One panel for all your WordPress installations
Updates, security with real CVEs, uptime, backups and certificate and domain expiry — in a single panel, for people who look after someone else's WordPress sites.
Connect your first site in a couple of minutes.
Everything you need to run the fleet
One panel instead of dozens of logins. Monitor, update and secure every site from here.
24/7 uptime monitoring
99.98%External check every minute. But “it responds” is not enough: WordPress returns 200 even when it is dead. Helm looks inside the page.
Safe updates, in bulk
Core, plugins and themes across the fleet in one click. Helm backs up first, checks the site still responds afterwards and rolls back on its own if anything breaks.
Security with real CVEs
Known vulnerabilities from the Wordfence Intelligence feed, not generic advice: affected component, version and a fix you can apply fleet-wide.
AI copilot
Helm AIAsk in plain language what is going on across the fleet. The copilot answers on real data and proposes actions: nothing runs until you confirm.
Expiries you see coming
HTTPS certificates and domains have a date, written months in advance. We warn you at 30, 14, 7, 3 and 1 day — and two months ahead for the domain.
Traffic for every site
Visits over the last 30 days, right next to the site status — no separate analytics panel to open per client.
Performance, measured by Google
The PageSpeed score every week, with its history — and below it, what to do to raise it, with the estimated saving next to each item.
Public API
APIKeys with the scopes you choose, rate limiting and documentation: updates, backups, security and uptime from your own code.
Automatic backups
Database and files, hourly or daily, with restore and configurable retention.
One-click wp-admin login
Get into any site without shared passwords: single-use token valid for 60 seconds.
Client-ready reports
Automatic monthly summary with the site's real numbers and an AI-written recap.
Telegram + email alerts
Real-time alerts on downtime, vulnerabilities and failed backups, without the noise.
Team and clients with roles
25 granular permissions, a client role and access limited to assigned sites only.
Plugins across many sites
Search wordpress.org and install or update across the whole fleet in one go.
Unified activity log
Who did what and when, including changes made outside of Helm.
Maintenance mode
Put a site in maintenance with your own message: uptime stats stay clean.
Broken links
Dead links in your content, grouped by address and fixed in one click.
Backups verified nightly
We re-read the copies and check they hold up: a broken archive surfaces early.
It sees other people's updates too
Made from wp-admin or automatically: we tell you, and for 48 hours you can roll back.
Articles written and published
Text and images generated and filed into WordPress, as drafts or scheduled.
And everything else, in full
The complete list of what the panel does today. No “coming soon”: if it is written here, it is in.
Monitoring
- External check every minute, with a confirmation threshold before the alert
- Recognises WordPress error screens and blank pages
- A keyword that must — or must not — appear on the page
- Availability measured over time, with twelve months of history
- HTTPS certificate and domain expiry, with staged warnings
- Response times, incident log and an on-demand check
- PageSpeed performance, with the fixes and their estimated saving
Security
- Known vulnerabilities from the Wordfence Intelligence feed, with CVE and affected version
- Security score per site and fleet average
- Plain-language explanation and ordered remediation steps
- Fixes applied from the panel, after your confirmation
- An “ignore” rule that survives later scans
- WordPress users: who they are, their role, who to block
Updates
- Core, plugins and themes across the fleet in one operation
- Automatic backup before every update
- Checks the site responds afterwards, and rolls back if it doesn't
- Auto-update configurable plugin by plugin
- Install from wordpress.org across several sites at once
- Activate, deactivate and delete plugins remotely
- Covers updates made from wp-admin, from the command line, or automatically by WordPress
- A verification page of your choosing: after an update we check the checkout, not just the homepage
- A «Roll back» button, for 48 hours, on anything updated without going through Helm
Backup and restore
- Database and files, on an hourly or daily schedule
- Configurable retention, site by site
- Restore from the panel, in chunks, without FTP
- Archive download through an expiring link
- Storage included in the plan, always visible
- Nightly verification: every copy is re-read and checked, incremental chains included
- No size ceiling: it prepares in slices and resumes where it left off
- Incremental archives: after the first one, only what actually changed is saved
- wp-config.php inside the archive, for the day you have to rebuild elsewhere
Content
- An article written, illustrated and filed into WordPress
- Images generated and uploaded to the media library
- Draft, immediate publication or scheduling
- Automatic editorial plan with a monthly spending cap
- Credit estimate shown before you generate
- Broken links in your content: grouped by address, fixed in one click inside WordPress
Team, clients and integrations
- 25 granular permissions and a read-only client role
- Access limited to the sites assigned to each person
- Monthly report with a public link to send to the client
- Email and Telegram notifications, chosen by category
- Public API with keys, scopes and rate limits
- Unified activity log, including changes made outside Helm
- Reports and emails with your brand: name, logo, colour and closing line.
Up and running in three steps
Connect your sites with the Helm connector
Install the connector plugin and Helm detects core, plugins and themes in seconds.
Monitor, update and secure
A single panel for updates, scans and backups across the whole fleet.
Get alerts when it really matters
Instant notifications when a site goes down or a new vulnerability shows up.
A security copilot for every site
The AI analyzes every installation, recognizes known vulnerabilities and explains them in plain language — with practical steps to fix them. No CVEs to decipher: just what happened and what to do.
The XML-RPC endpoint is active and can be exploited for password brute-force attacks or to amplify requests (pingbacks). If you don’t use external apps or the WordPress mobile app, it’s best to disable it.
It writes the articles, and publishes them
Describe the topic and Helm writes the piece, generates the images and places it on WordPress: draft, published or scheduled. Or describe nothing — it reads the categories and what has already been published, and picks a new subject that fits the site.
One field for the topic. Leave it empty and Helm looks at what the site is about, avoiding what it has already published.
Length, tone, how many images, where it lands. Title, excerpt, tags and image prompts are the AI's job.
A draft to review, published straight away, or scheduled for a date — using WordPress's own scheduling.
The quote is shown in the panel before generating. If something fails, the credits come back.
A plan for every agency size
Extra AI credits available in packs — pay only for the scans you use.
The questions everyone asks
How do I connect a WordPress site to Helm?
You install the Helm connector on the site and link it to the panel: within seconds Helm detects core, plugins, themes and security status. Every request between Helm and the site is signed, and credentials are encrypted with AES-256.
Do I need a credit card to try it?
No. The Free plan includes 5 sites forever with no credit card: uptime monitoring checked every five minutes, centralized updates, security scans and the AI copilot. Paid plans check every minute and add backups, client reports and your own brand.
What happens if an update breaks a site?
Helm backs up the database before updating, then checks that the site still responds. If it does not, plugins and themes are automatically rolled back to the previous version and you get an alert.
Where do backups go and can I restore them?
Backups include the database and wp-content files and are kept on S3-compatible storage with configurable retention. Restores run from the panel and, before overwriting the database, Helm saves an automatic point to return to.
How does Helm know about vulnerabilities?
Helm syncs the Wordfence Intelligence feed daily and matches installed versions against vulnerable ranges offline. Each finding shows the component, severity, CVE and the version that fixes it.
Can the AI change my sites on its own?
No. The copilot can only propose actions from a closed list of operations: nothing runs without your explicit confirmation, and Helm still backs up before risky operations.