Yes, for what Reflexa's agent actually does: four specific switches, each reversible with one click, and page text you read and approve before any of it publishes. Eight categories of action are blocked in code, not just policy, so it cannot touch your theme, your prices, your users, or any site but the one its token belongs to.
Two kinds of thing, and nothing outside them. First, four switches it flips
itself from inside the site, one click from you each: AI crawler access in
robots.txt, Organization structured data in the page head, the
sitemap, and an /llms.txt file built from your own page titles.
This is the smaller half of what
the Reflexa agent does on your site, and the
part most people worry about least, since none of it touches visible copy.
Second, for a handful of findings it writes the actual words, a page title, a search description, an answer-first opening paragraph, an FAQ block, and shows them to you in the dashboard exactly as they will appear. Nothing is sent until you press apply. On a coded site it hands you the words and the file they belong in instead, because there the text lives in your repository, not a database it can write to.
Yes, all of it. Turn a switch off and the site is exactly as it was before, since nothing is rewritten on the way back. A page edit lands as a WordPress revision with the previous value kept, so it can be restored exactly, the same way undoing any other edit in WordPress works.
Why it matters: reversibility is what turns a one-click change from a risk into a trial. You can switch something on, look at the result, and switch it back off with no trace left behind.
Eight categories, and they hold whatever you or anyone asks it, because they are enforced in the code itself. The software refuses the instruction and reports the refusal, rather than relying on a policy page nobody reads.
| Blocked category | What that rules out |
|---|---|
| Other software | Installing, updating, deleting or configuring other plugins or themes, or touching theme or PHP files |
| Accounts and infrastructure | Creating or changing users, passwords or roles, and changing your site URL, DNS, hosting or caching |
| Search visibility | Flipping noindex or "discourage search engines" on its own; it can only propose that change |
| Commerce and legal pages | Editing checkout, cart, account or legal pages, product data, or any page you mark as locked |
| Publishing and pricing | Publishing a new page, deleting content, or changing a price |
| Outbound communication | Emailing your customers or posting to your social accounts |
| Other sites | Acting on a site other than the one its token belongs to, even a second site on the same account |
| Spending | Spending money without a priced request you started, running in a loop, or retrying a paid step on its own |
No. The 23 structural checks behind all of this run from outside your site, in a free account and with no installation, because they only fetch your public pages the way a crawler would. See all 23 checks, one by one → Only applying a fix or writing page text for you needs the agent installed, and that part is on the paid plans.
No. It reads your public pages, your site's own published page list, and the requests AI engines make to your site. It never touches checkout, cart or account pages, never reads customer records, and never emails anyone, which is also why those pages sit inside the blocked category above rather than being left to judgment.
The switches stop applying and the site keeps whatever was last set, so turn each one off yourself first if you want it fully reverted. Your checks and everything the agent has recorded about the site stay in your Reflexa account either way.
None of the steps below require installing anything first:
Bottom line: the risk in letting software touch your site is usually what it might do that you did not see coming. Reflexa's agent narrows that to four reversible switches and a handful of approved words, with everything else blocked in code.
No. The four switches each need one click from you, and every word it writes is shown to you exactly as it will appear before anything is sent.
Yes. A switch turns off and the site returns to exactly how it was, and a page edit lands as a WordPress revision with the previous value kept, so it can be restored exactly.
Eight categories of action, enforced in code rather than promised in a policy: no theme, plugin or PHP edits, no user, password or DNS changes, no automatic noindex, no checkout, cart, account or price changes, no emails or social posts, and no acting on any site but the one its token belongs to.
No. The 23 structural checks run from outside your site, in a free account and with no installation. Only applying a fix or writing page text requires the agent to be installed.
No. It reads your public pages, your site's own published page list, and the requests AI engines make to it. It never touches checkout, cart or account pages, never reads customer records and never emails anyone.
The free check reads your site the way AI crawlers do and shows every finding with its evidence, no card and no install needed.