Securepress: Plugin-free WordPress security & uptime monitoring

Hey Product Hunt community! 👋

I'm the creator of SecurePress.

If you manage 10, 20, or 50+ WordPress sites for clients, you know the maintenance routine: either you spend hours logging into individual dashboards, or you install heavy management plugins that clutter client databases, slow down PHP execution, and introduce their own security risks.

With upcoming compliance frameworks like NIS2 holding agencies and service providers accountable for client security, we wanted a cleaner approach.

So we built SecurePress — an agency-grade security, uptime, and hardening cockpit that is 100% plugin-free.

How it works:

Instead of installing another third-party plugin on client servers, SecurePress connects directly via the native WordPress REST API and Application Passwords. You get full visibility in under 60 seconds without altering a single file on the client's site.

Key Capabilities:

- 1-Minute Uptime Tracking: Immediate alerts when a site goes down or SSL certificates are near expiration.

- Automated CVE Scans: Matches installed core, plugins, and themes against live vulnerability feeds (Wordfence Intelligence + WPScan fallback).

- Configuration & Server Hardening: Flags exposed debug.log files, open XML-RPC, missing security headers (HSTS/CSP), and newly created admin accounts.

- NIS2-Ready Audit History: Keeps verifiable maintenance logs and printable client-ready health reports.

The Pricing:

You can monitor 1 site permanently for free (no credit card required). Additional sites are just €3.99/site/month, making it affordable for solo freelancers and large agencies alike.

I’d love to hear your thoughts, feedback on the dashboard UX, or any specific edge cases you run into when managing multi-site portfolios!

Thanks for checking it out! 🚀