_count":2,"collected_at":"2026-05-29T02:51:19+00:00","body_summary":"Samuel, one of our sites have been under an xml-rpc attack, so I installed this plugin five days ago. However I see that the xml-rpc file is still being attacked. I figured this has to do with some of the attackers already having access to the file-path from prior to..."},"analysis":{"affected_feature":"compatibility","analyzed_at":"2026-05-29T02:53:15+00:00","complaint_types":["compatibility","support","setup"],"confidence":0.68,"conversation_url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","evidence_quote":"XML-RPC Attack Haven't Stopped After Installing Plugin Samuel, one of our sites have been under an xml-rpc attack, so I installed this plugin five days ago.","intent":"problem_report","issue_labels":["compatibility","support","setup","easy"],"model":"heuristic-v1","opportunity_relevance":0.86,"praise_types":["easy","support","value"],"sentiment":"complaint","severity":"medium","slug":"disable-xml-rpc-pingback","source":"support","summary":"XML-RPC Attack Haven't Stopped After Installing Plugin: users show compatibility, support, setup pain that may indicate a product gap."},"comments":[{"position":1,"author":"Samuel Aguilera","published_at":"2015-05-02T16:39:00+00:00","body_summary":"Hi, The purpose of the plugin is to remove the pingback methods from XML-RPC interface, as mentioned in a previous support thread this don’t have any relation with the fact that your attackers are still accessing to..."},{"position":2,"author":"thita","published_at":"2015-05-02T16:52:00+00:00","body_summary":"Samuel, thanks for the quick response. I will wait a few more days to see if the attacks diminish, and if not, I will ask my server’s tech support for help. I was just hoping this plugin will discourage them and..."}],"source_links":[{"source_url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","original_url":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","source_page_url":"/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fxml-rpc-attack-havent-stopped-after-installing-plugin%2F","source_api_url":"/api/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fxml-rpc-attack-havent-stopped-after-installing-plugin%2F"},{"source_url":"https://wordpress.org/plugins/disable-xml-rpc-pingback/","url":"https://wordpress.org/plugins/disable-xml-rpc-pingback/","original_url":"https://wordpress.org/plugins/disable-xml-rpc-pingback/","source_page_url":"/plugin/disable-xml-rpc-pingback","source_api_url":"/api/plugins/disable-xml-rpc-pingback"}],"source_link_count":2,"market_key":"xml","market_name":"Xml","market_url":"/markets/xml","opportunity_url":"/opportunities/xml","opportunity_card":{"key":"integration-api-ops","name":"API and integration reliability operations","family_key":"integration-api-ops","family_name":"API and integration reliability operations","family_label":"API and integration reliability operations","display_name":"API and integration reliability operations","opportunity_name":"API and integration reliability operations","opportunity_label":"API and integration reliability operations","decision_bucket":"investigate_pain","commercial_readiness_status":"research_first","commercial_readiness_label":"Research first","validation_ready":false,"is_build_worthy":false,"row_role":"opportunity_family","recommendation_role":"commercial_opportunity_candidate","buyer":"developers, agencies, and SaaS-integrated WordPress teams","who_buys":"developers, agencies, and SaaS-integrated WordPress teams","primary_buyer_segment":"developers","urgent_problem":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","problem":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","pain":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","what_to_build":"Xml integration reliability for keeping WordPress APIs, connectors, and data handoffs reliable","weak_competitor_names":["API and integration reliability operations for that exact for"],"competitor_teardown_targets":["API and integration reliability operations for that exact for"],"competitor_targets":["API and integration reliability operations for that exact for"],"weak_competitor_summary":"Weak competitor(s) to inspect: API and integration reliability operations for that exact