WordPress fleet security & maintenance

Every client WordPress site, patched, backed up, and under control.

PatchKeep gives agencies one console to monitor vulnerabilities, malware, updates, backups, access, and client reporting across their whole WordPress fleet.

Book a walkthrough
See product flow →
Built for 10 to 300+ sites·Backup-gated updates·No stored WordPress passwords
patchkeep.com/fleet DEMO
Fleet Vulnerabilities Backups Reports
68
Sites
7
Updates
2
Awaiting
1
Critical
100%
Backups
1 square = 1 site · sample data
SiteRiskUpdBackupLast scanOwnerAction
Harbor Point DentalHealthy0OK03:41 · retry queuedLeoView
Northwind Bakerywoocommerce-subscriptio…Updating3OK03:38 UTCSamMonitor
Cedarline StudioWarning1pending03:35 UTCPriyaReview
Summit Ridge OutfittersCritical7required03:29 UTCMayaApprove
Active case 2 min ago
WooCommerce Payments update requires approval
BACKUP VERIFIED
APPROVAL PENDING · TED
ROLLBACK RETAINED
Approve update
Assign

When security emails hit the inbox, the work is already late.

A vulnerability alert lands. Someone has to find the site, log in, check backups, decide whether the update is safe, apply it, test it, and remember to tell the client.

Without PatchKeep
Cloudways email lands
Patchstack warning
Manual wp-admin login
Backup plugin check
Spreadsheet note
Client follow-up, if there's time
→
With PatchKeep
Alert becomes a case
Site matched automatically
Risk scored
Backup verified
Owner assigned
Report logged

One console for the work agencies usually juggle manually.

Flagship Backup-gated updates

A verified backup runs before every risky update. Safe changes can proceed automatically; risky changes wait for approval.

Backup verified ▸ Risk checked ▸ Approval ▸ Applied ▸ Logged
Backup: Cloudways Rollback retained WooCommerce 8.9 → 8.9.3 Approval pending · Maya

Vulnerability intelligence

3 open
PluginSeveritySiteExploitOwner
Slider RevolutionCRITICALHarbor Pt.exploitedMaya
WooCommerce PayHIGHNorthwindpublic PoCSam
Contact Form 7MEDIUMCedarline StudiononeLeo

Malware triage

Suspicious file detected
wp-content/uploads/.cache.php
Evidence attached · quarantine requires approval · rollback point retained

Passwordless wp-admin

Single-use linkexpires 04:59
operator verified · 2FA ok
no password stored

White-label reporting

Every action becomes a branded report your client can read, with the approval trail attached.

YOUR LOGO
June 2026
24
Updates
6
Risks resolved
100%
Backups
approval trail included

From connected site to audited fix in four steps.

01
Connect

Install the signed connector once — by plugin, WP-CLI, or fleet-wide over SSH.

02
Detect

PatchKeep checks core, plugins, themes, malware signals, and backup status.

03
Gate

Risky actions wait behind verified backups and explicit approval.

04
Report

Every fix is logged and turned into a client-ready report.

connector · harbor-point-dental
Last heartbeat03:41 UTC
Connector0.11.22
WordPress6.5.5
PHP8.2
Backup providerCloudways
SignatureHMAC verified

Real cases, real gates, one place to work.

PatchKeep turns vulnerabilities, malware findings, failed backups, and risky updates into assigned cases with clear gates.

patchkeep.com/cases
Fleet OverviewActive CasesUpdate QueueReports
CaseSiteSeverityStatus
WooCommerce Payments update requires approvalNorthwindHIGHawaiting
Slider Revolution exploited in the wildHarbor PointCRITICALopen
Unknown file change in uploads directoryCedarline StudioWARNINGinvestigating
Backup failed on managed hostSummit RidgeCRITICALblocked
Case detail2 min ago
WooCommerce Payments update requires approval
PATCH AVAILABLE
BACKUP VERIFIED
ROLLBACK RETAINED
SMOKE TEST REQUIRED
APPROVAL PENDING · TED
Approve update
Assign owner

Connects to the stack agencies already run.

Hosting & WordPress
WordPress coreversion scan
WP-CLIone-line installs
Managed hostsbackup detection
Security & edge
Cloudflareedge & DNS checks
Vulnerability feedslive CVE matching
Malware scannerintegrity checks
Team workflow
Email notificationscases to your team
Webhookspipe events anywhere
Two-factor authoperator identity
Storage & reporting
S3 / object storagebackup evidence
White-label reportsyour branding
Client email deliverystraight to clients

Security is built into every action.

PatchKeep is designed so one mistake cannot cascade across a whole fleet. Risky changes are signed, gated, logged, and reversible.

No WordPress passwords stored
Access uses signed, single-use links.
Backup required before risky updates
Updates are blocked until a valid rollback point exists.
Approval trail for destructive actions
Quarantine and risky changes require explicit approval.
audit-log · summit-ridge-outfitters
2026-07-08 03:41 UTC · update.request · woocommerce 8.9 → 8.9.3 · requires backup + approval
2026-07-08 03:42 UTC · backup.verified · summit-ridge-outfitters · sha256 ok
2026-07-08 03:44 UTC · approval.signed · operator m.chen · 2FA ok
2026-07-08 03:45 UTC · update.applied · rollback point retained
2026-07-08 03:46 UTC · report.logged · client maintenance report updated

Show clients the work they never see.

PatchKeep turns maintenance work into clean white-label reports your clients can understand.

Useful for monthly retainers, client trust, and proving maintenance work.

YOUR LOGO
Maintenance · June 2026
Summit Ridge Outfitters · site health summary
24
Updates completed
6
Vulnerabilities resolved
100%
Backups verified
1
Malware finding reviewed
approval trail · 4 sign-offsPrepared by your agency

Questions agencies ask before connecting a fleet.

Will this work with my hosting setup?

Almost certainly. PatchKeep connects through a signed plugin on standard WordPress, so it behaves the same on shared hosting, managed hosts, a VPS, or your own servers.

What happens if an update breaks a site?

Every risky update runs behind a verified backup with a retained rollback point. If something breaks, one click restores the previous state.

Do you store WordPress passwords?

No. Access uses single-use signed links with 2FA, and secrets are encrypted at rest. Passwords never leave the site.

How long does it take to add a site?

About a minute. Install the connector by plugin or WP-CLI, and PatchKeep auto-discovers plugins, themes, core, and backup status.

Can I brand reports for clients?

Yes. White-label reports carry your logo, go out on your schedule, and include the full approval trail.

Can PatchKeep handle hundreds of sites?

Yes. The console is built for fleets, from a dozen sites to several hundred, with owners and cases to keep work assigned.

Ready to see every client site in one place?

Book a walkthrough and see how PatchKeep handles vulnerabilities, backups, updates, access, and reporting across your fleet.

Book a walkthrough
View product flow
Example fleet status
sites monitored68
updates pending7
awaiting approval2
backups verified100%