Everything KontrolWP does, in detail.

One dashboard for every WordPress site and static site you run. Pick a feature to see exactly what it does, what it needs and where it stops.

Every core, plugin and theme update across all sites in one list, queued with one click or run on a schedule.

Install, activate, deactivate and delete plugins, and set auto-updates, on one site or many at once.

Every user across all sites, grouped by email. Add people, change roles, send resets or remove them.

Scan published content for broken and unresponsive links, then remove them or jump to the editor. Scans run on a schedule.

Every comment held for moderation, from every site, with Approve, Spam and Trash in the list.

Browse a WordPress site's posts, pages and custom post types by status, with search. View them or open the editor.

Open any site's admin with a one-time link that lasts 60 seconds. No passwords to look up.

Known vulnerabilities in core and plugins, rated by CVSS, plus a Settings list with one-click hardening fixes.

A score out of 100 for each site, issues ranked by impact and a daily scan. On WordPress, six one-click fixes.

Connect Umami Cloud or your own Umami to see visitors, pageviews and bounce rate on each site's page.

DNS records and registration details for each site's domain, with a warning when it expires within 30 days.

Add a website on Cloudflare Workers by its address. Uptime on every sync, pages from the sitemap and deployment history.

Across every feature

The same few ideas run through all of it.

Every site is checked every hour by default. Choose anything from every 15 minutes to every 6 hours in Settings
Each site syncs through its own queue, so one slow or broken site never delays the others
A site that cannot be reached, or returns a server error, is tried once more a few seconds later before it shows as unreachable

Each site has switches for updates, broken links, analytics (once Umami is connected), security checks and accessibility checks, all on by default
When one is off, scheduled scans skip that site and its tab is hidden
Analytics, security and accessibility results are kept. Turning off broken link checks clears that site's links

Everything that reads a site is spread out, and checks that do heavy work, such as link scans, run from Cloudflare
Updates run one at a time per site, and accessibility scans read pages one at a time with a pause

KontrolWP is a Cloudflare Worker you deploy, behind Cloudflare Access, with its own database and queue in your account
KontrolWP only makes outbound requests to your sites, so the dashboard can stay on a private hostname
Each site's secret is encrypted in the database with a key only your Worker holds

Deploy KontrolWP to your Cloudflare account and connect your first site.