for.","competitor_target_summary":"Weak competitor(s) to inspect: API and integration reliability operations for that exact for.","first_validation_wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","mvp_wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","source_count":3,"source_link_count":3,"next_action":"Sharpen the buyer, pain, and paid workflow around monitor xml API failures, payload drift, webhook issues, and external handoff risk; interview developers before validation.","family_dossier_url":"/opportunities/families/integration-api-ops/dossier","opportunity_family_dossier_url":"/opportunities/families/integration-api-ops/dossier","family_dossier_api_url":"/api/opportunities/families/integration-api-ops/dossier","opportunity_family_dossier_api_url":"/api/opportunities/families/integration-api-ops/dossier","urls":{"dossier":"/opportunities/families/integration-api-ops/dossier","family":"/opportunities?family=integration-api-ops"},"api_urls":{"dossier":"/api/opportunities/families/integration-api-ops/dossier","family":"/api/opportunities/families?family=integration-api-ops"},"family_url":"/opportunities?family=integration-api-ops","opportunity_family_url":"/opportunities?family=integration-api-ops","opportunity_family_api_url":"/api/opportunities/families?family=integration-api-ops","commercial_gate_status":"complete","commercial_gate_label":"Gate complete","commercial_card_status":"complete","commercial_card_missing_count":0},"commercial_card_summary":{"status":"complete","status_label":"complete","missing_count":0,"passed":9,"required":9,"summary":{}},"commercial_card_checklist":[{"key":"what_to_build","label":"What to build","passed":true,"status":"pass","detail":"Xml integration reliability for keeping WordPress APIs, connectors, and data handoffs reliable"},{"key":"specific_buyer","label":"Specific buyer","passed":true,"status":"pass","detail":"developers, agencies, and SaaS-integrated WordPress teams"},{"key":"urgent_problem","label":"Urgent problem","passed":true,"status":"pass","detail":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics."},{"key":"competitor_gap","label":"Competitor gap","passed":true,"status":"pass","detail":"Gap to test: can buyers monitor xml API failures, payload drift, webhook issues, and external handoff risk before API, connector, and external handoff reliability risk. pain: API endpoint or connector reliability risk (1"}],"family_key":"integration-api-ops","family_name":"API and integration reliability operations","opportunity_family_key":"integration-api-ops","opportunity_family_name":"API and integration reliability operations","buyer":"developers, agencies, and SaaS-integrated WordPress teams","what_to_build":"Xml integration reliability for keeping WordPress APIs, connectors, and data handoffs reliable","urgent_problem":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","problem":"API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics.","competitor_gap":"Gap to test: can buyers monitor xml API failures, payload drift, webhook issues, and external handoff risk before API, connector, and external handoff reliability risk. pain: API endpoint or connector reliability risk (14 signals). weak-incumbent evidence gives 90 teardown signal(s). Entry wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk.","proof_support":"Proof base: partial outside proof of paid demand, paid-adjacent plugin or pricing signals, repeated WordPress pain, and weak incumbent coverage around keeping WordPress APIs, connectors, and data handoffs reliable.","needs_validation":"Outside proof is partial for this family.","what_still_needs_validation":"Outside proof is partial for this family.","commercial_attractiveness":"Commercial pull comes from developers: API and connector failures break automations, external apps, and reporting without giving teams clear diagnostics. The first paid wedge is to monitor xml API failures, payload drift, webhook issues, and external handoff risk. Revenue can come from endpoint monitoring, integration test limits, alerting, logs, team controls, and developer-ready diagnostics.","first_validation_wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","mvp_wedge":"monitor xml API failures, payload drift, webhook issues, and external handoff