Is it safe to let an AI touch my client sites?+
Every change an AI sends is inspected first: malware and backdoor patterns are refused, insecure code is sent back with the fix, and risky actions wait for your approval. The site checks the same rules again on its side, and Code Lock refuses installs and new code entirely until you unlock it.
Do I have to share admin passwords or hosting logins?+
No. You install the connector and press Connect; the site and your dashboard agree on a secret that only works for that one site. No password, FTP or hosting login is ever asked for.
If Sitecommand were hacked, would all my sites be exposed?+
Each site has its own secret, stored encrypted, and every request must carry a valid signature that the site checks. The site also refuses malware patterns and, when locked, installs and new code by itself, so those rules hold even if the hub were compromised.
Will the plugin slow my sites down?+
The connector only works when it receives a signed request from your dashboard; normal page views are left alone. On our test site it added no measurable time to page loads.
What does the plugin add to my site?+
The plugin itself, a small rescue file in mu-plugins so Fix site works when WordPress cannot start, and by default a sitecommand administrator that cannot sign in and is used only for dashboard requests. Delete or demote that user and Sitecommand loses access straight away.
What if an update or an AI change breaks a site?+
Plugin and theme updates make a restore point on the site, check the site afterwards and roll back by themselves if it stopped working. If a site shows WordPress's critical error, Fix site switches off the plugin or theme that crashed, even while the site is down.
Does Sitecommand make backups?+
No, not today. Updates keep a restore point of the plugin or theme they replace, and cleanup keeps every file it moves, but full-site backups still need your host or a backup plugin.
How quickly will I know when a site is down?+
Sites are checked every 5 minutes, and a failed check is retried before it counts. An outage that lasts 9 minutes is announced in Slack, Discord, Telegram or your webhook; shorter blips are recorded without waking you.
Can I get alerts by email?+
Not yet. Alerts go to Slack, Discord, Telegram or a signed webhook today; email is planned.
Can it fix a site that shows the critical error page?+
Yes. Rescue mode switches off the plugin or theme that crashed, even while WordPress cannot start, and keeps the error for you to read.
What does the malware cleanup delete?+
Nothing. Files move to a quarantine folder on the site and every step can be restored. Cleanup only runs when the account owner presses Run cleanup.
Which sites can I connect?+
WordPress sites through the Sitecommand Connector plugin (WordPress 6.0 or newer, PHP 7.4 or newer), and Node.js (Next.js, Express and others) or Laravel apps through a package. Shopify is not supported yet.
Does it support WordPress multisite?+
Not yet. Connect single sites; multisite networks have not been tested.
Do I need Claude or Cursor?+
No. The dashboard, alerts, updates, sweeps, rescue and the built-in assistant Commander work on their own. If you use Claude, Cursor or another AI that speaks MCP, connect it and it works on your sites through Sitecommand.
Which AI clients work?+
Claude (web, desktop and mobile), Claude Code, Cursor, VS Code with GitHub Copilot's agent mode, and any client that supports MCP over HTTP with sign-in.
Can I stop an AI client?+
Yes. Disconnect it in the dashboard and it loses access at once. You can also set a site to read-only, or lock it against installs and code.
Can my team and my clients use it?+
On an organization account, team members get read or edit access, and an AI they connect gets the same limits. Clients can get a simple view of their own sites, monthly reports and a status page.
Is it white-label?+
Reports, status pages and the client view carry your logo and colours. A custom domain for them and a white-labelled plugin are not available yet.
What does it cost?+
During launch every account is free with every feature, up to 10 sites. Paid plans come later and never meter actions: you pay for the number of sites, not for what you do on them.
Where is my data kept?+
The hub keeps your account, site addresses, encrypted site secrets, status history and the activity log. It never stores your sites' files or backups; restore points and quarantined files stay on each site. You can export or delete your account at any time.
What if I stop using Sitecommand, or Sitecommand goes away?+
Your sites keep running; nothing on them depends on the hub to serve pages. Disconnecting stops all access at once. Deleting the plugin also removes its settings, its rescue file and its sitecommand user; files it set aside in quarantine stay on the site so you can still restore them. A locked site can always be unlocked with one line in wp-config.php.
Keep reading
Related
The sites keep running.
So do you.
Connect your first site in two minutes. Free during launch.