WPBit.io
Log inStart free trial
FEATURES

Built for the work you repeat every week

Every feature exists because an agency told us how long it was taking them. Nothing here is a checkbox for a comparison table.

01 — UPDATES

Bulk plugin & theme updates

Group by plugin instead of by site. Push one version across 90 installs, or hold a site back when a client has custom code you don’t trust yet.

Visual regression check before and after each update
Automatic rollback when a check fails
Scheduled maintenance windows per client
Safe Update
Snapshot, verify, roll back on failure
Elementor
3.21.0 → 3.23.4
61 sites
WP Core
6.5.2 → 6.6
142 sites
Custom Client Theme
held back
3 sites
Backup timeline
S3 · eu-west-1
Incremental · 84 MB
today 14:00 UTC
Restore
Incremental · 61 MB
today 13:00 UTC
Restore
Full · 2.4 GB
Sun 02:00 UTC
Restore
02 — BACKUPS

Automated off-site backups

Hourly incrementals stored away from the host, so a compromised server never takes the recovery path with it. Bring your own S3, Backblaze or Google Cloud bucket.

Granular restore: files, database, or one table
Monthly automated restore tests, logged for audits
Clone any snapshot into a staging site
03 — SECURITY

Security & vulnerability scanning

We match every installed version against the CVE and WPScan feeds daily, then tell you which sites are actually affected and what the fix is.

Malware and file-integrity scanning
Abandoned-plugin warnings before they bite
Suspicious admin-user and login alerts
Vulnerabilities
2 open
CVE-2026-31884CRITICAL 9.1
Contact Form Pro — unauthenticated file upload
Affects 7 sites · patched in 4.2.1 · update available
CVE-2026-30217MEDIUM 5.4
Slider Deluxe — stored XSS in admin
Affects 2 sites · no patch yet · plugin deactivation suggested
Northlane Studio
JUNE 2026
Maintenance report
Updates shipped
48
Uptime
100%
Performance budget met on 92% of checks
04 — REPORTING

White-label client reporting

Retainers get renewed when clients can see the work. Schedule branded PDFs or a live client-facing dashboard on your own subdomain.

Your logo, colours and sending domain
Analytics, SEO and Core Web Vitals sections
Editable notes so the report sounds like you
05 — MONITORING

Uptime & performance monitoring

60-second checks from twelve regions, run outside our control plane so monitoring keeps working during our own incidents. Core Web Vitals are tracked per template, not just the homepage.

Slack, SMS and webhook alerts with escalation rules
SSL expiry, domain expiry and DNS change warnings
Public status pages on your own subdomain
Last 30 days
99.98% up
LCP
1.4s
INP
108ms
CLS
0.04
Clone to staging
northlane.studio
production
stg-northlane.wpbit.dev
free, not counted
Files and database copied · 2.4 GB
Search-replace on URLs, mail disabled
Password-protected, robots blocked
06 — STAGING

Staging and one-click clones

Spin a copy of any site from a backup snapshot to test a risky update or show a client a redesign. Staging sites are unlimited and never count against your plan.

Push selected changes back to production
Automatic teardown after 14 days of inactivity
Works with any host — no proprietary platform required
07 — TEAMS & API

Team roles, client access and a real API

Give contractors access to one client’s sites and nothing else. Give clients a read-only dashboard instead of a WordPress admin login. A public API for automating the rest is on the roadmap.

Unlimited seats, SSO/SAML and audit logs
Webhooks for updates, incidents and backups
Native Slack, Teams, Zapier and HubSpot apps
Read the API docs
POST/v1/updates/applyPLANNED
curl -X POST https://api.wpbit.io/v1/updates/apply \
  -H "Authorization: Bearer $WPBIT_TOKEN" \
  -d '{"group":"standard","safe_mode":true}'
 
# 202 Accepted
{ "batch": "btc_71ka", "sites": 88 }

The public API is on the roadmap. This endpoint is not available yet and the request above will not run today.

Included in every plan

The smaller things that quietly remove a day of work each month.

Site inventory

Search every install by plugin, theme, PHP or core version. Answer "which sites use this?" in one query.

Database optimisation

Scheduled cleanup of revisions, transients and orphaned tables, with a size delta per run.

Broken link & SEO checks

Weekly crawl for 404s, redirect chains and missing metadata, summarised in the client report.

One-click admin login

Jump into wp-admin without shared passwords. Every session is logged against your account.

Comment & spam queue

Moderate pending comments across the whole fleet from one list instead of site by site.

Uptime SLA credits

Exportable uptime evidence per client, so your own SLA promises are backed by data.

How teams put these features to work

Three workflows we see repeatedly, and the features each one leans on.

Productised care plans

A fixed monthly fee per site covering updates, backups, uptime and a report. The margin comes from batching, so update groups and scheduled reporting do the heavy lifting.

update groupsscheduled reportsuptime SLA evidence

WooCommerce and high-traffic stores

Updates are riskier and downtime is measurable in revenue. Freeze windows around retail seasons, hourly backups, granular table restore and one-minute uptime checks carry the load.

freeze calendartable restore60s checks

Inherited and rescued sites

Taking over someone else's WordPress means finding out what is installed, what is abandoned and what is already exposed before you touch anything.

fleet inventoryCVE matchingstaging clone

Feature FAQ

Specifics people email us about after reading this page.

Can I hold specific sites back from an update?

Yes. Sites can sit in a group such as "fragile" that receives the same batch a week later, after the wider fleet has proved it safe. Individual plugins can also be pinned per site.

What exactly does Safe Update check?

It takes a restore point, screenshots the three highest-traffic templates, applies the update, screenshots again, and compares. A layout or fatal-error difference triggers an automatic rollback and an alert.

Where are backups stored, and can I use my own bucket?

In EU or US regions of your choosing, encrypted with AES-256 before leaving your server. Agency Pro can route backups to your own S3, Backblaze B2 or Google Cloud Storage bucket, per client if needed.

How does vulnerability scanning differ from a security plugin?

A plugin tells you a CVE exists. WPBit matches every installed version across your fleet against the CVE and WPScan feeds daily and tells you which of your sites is exposed and what the fix is.

Do client reports work on my own domain?

Yes. Reports and live client dashboards are served from a CNAME you control, with your logo, colours and sending domain, and editable notes so the wording sounds like you.

Is there a staging environment?

Any backup snapshot can be cloned to a staging site with URLs rewritten and mail disabled. Staging sites are unlimited, free, and never count towards your plan limit.

Keep reading

Related pages for the decision you are actually making.

Pricing and site limitsWPBit alternativesManaged hostingDocs and API

See it against your own fleet

Connect five sites free for 14 days. If it does not save you a day in the first month, tell us and we will help you migrate back.

See pricingTalk to sales