risk","decision_bucket":"investigate_pain","decision_bucket_label":"Investigate Pain","api_urls":{"evidence":"/api/evidence?slug=disable-xml-rpc-pingback","market":"/markets/xml","opportunity":"/opportunities/xml","plugin":"/api/plugins/disable-xml-rpc-pingback","source":"/api/evidence/source?url=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fxml-rpc-attack-havent-stopped-after-installing-plugin%2F","wordpress":"https://wordpress.org/support/topic/xml-rpc-attack-havent-stopped-after-installing-plugin/","family":"/api/opportunities/families?family=integration-api-ops","dossier":"/api/opportunities/families/integration-api-ops/dossier"},"commercial_readiness":{"total":30,"validation_ready":0,"core_validation_ready_rows":0,"family_wide_validation_ready_rows":0,"core_only_validation_ready_rows":0,"validation_scope_status":"not_ready","validation_scope_label":"Not ready","validation_scope_warning":"","validation_scope_counts":[{"scope":"not_validation_ready","label":"Not validation-ready","count":30}],"blocker_count":30,"caution_count":0,"status_counts":[{"status":"needs_thesis_sharpening","label":"Needs thesis sharpening","count":29},{"status":"research_first","label":"Research first","count":1}],"blocker_counts":[{"label":"Commercial gate not complete: investigate pain","count":29},{"label":"Outside proof is partial for this family.","count":1}],"caution_counts":[],"ready_for_buyer_validation":0,"needs_external_proof":0,"needs_family_proof":0,"needs_report":0,"needs_thesis_detail":0,"needs_thesis_sharpening":29,"research_first":1,"research_only":0,"hold":0,"unclassified":0,"core_wedge_validation_ready_rows":0,"full_family_validation_ready_rows":0,"scope_limited_validation_rows":0,"full_family_claim_ready_rows":0,"validation_claim_scope_policy":"Core-only validation rows are worth buyer testing, but they must not be presented as full-family commercial opportunities until family_wide_validation_ready is true."},"readiness_summary":{"total":30,"validation_ready":0,"core_validation_ready_rows":0,"family_wide_validation_ready_rows":0,"core_only_validation_ready_rows":0,"validation_scope_status":"not_ready","validation_scope_label":"Not ready","validation_scope_warning":"","validation_scope_counts":[{"scope":"not_validation_ready","label":"Not validation-ready","count":30}],"blocker_count":30,"caution_count":0,"status_counts":[{"status":"needs_thesis_sharpening","label":"Needs thesis sharpening","count":29},{"status":"research_first","label":"Research first","count":1}],"blocker_counts":[{"label":"Commercial gate not complete: investigate pain","count":29},{"label":"Outside proof is partial for this family.","count":1}],"caution_counts":[],"ready_for_buyer_validation":0,"needs_external_proof":0,"needs_family_proof":0,"needs_report":0,"needs_thesis_detail":0,"needs_thesis_sharpening":29,"research_first":1,"research_only":0,"hold":0,"unclassified":0,"core_wedge_validation_ready_rows":0,"full_family_validation_ready_rows":0,"scope_limited_validation_rows":0,"full_family_claim_ready_rows":0,"validation_claim_scope_policy":"Core-only validation rows are worth buyer testing, but they must not be presented as full-family commercial opportunities until family_wide_validation_ready is true."},"evidence_summary":{"total":1,"source_evidence_rows":0,"source_link_rows":1,"source_count_only_rows":0,"missing_source_evidence_rows":0,"source_evidence_not_applicable_rows":0,"source_link_coverage_percent":100.0,"evidence_required_rows":0,"evidence_required_rows_missing_source_links":0,"build_worthy_rows_missing_source_links":0,"decision_rows_missing_source_links":0,"missing_source_examples":[]},"cache":{"source":"durable_research_stale","generated_at":"2026-06-10T15:41:35+00:00","age_seconds":9673},"row_role":"supporting_evidence","recommendation_role":"evidence_input","evidence_role":"supports_opportunity_family","promotion_status":"linked_opportunity","promotion_status_label":"Evidence linked to opportunity","promotion_reason":"This row is supporting evidence linked to a commercial opportunity family, not the build-worthy opportunity itself.","is_build_worthy":false,"worth_validating":false,"build_worthy_scope":"opportunity_family","build_worthy_family_key":"integration-api-ops","opportunity_decision_status":"supporting_evidence"}