Most agency owners managing client WordPress sites eventually hit the same wall: the tool that handles backups well is weak on security, the one with solid uptime alerts can’t be trusted with a restore, and stitching together five separate plugins to cover everything ends up costing more time than it saves.
WP Remote was built specifically to close that gap, growing out of the team behind BlogVault and MalCare, and it now serves more than 25,000 customers across 120 countries.
Here’s a full look at what’s under the hood — backups, security, staging, the newer visual regression and AI/API layers — plus how the pricing actually breaks down.
Where WP Remote Came From
The company’s origin traces back to 2010, when founder Akshat Choudhary — then working on networking infrastructure at Citrix — noticed that Jeff Atwood’s programming blog, Coding Horror, went down with no proper backup to fall back on, saved only by cached copies.
That gap led Choudhary into WordPress, first building BlogVault as a dedicated backup and security service, then MalCare as its malware-scanning offshoot, and later Migrate Guru to solve the pain of site migrations.
WP Remote is the product that ties all three disciplines — backup, security, and migration — into a single dashboard built for managing many sites at once, rather than requiring agencies to run separate tools for each function.
Backups Built for Scale, Not Just Safety
WP Remote’s backup system is incremental — after the first full backup, it only copies what’s changed, avoiding the bloated zip files that slow down a server on every backup cycle.
It handles large installs comfortably, including sites up to roughly 300GB with databases over 50GB, and every backup is stored in two separate copies on GDPR-compliant, encrypted servers across Europe, with an additional copy pushed to independent cloud storage for redundancy.
Restoration is designed to be fast rather than just possible: differential restores only copy back what actually changed, so recovering a large site doesn’t take hours the way a full re-upload would. You’re not limited to an all-or-nothing restore either — individual plugins, themes, database tables, or even a single subsite in a WordPress Multisite install can be restored selectively.
History goes back up to 365 days, with a changelog between backup points so you can pinpoint exactly which version to roll back to. For WooCommerce stores, real-time backups capture every order as it happens, so a crash between backup cycles can’t wipe out sales data. One-click migration between hosts, or from a staging/dev environment to production, is included as well, with search-and-replace handled automatically.
Security: Firewall, Scanning, and Instant Cleanup
WP Remote’s security stack runs on three detection layers working together rather than a single scanning method: signature matching (comparing files against a continuously updated malware database — the same core method used by tools like Wordfence, but run off-server so it doesn’t load the client’s hosting), integrity checking, and AI-driven behavioral analysis trained to catch variants that don’t match any known signature, including AI-generated malware.
The scan reaches further than most competitors on paper — it covers WordPress core files, free and premium plugin/theme files, the uploads folder, custom database tables, cron jobs, and supply-chain-style modifications where a plugin itself has been tampered with.
Because scanning runs entirely on WP Remote’s own infrastructure rather than the client’s server, it adds no CPU, memory, or I/O load to the site being scanned — a meaningful difference from on-server scanners that compete for the same resources as normal site traffic.
Published figures put the false-positive rate at 0.2% across scans, with more than 2 million files scanned daily, detection typically completing in under 3 minutes, and roughly 2,100 sites cleaned per month.
When a scan finds something, one-click cleanup is available (as a paid add-on, or bundled depending on plan), with each finding listed by severity and location before anything is removed. If automated cleanup can’t fully resolve an infection, the dashboard shows a partial status rather than a false all-clear, and the security team steps in manually at no extra per-site charge.
An integrated web application firewall blocks brute-force and bot traffic in real time using a shared threat-intelligence network, and vulnerability alerts flag known-exploitable plugins or themes before an attacker finds them.
Staging Environments
Every connected site can get a one-click staging clone, hosted on WP Remote’s own staging servers rather than requiring space on the client’s hosting account. Staging sites come with SSL by default, can be password-protected to keep them private, and include SFTP access plus a bundled phpMyAdmin instance for direct database work.
