Skip to content
PluginCanary

For WordPress agencies

Know which client sites carry plugin risk, before your clients do

One dashboard for every plugin on every client site. Alerts when a plugin changes owner, gets closed or ships an unpatched vulnerability, with the sites affected and what to replace it with.

Start 14-day Agency trialSee pricing

No card needed. Founding offer: 40% off for life for the first 50 agencies.

The dashboard

2
Critical alerts
9
Warnings
1
Sites stale
12 min ago
Last sync
Plugins needing action
PluginStatusSitesTop signal
Example GalleryAvoid7Unpatched vulnerability, CVSS 8.1
Example Contact FormAt risk12Likely ownership transfer
Example RedirectsWatch5No release in 24 months
Example Footer NotesAvoid3Closed at author request
Example dashboard with sample plugins and sites.

Built for the jobs you already do

“Tell me the moment a plugin on any client site changes owner or gets closed.”

We watch Trac commits and wordpress.org daily and alert you within hours.

“Show me which client sites carry the most plugin risk.”

The dashboard ranks sites by their worst plugin, with counts by severity.

“Tell me which sites are affected and what to use instead.”

Every alert lists affected sites with installed versions and up to 3 healthier alternatives.

“Before I add a plugin to our stack, tell me if it is healthy.”

Check any plugin page or add it to your watchlist without a site.

Alerts where your team works

One alert per event, not one per site

Critical alerts reach email and Slack within minutes. Warnings arrive in a 07:00 digest in your timezone. Mark handled, snooze or mute, and every action is logged.

PluginCanary APP, 09:42
[Critical] Example Gallery has an unpatched vulnerability (7 of your sites)
Missing authorization, CVSS 8.1. No patched version after 14 days.
What to do: disable or replace. Healthier: Example Photo Grid (88), Example Gallery Blocks (85).
Example Slack alert. Plugin names are made up.

The connector plugin

Connect a site in two minutes

Install the free PluginCanary Connector (coming soon to wordpress.org), paste your site key, done. Prefer not to install anything? Paste a plugin list or upload a CSV.

What it sends

  • Site URL, WordPress version and PHP version
  • Whether the site is a multisite
  • Plugin slugs and versions, with active and auto-update status
  • Whether a plugin update is available

What it never sends

  • Posts, pages or any other content
  • Users, customers or orders
  • Files, database contents or credentials

Client reports Coming soon

A white-label monthly PDF for each client, showing the risks you caught and fixed. Proof of the work behind your maintenance fee.

How the connector works

Agency plan: $59 a month for 100 sites

Then $0.40 per extra site. 10 team members, Slack alerts, unlimited history. Try it free for 14 days.

Start free trialCompare plans