WP Watchdog
Monitor client WordPress sites before plugins break them
Clients install random plugins, skip updates, and break their own sites. This recipe monitors your client WordPress sites: checks for outdated plugins with security vulnerabilities, detects unauthorized changes, and sends you a weekly health report.
INGREDIENTS
PROMPT
Create a skill called "WP Watchdog". I manage multiple client WordPress sites. For each site I add (URL + credentials or REST API access), run regular health checks. Scan all plugins, themes, and WordPress core for outdated versions and known security vulnerabilities (cross-reference WPScan or similar vulnerability databases). Detect unauthorized changes: new plugins installed, theme files modified, pages deleted or significantly changed. Monitor uptime with immediate alerts on downtime. Track page load time over time to detect performance degradation. Generate a weekly health report for all sites with: update availability, vulnerability alerts, unauthorized changes, uptime stats, and performance trends. Prioritize actions as critical (security vulnerability), important (outdated with update available), and informational (changes detected). Send the report via email and alert me immediately via Slack/Telegram for critical issues.
How It Works
Give your Claw access to your client WordPress sites, and it runs
regular health checks: scanning for outdated plugins with known
vulnerabilities, detecting unauthorized changes (new plugins, theme
edits, deleted pages), testing that forms and key functionality still
work, and checking uptime and performance.
What You Get
- Weekly health report across all managed WordPress sites
- Plugin vulnerability scanning against the WPScan database
- Outdated plugin/theme/core detection with update availability
- Unauthorized change detection: new plugins installed, theme files modified, pages deleted
- Uptime monitoring with immediate alert on downtime
- Performance baseline tracking (page load time trends)
- A recommended action list: update, remove, or investigate
Setup Steps
- Add your client WordPress sites (URL + admin or REST API credentials)
- Configure check frequency (default: weekly full scan, daily uptime check)
- Set alert channels (email, Slack, Telegram)
- Your Claw begins monitoring and sends the first health report
- Act on recommendations or let your Claw apply safe updates to a staging environment first
Tips
- The vulnerability scan is the highest-value feature — it catches security issues before they're exploited
- Unauthorized change detection saves you from the "my client broke their site" emergency call
- Track the weekly reports to spot patterns — sites that degrade slowly are easy to miss
- Offer this as a paid maintenance package to your clients (monthly retainer)
- Pair with a staging environment to test updates before pushing to production