Monitor every client's WordPress site from one dashboard. Plugin vulnerability alerts, white-label reports, and the agency pricing that doesn't punish you for winning new retainers.
WordPress maintenance is a margin business. Most agencies charge $99-$299 per site per month for updates, backups, security, and an implied promise that someone is watching. The fastest way to break the promise — and lose the retainer — is to find out about a hacked plugin, a CWV regression, or a malware injection from the client instead of from your monitoring stack. Lemwatch is built to be that stack: every client's WordPress site monitored continuously for uptime, Core Web Vitals, SSL, SEO, malware, plugin versions and known CVEs, broken links, content tampering, and 20+ other signals — all surfaced in one dashboard, all included in the price. The Agency plan covers 150 sites for $59/month. Per-client tooling cost: roughly $0.59. Per-client billable: $99-$299. The math is why we built it.
The WordPress ecosystem is uniquely fragile. There are 60,000+ plugins, most maintained by single developers, with a long tail of abandoned-but-still-installed packages that carry unpatched CVEs. The agencies that retain clients are the ones that detect a vulnerable plugin within hours of public disclosure, not weeks. The same goes for theme updates that break the homepage, page builder migrations that nuke schema markup, and the silent SEO regressions that follow a WP-Rocket config change. Generic uptime monitors miss all of this. Specialist WordPress tools (ManageWP, MainWP) handle updates but not Core Web Vitals or SEO. Enterprise APM (Datadog, New Relic) costs as much as a junior engineer and isn't WordPress-aware. Lemwatch covers the WordPress-specific surface (`detect-wordpress`, plugin fingerprinting, CVE feed cross-reference) alongside the generic signals — so the maintenance promise is actually backed by visibility, not a status page that hasn't been updated since 2023.
WP-specific vulnerability scanner cross-references installed plugin versions against CVE feeds daily
Flat $59/mo for 150 sites — marginal cost of site 51 is zero
Auto-generated white-label PDF report per client, your branding, scheduled monthly
Visual change detection alerts on hero changes, layout shifts, broken images
Daily malware scan + reputation check + cross-script reference
Per-page LCP/INP/CLS tracking with regression alerts
Daily fingerprint of every installed plugin and theme, cross-referenced against the WPScan CVE feed. New CVEs trigger an immediate alert with the affected sites and a fix path.
Track which sites are running outdated versions. Group by severity (critical security update vs minor patch) so your dev team knows what to push first.
Track LCP, INP and CLS on the homepage, key landing pages, and the WooCommerce checkout. Catch a regression the day a plugin gets activated, not the quarter a Google ranking drops.
Branded PDF lands in the client inbox the first of every month — what was monitored, what was caught, what was fixed. No Lemwatch attribution unless you want it.
Daily malware reputation check plus content-diff alerts when injected scripts, hidden links, or unexpected JS appears in the rendered HTML.
Group sites by retainer tier, vertical, or account manager. Each group has its own dashboard, alert rules, and report cadence.
Lemwatch fingerprints the installed plugin and theme versions on every monitored WordPress site daily, then cross-references each one against the public CVE feed (WPScan). When a new CVE is published affecting a version you have installed, you get an alert with the affected sites and a recommended fix.
No. All checks are non-invasive — Lemwatch reads the public HTML, headers, and asset paths the same way a browser does. There's no plugin to install, no database connection, and no auth credentials required.
Optionally. You can give a client read-only access to their dashboard or send the monthly white-label PDF without any login. Your call per relationship.
Contact us for a custom plan. Most agencies between 100 and 500 sites land on a custom Agency tier with the same flat-rate model — no per-check surcharges.
ManageWP and MainWP are remote-update platforms — they push WordPress core, plugin, and theme updates from one dashboard. Lemwatch monitors what happens after. The two are complementary: most agencies use one of each. Lemwatch catches the CWV regression, the injected malware, the SEO drop, the broken checkout, and the SSL expiry that update tools don't track.
Yes. The Money Page Monitor specifically tracks checkout/cart/product pages with stricter rules than the rest of the site — including form validation, third-party script load, and conversion-critical CWV thresholds.
Yes. Per-site routing splits alerts by severity and check type — critical incidents page on-call dev via SMS, SEO regressions ping the strategist's Slack, and weekly reports go to the AM's email.
Yes. Start on the Free plan with 10 sites and full feature access. Upgrade to Pro ($19/mo, 50 sites) or Agency ($59/mo, 150 sites) when you outgrow it. No credit card to begin.