What SitePing does on your clients' sites.
Checks from outside, an agent inside every site, backups and updates that run at night. On WordPress 5.0 and later, Joomla 3.9 to 6, Drupal 7 to 11 and PrestaShop 1.7.6 to 9. Every feature has a page with how it works and its limits.
Knowing at once when something is wrong
- Uptime monitoring for your clients' WordPress and Joomla sitesChecks as often as every minute, response times and a check of the page text.
- SSL certificate expiry monitoring, site by siteAlerts before expiry, and at once if the certificate is invalid.
- Domain expiry alerts for every site you manageRDAP and WHOIS, including registries without RDAP, with a warning a month ahead.
- DNS change monitoring to catch hijacked domainsNameservers, A and MX records: we report every change.
- Core Web Vitals and PageSpeed for your client sites, every weekMobile and desktop scores over time, with an alert when they drop.
- PHP fatal error monitoring for WordPress and JoomlaFile, line and message of every fatal error, as it happens.
- Uptime checked from several regions, so a false alarm doesn't wake you upProbes in other regions confirm an outage before the critical alert.
- Telegram alerts for your client sitesWarnings and critical alerts in a private chat or your team's group.
- An alert when the hosting disk is filling upThresholds in percent and GB, before the site stops writing.
- Accessibility of your client sites, measured with LighthouseScore, failed checks and affected elements, with an alert on new problems.
- Keyword monitoring for the pages your clients care aboutAn alert when expected text disappears or an error message appears.
- API and URL monitoring, beyond the home pageMethod, headers, down codes and a JSON field with its expected value.
- Cron job monitoring: an alert when a scheduled task stopsA secret URL per job, an alert when the call is late.
- TCP port monitoring for the services around the siteAn alert when a public port stops accepting connections.
- Response time monitoring: know when a site gets slowA threshold per site and a warning after a few slow checks in a row.
- Status pages you can send to your clients90 days of uptime, outages and notes, with your logo and language.
- Incident management for client site outagesA page per outage with timeline, cause and team notes.
- Downtime alerts that reach the right person at the right timeDelays, reminders, maintenance windows and contacts per client.
- Uptime reports and SLA targets you can show to clientsSLA targets, monthly PDF reports per client and CSV exports.
Finding tampering, even when the site looks fine
- WordPress core file integrity checksEvery file compared with the official checksums, with the changed lines.
- Joomla core file integrity checks, even without official checksumsChecksums computed from the official Full Package, for Joomla 3, 4, 5 and 6.
- PHP malware in the uploads folder: how to find it quicklyPHP in uploads, including names like .php.jpg, and suspicious files.
- Instant alerts when a new administrator appearsNew admins, role changes and logins from unknown IPs, as they happen.
- Vulnerability checks for plugins, themes and extensionsInstalled versions matched against Wordfence Intelligence and the Joomla Security Centre.
- Blacklist monitoring: Google, Spamhaus and the restGoogle Web Risk, Spamhaus DBL and ZEN, SURBL, SpamCop.
- SEO spam in the sitemap: the sign a site has been hackedBloated sitemaps, spam URLs and robots.txt files that block Google.
- Cloaking detection: the page Googlebot gets compared with the one visitors getGooglebot, a visitor from Google and mobile compared, with an AI opinion.
- 169 automatic configuration checks for WordPress, Joomla, Drupal and PrestaShopHidden admins, risky settings, exposed databases and files, with what to do.
- Security headers on your client sites: HSTS, CSP and the restHSTS, nosniff, framing, CSP, referrer and permissions policy, read from outside.
- Database user privileges: one hacked site shouldn't open the othersMySQL users with global rights, or that can see other databases.
- Active Shield: official security fixes for end-of-life CMS releasesOfficial fixes for Joomla 3.10.12, PrestaShop 1.7.8.11 and Joomla 3 extensions.
Backups, updates and organization
- Automatic WordPress plugin updates that roll back when something breaksA restore point including the database, page checks and automatic rollback.
- Encrypted WordPress and Joomla backups, straight from your client's serverEncrypted on the site before they leave, and locked against deletion.
- Incremental backups that restore like a full backupOnly changed files are sent, and restoring takes one pass.
- Restore a backup to the site in one click, without FTPDatabase and files put back from the dashboard, after a backup of the site as it is now.
- Backups encrypted with a key only you holdYou hold the key, we have only the public half.
- Backup schedules and retention, site by siteSeveral schedules per site, separate retention, backups kept forever.
