WordPress management for developers who want control, not a black box.
Self-hosted, OpenSSL-signed, and lean enough to read end to end. Manage every site from one dashboard that runs on your server, no credentials, no backups, no client data sitting in someone else’s cloud.
Siteward is a self-hosted WordPress management tool built for developers and technical teams: two small plugins that let one dashboard manage unlimited sites, with every dashboard-to-site request signed by an OpenSSL keypair and all data kept on your own server. If you live in WP-CLI and SSH but still want a single pane of glass for updates, uptime and health across a fleet, Siteward gives you that without surrendering the things you care about, ownership, transparency and speed.
The problem with cloud WordPress managers
Most multi-site managers solve the dashboard problem by becoming the middleman. To check your sites, run updates or store backups, they need a persistent connection into every install, and that connection, plus your backup archives and often your admin sessions, lives on their infrastructure. For a developer that’s three problems at once:
- Credential and data custody. A third party holds keys into every client site, and frequently the backups too. That is a single, attractive breach target you don’t control and can’t audit.
- Bloat you can’t see into. Cloud agents ship opaque code that phones home, and per-site add-ons pile features (and cost) onto a stack you’d rather keep minimal.
- It fights your existing tooling. You already have WP-CLI, deploy scripts and version control. What’s missing is fleet-wide visibility, not another walled garden that wants to own the whole workflow.
Siteward takes the opposite position. The dashboard is a WordPress plugin you install on your own server. Nothing about your fleet, site lists, response times, update inventories, backup status, ever leaves it.
WP-CLI-grade control, with a dashboard on top
The thing developers actually want from a manager is leverage: do one thing across two hundred sites and watch it land. Siteward is built around that, not around dashboards-for-dashboards’ sake.
- Fleet-wide updates from one screen. Every pending core, plugin and theme update across all sites in one place. Update a single plugin everywhere, or update one site fully, with a live progress modal showing each item completing. Runs sequentially per site and in parallel across the fleet, so large lists finish fast.
- Critical-error detection that names the culprit. Siteward catches HTTP 5xx, the WordPress “critical error” white screen, recovery mode and auto-paused plugins, and where possible tells you which plugin or theme broke the site, so you know exactly what to roll back instead of bisecting by hand.
- One-click WP-Admin login. Jump straight into any connected site’s wp-admin in a new tab. No stored passwords, each login link is signed by your dashboard, single-use, and expires within minutes.
- Uptime that catches real outages. The dashboard hits each site’s public URL directly, so a full WordPress crash is caught even when the plugin can’t respond. Retry-then-alert avoids false alarms, and you’re notified only on the transition, down, then recovered.
The architecture, in the open
Siteward is deliberately small: two plugins you can read in an afternoon. A dashboard plugin on one central site, and a child plugin on each managed site that exposes a single secured REST endpoint. The dashboard always initiates traffic, there is no inbound endpoint on the dashboard to attack.
The security model is the part developers tend to appreciate most, because it’s honest about what’s happening on the wire:
- OpenSSL keypair per site. A one-time handshake exchanges a public key against a single-use connection secret, which is invalidated the moment it’s used.
- Every request is signed. The dashboard signs a canonical payload with its private key; the child verifies it with
openssl_verifyagainst the stored public key. A tampered or forged request simply fails. - Replay protection built in. Requests carry a timestamp and a nonce, stale timestamps and reused nonces are rejected, so a captured request can’t be replayed later.
- No third-party cloud, ever. There is no Siteward server in the loop at runtime. Your dashboard talks directly to your sites. We literally can’t see your data because it never reaches us.
Because it’s standard WordPress plugin code on both ends, it slots into the environment you already run, your PHP version, your firewall rules, your monitoring, your backups of the dashboard itself. There’s no separate agent daemon and no magic.
Lean and genuinely fast at scale
Siteward checks and updates your whole fleet with a parallel curl_multi engine, and the concurrency is yours to control. That’s the difference between a dashboard that’s pleasant at twenty sites and one that’s still responsive at two hundred, no special caching tweaks, no tuning ritual to stay usable. Fast by default is a design goal, not an upsell.
And it stays out of your way. The free dashboard manages unlimited sites for uptime, fleet updates, critical-error detection, proactive UpdraftPlus backup health and WP-Cron health alerts, with no per-site fees. The optional Pro add-on layers on SSL and domain-expiry monitoring and Zapier webhooks, so you can wire fleet events straight into your incident tooling, Slack or a PagerDuty trigger without Siteward ever brokering the data.
Extensible because it’s just WordPress
There’s no proprietary plugin API to learn. Siteward is conventional WordPress code, so it lives inside the hook system you already use, actions and filters, the REST API, WP-Cron and the standard plugin lifecycle. If you want fleet status in an internal tool, you can reach it through WordPress’s own mechanisms on your dashboard install rather than scraping a vendor portal. It’s a tool you can extend, audit and host like any other plugin, because that’s exactly what it is.
Who it’s for
Developers maintaining a portfolio of client sites, in-house teams running many WordPress properties, and agencies whose technical leads refuse to put client credentials and backups in a third party’s cloud. If you’d rather own the stack than rent visibility into it, Siteward fits the way you already work. See the full feature list, read the setup docs, or compare it as a MainWP and ManageWP alternative. More guides and writing live in resources.