Google is blocked from indexing staging URLs automatically, so a forgotten staging clone can’t end up competing with the live site in search results. Once changes are tested, a Smart Merge tool lets you review the differences between staging and live and selectively pull specific changes back to production, rather than overwriting the live site wholesale.
Visual Regression Testing
WP Remote’s visual regression (VR) engine is built to solve a problem most screenshot-comparison tools handle poorly at agency scale: distinguishing a genuine visual break from ordinary page motion like a rotating slider or a lazy-loaded image.
It works in three layers — PageReady Capture waits for a page to fully settle (clearing cookie banners and letting lazy-loaded content finish) before taking a screenshot; SignalSense classifies each region of a page as static or dynamic so a moving carousel doesn’t trigger a false alarm the way a broken checkout button would; and TrueCapture compares static regions with enough sensitivity to catch a change as small as 0.03%, well below what pixel-threshold tools typically notice.
VR runs automatically as part of every Safe Update (screenshot before, update, screenshot after, rollback if something moved), can be triggered on demand before a deployment or staging merge, and can also run on a schedule between updates to catch drift caused by third-party scripts or CDN issues that have nothing to do with an update at all.
Results and alerts land wherever the team already works — Slack, email, or a webhook — with a plain-language summary of what changed rather than a raw pixel-difference number. WP Remote is also the visual regression engine behind Cloudways’ own platform, covering more than 500,000 hosted sites through that partnership.
The number of pages checked per site scales with plan: 2 on Essential, 5 on Premium, and 25 (plus mobile viewports) on Advanced, with the specific URLs chosen manually rather than auto-selected from a sitemap.
API Access and AI Workflows
Beyond the dashboard, WP Remote exposes a public API with more than 150 endpoints covering nearly everything the platform does — bulk updates, backups and restores, staging, security actions, client records, and reporting — with both read and write access, not just reporting.
That distinction matters for connecting an AI agent: a key generated from your account profile can be dropped into Claude, ChatGPT, Codex, or any tool that reads an OpenAPI spec, letting the agent not just describe a problem on a client site but actually act on it — restoring a backup, running an update, or generating a report from a plain-language prompt.
Every write action still requires manual approval before it executes, and API keys can be scoped to specific sites and permission levels, so a key limited to five sites has no reach into the rest of a portfolio. The API has been in production for more than three years, has handled over 500,000 calls, and reports 100% uptime since launch.
Pricing
WP Remote runs a four-tier structure, billed per site per month:
| Plan | Price | Built For | Key Inclusions |
| Free | $0 | Dev sites / microsites | Plugin & theme management, SSO, auto-updates |
| Essential | $1.99/site/mo | Small-business sites | Daily backups (50-day retention), safe updates, one-click restore, plugin white-label, API access, white-labeled reports |
| Premium | $4.99/site/mo | High-traffic & membership sites | Everything in Essential, AI malware scanning, 90-day backup retention, advanced firewall, virtual patching, one-click staging (28 days), visual regression on 5 pages, form testing, sandbox updates |
| Advanced | $19.99/site/mo | WooCommerce & enterprise sites | Everything in Premium, 180-day backup retention, 60-day activity logs, visual regression on 25 pages + mobile, staging (90 days), dedicated account manager |
Agencies managing more than 100 sites can request custom agency pricing rather than paying the per-site rate. A handful of add-ons apply across any plan for sites that need more than the base tier offers: malware cleanups from $100 per cleanup, real-time backups from $10/site/month, backups and scans every 12 hours from $5/site/month, hourly backups and scans from $50/site/month, visual regression on additional pages from $10/site/month, and an extra staging site from $10/site/month.
All plans carry a 14-day money-back guarantee, billing runs through Stripe with pro-rated adjustments on upgrades or downgrades, there’s no setup fee, and cancellation carries no penalty — you’re only billed for the current cycle.