- One-click admin login to client sites, without shared passwordsA single-use 60-second link, recorded on the platform and on the site.
- Manage multiple WordPress and Joomla sites from one dashboardAll your clients' sites, WordPress and Joomla, in the same place.
- Tags, groups and search to organize hundreds of sitesColour tags, groups, bulk changes and keyboard search.
- Verified backups, and a reminder to test the restoreEvery part read back, tables counted, restore test reminders.
- Decrypt backups offline, even if the platform isn't thereA PHP command-line script or a browser page; the key stays with you.
WordPress sites
- Monitoring and maintenance for your clients' WordPress sitesFrom 5.0 with PHP 7.4: security, updates with rollback and backups.
- The WordPress backdoors that survive a cleanupCron events, options with packed code, mu-plugins and hidden admins.
- WordPress hardening, checked on every site, every dayFile editor, security keys, debugging, XML-RPC and forgotten tools.
Joomla, old versions included
- Joomla 3 has reached end of life: how to protect the sites still running itMonitoring, integrity and backups on Joomla 3.9 and 3.10, even with PHP 7.1.
- Joomla 4 at end of life: keep sites safe and prepare the migrationJoomla 4 sites under watch while you prepare the move to 5 or 6.
- Joomla website monitoring for web agenciesA native Joomla agent, with the same features as the WordPress one.
- Security patches for Joomla 3.10.12, after end of lifeThe 12 eLTS CVEs and 19 later fixes, on Joomla 3.10.12.
- Vulnerable Joomla 3 extensions, when the fixed release no longer installsPhoca Download 3.2.x and Sourcerer before 16.0.0 on Joomla 3.
- Hidden Joomla Super Users, and the other accounts to checkAccounts written into the database, known attack signatures, Super Users without MFA.
- Traces of attacks on JCE, Helix and SP Page Builder on Joomla sitesAltered JCE profiles, code in Helix, SP Page Builder fonts uploaded by nobody.
Drupal, from 7 to 11
- Drupal site monitoring for web agenciesA native Drupal module, with insecure releases and core integrity from drupal.org.
- Drupal core file integrity checks, Composer projects includedEvery core file compared with the drupal.org archive, archives and Composer.
- Alerts for Drupal core and modules on insecure releasesdrupal.org data: insecure releases and the version that fixes them.
- Detecting Drupalgeddon and Drupalgeddon2 backdoors on Drupal sitesDatabase backdoors, PHP in public files, miners in core: the traces of both attacks.
- Encrypted backups and restores for Drupal sitesDatabase and files encrypted on the site, restores that keep the site connected.
- Security checks for Drupal: settings, modules and permissionstrusted_host_patterns, hash_salt, development modules and risky permissions.
PrestaShop stores
- PrestaShop store monitoring and security for web agenciesA native PrestaShop module that checks store core, templates and modules.
- PrestaShop core file integrity checksComparison with the official package, renamed admin folder included.
- Detecting credit card skimmers in PrestaShop storesThe 2026 head.tpl loader and the 2022 blm.php dropper.
- Encrypted backups and restores for PrestaShop storesOrders, customers and files encrypted on the server, restores with the module still active.
- Security checks for PrestaShop storesInstall folder, Smarty cache in MySQL, back office and SuperAdmin accounts.
- Security patches for PrestaShop 1.7.8.11PrestaShop 8 fixes backported to 1.7.8.11, all or nothing.
Sites stuck on older versions
- Monitoring the sites still on WordPress 5 and PHP 7.4Every version from 5.0 to 5.9 tested with PHP 7.4, core updates included.
- Drupal 7 has reached end of life: how to protect the sites still running itMonitoring, integrity, Drupalgeddon backdoors and backups on Drupal 7, even on PHP 7.1.
- Drupal 8 has reached end of life: how to look after the sites still on itMonitoring and backups on Drupal 8.9 with PHP 7.1, upgrade to 9.5 tested.
- Drupal 9 has reached end of life: monitoring and the move to Drupal 10Drupal 9 sites watched, real upgrade from 9.5 to 10 tested.
- Security and backups for the stores still on PrestaShop 1.7Stores on 1.7.6, 1.7.7 and 1.7.8 with PHP 7.1-7.4, upgrades up to 8 tested.
Try SitePing on your client sites.
Connect your first sites today and see what SitePing finds on them.
- Every Complete feature except backups
- Up to 10 sites
- No credit card needed to start
- At the end you choose a plan or move to Free, and nothing is charged
Already have an account? Log in. Prefer to look at one site first? Free read-only audit.