The problem
You find out a site broke
when the client calls.
Agencies look after dozens of sites with tools that show a dashboard but do not watch, do not fix and do not tell you in time.
2:14 am
An automatic update takes a shop down
A plugin update leaves client-shop.com.au on WordPress's critical-error page. Nobody is awake.
7:40 am
The client emails first
“Our site is down and we have a sale today.” You find out from them, not from your tools.
9:05 am
You start opening tabs
wp-admin, the host, FTP, error logs. Forty sites, and you only know about this one because someone complained.
65%
of agencies name plugin and theme updates their top security challenge.
45%
of agencies with 100+ sites still update them one site at a time.
Source: WebPros, 2026 State of WordPress Agencies (210 agencies).
How it works
Noise in. What matters out.
Every site sends signals all day. Sitecommand checks them every few minutes and tells you only what needs you, worst first.
01
Connect
Install the plugin (WordPress) or the package (Node, Laravel) and press Connect. No passwords shared, a secret per site.
02
Watch
Uptime, malware sweeps, SSL and domains, updates and vulnerabilities, checked around the clock from stored history.
03
Act
Fix a dead site, update with rollback, lock code, clean a hack, or ask Commander and your own AI to do the work.
What it does
The boring work, done properly.
Everything an agency needs to keep sites up, safe and up to date, built so a broken update or a hack never becomes a lost weekend.
Rescue mode
When a plugin or theme takes a site down, Fix site switches it off and the site comes back. Works while WordPress shows its critical error.
Updates that check themselves
Every update gets a restore point and a check of the front page. If it breaks, it rolls back by itself.
Malware sweep and safe cleanup
A weekly sweep of files, users and settings. Cleanup moves files to quarantine, never deletes, and can be undone.
Code Lock
A locked site refuses plugin installs, code snippets and admin deletions, from anyone, until you unlock it.
Alerts that are worth reading
Uptime every few minutes, SSL and domain expiry, vulnerable plugins. Slack, Discord, Telegram or a webhook.
Commander
Ask “what needs my attention today?” and get the red things first, in plain words, with the button to fix each.
Client reports and status pages
A branded monthly report and a public status page per client, from the same data.
And the guard on every AI change.
Webshells, hidden admins and data leaks are refused before they reach the site.
Bring your own AI
Your Claude. Your Cursor. Every site.
Connect the AI you already pay for. It edits pages, fixes bugs and updates plugins across your fleet through Sitecommand, inside the limits you set. We sell the connection, flat: never per action, never per token.
- Works with Claude, Claude Code, Cursor, VS Code and any MCP client
- Read-only, content or full access, per site
- Commander, built in, answers questions about your fleet
Commander
What needs my attention today?
2 urgent.
client-shop.com.au is down after a plugin update. Fix site
dental-clinic.com sweep found malware. Plan cleanup
+ 3 warnings, 9 FYIs.
Recheck client-shop.com.au
Rechecking client-shop.com.au…
It is back up, answering in 0.6 s. The fatal came from a plugin update; Fix site switched it off.
Reads your Sitecommand data. Never changes a site by itself.
Why Sitecommand
Dashboards show. Sitecommand fixes.
Most site tools
Screenshots instead of real checks
No way back when an update breaks a site
A dead site needs FTP and a long night
Hacks found by the client
Priced per site, per action or per seat
Sitecommand
Every update verified, rolled back by itself if it breaks
Restore points on the site, quarantine instead of delete
Rescue mode brings a dead site back in one click
Weekly sweeps, alerts in minutes, Code Lock
One flat price, nothing metered
Integrations
Works with what you already use.
Pricing
Free while we launch.
Every feature, no card. Paid plans come later, priced by sites, never by what you do on them.
Launch
Now$0
Up to 10 sites, every feature.
- Uptime, alerts, SSL and domain watch
- Verified updates with rollback
- Malware sweeps, cleanup, Code Lock, rescue
- Commander and your own AI over MCP
- Client reports and status pages
More sites
ComingSoon
Need more than 10 sites, or a team?
Tell us what you would pay for from the wishlist in your dashboard. We build the most-wanted first and open paid plans when they are ready. Actions are never metered on any plan.
Join the wishlistFAQ
Questions agencies ask first.
Is it safe to let an AI touch my client sites?+
Every change an AI sends is inspected first: malware and backdoor patterns are refused, insecure code is sent back with the fix, and risky actions need your approval. Code Lock blocks installs and code entirely until you unlock. Each site checks a signature on every request.
What if an update or an AI change breaks a site?+
Updates make a restore point and roll back by themselves if the site stops working. If a site shows WordPress's critical error, Fix site switches off the plugin or theme that caused it, even while the site is down.
Do I need Claude or Cursor?+
No. The dashboard, alerts, updates, sweeps, rescue and Commander work on their own. If you use Claude, Cursor or another AI that speaks MCP, connect it and it can work on your sites through Sitecommand.
Which sites can I connect?+
WordPress sites through a small plugin, and Node (Next.js, Express and others) or Laravel apps through a package. Shopify comes later.
What does it cost?+
During launch every account is free with every feature, up to 10 sites. Paid plans come later and never meter actions: you pay for the number of sites, not for what you do on them.
Where is my data kept?+
Site secrets are encrypted at rest, each site has its own, and the hub never stores your sites' files or backups. You can export or delete your account at any time.
The sites keep running.
So do you.
Connect your first site in two minutes. Free during launch.