Support
WP Remote’s published support hours run Monday through Friday with typical response times of 1–3 hours during the week and 12–24 hours on weekends and holidays, from a team based in the +5:30 GMT timezone. Support is included on every plan, including the free tier, at no additional charge — there’s no support paywall tied to a higher subscription.
Who Should Consider WP Remote
The platform’s structure suggests it’s built for two overlapping groups: agencies that want backup, security, and update management handled by a single vendor with a strong security pedigree rather than stitched together from several plugins, and technically-minded operators who want to automate portfolio management through the API rather than clicking through a dashboard for every action.
The tiered pricing tracks that range well — Essential suits small agencies mainly focused on reliable backups and safe updates, Premium adds the security depth and visual regression testing that higher-traffic or membership sites need, and Advanced is built specifically around WooCommerce stores and larger enterprise portfolios where extended backup retention and dedicated account support matter.
FAQs
How many sites can I actually connect to one WP Remote account?
There’s no cap. The WP Remote dashboard supports an unlimited number of sites under one account, so you don’t need to create multiple accounts as your portfolio grows.
Does WP Remote work for someone without much technical background?
Yes. The setup and daily workflow don’t require server-level knowledge. Connecting a site, creating a backup, or running an update can all be handled through the dashboard without touching code.
Is there a genuinely free way to try WP Remote before paying?
Yes. WP Remote offers a permanent free tier designed for development sites and microsites. It includes features such as plugin and theme management, single sign-on, and automatic updates, and isn’t simply a limited trial.
Can I manage separate client accounts and permissions from one dashboard?
Yes. WP Remote includes client and team management, allowing multiple people to work on the same portfolio with appropriate permissions instead of sharing a single login.
If I need to install a new plugin on a client site, do I have to log into WordPress separately?
No. You can install plugins and themes directly from the WP Remote dashboard without opening a separate WordPress login for the client site.
Does the malware scanner slow down the sites it’s protecting?
No. Malware scanning runs on WP Remote’s own servers rather than on the client’s hosting environment, so the scanning process doesn’t add CPU or memory load to the protected websites.
What actually happens if a visual regression check misses a real break?
Every update is backed up before it runs, so a missed visual issue can still be recovered. You can manually roll the site back to its pre-update state, with the backup serving as a fallback when automated checks don’t catch a problem.
Can I use the AI/API features without knowing how to code?
Yes. You can copy an API key from your account and add it to tools such as Claude or ChatGPT without writing custom code. WP Remote also provides a full OpenAPI specification for teams that want to build custom integrations.
Do staging sites risk hurting a site’s SEO if they’re left online?
No. WP Remote automatically prevents search engines from indexing staging URLs, helping prevent forgotten staging sites from competing with or duplicating the live website in search results.
What happens to my billing if I upgrade or downgrade mid-cycle?
Changes take effect immediately through the dashboard, and your next charge is adjusted on a pro-rata basis. You don’t have to wait until the next complete billing cycle for the pricing change to take effect.
7 Alternatives to WP Remote
Here’s how seven other WordPress management platforms compare to WP Remote’s security-first, API-heavy approach:
- MainWP — self-hosted and free for unlimited sites, a much lighter-weight option for teams that don’t need WP Remote’s malware scanning depth or API layer.
- ManageWP — cloud-based with a generous free tier and per-site, per-add-on premium pricing rather than WP Remote’s tiered plan structure.
- WP Umbrella — a single flat per-site rate covering nearly everything, with its own Safe Update and visual comparison workflow instead of WP Remote’s three-layer VR engine.
- InfiniteWP — self-hosted with a permanently free core and annual site-count licenses, a simpler alternative without WP Remote’s AI/API workflows.
- Modular DS — fixed-price plans with bilingual support and Update Copilot’s AI risk scoring, an alternative built more around agency care-plan workflows than security depth.
- Solid Central — a more technically deep dashboard focused on deployments, migrations, and environment groups, bundled free with StellarSites hosting.
- CMS Commander — shifts focus away from security and toward content sourcing, article spinning, and affiliate monetization.