WordPress
Outpost tracks plugins, themes, users, roles, and core version across every site you run. It enforces the policies you set, keeps a full audit log, and lets you act remotely without opening a single wp-admin.
Fleet inventory
Install the Outpost plugin once per site and it reports back continuously: installed plugins and their versions, active theme, WordPress core version, every user, and the role each one holds.
Filter your whole fleet by anything. Which sites are still on an outdated core? Which ones have a plugin with a known vulnerability? Who is an administrator where? Multisite networks are supported too.
WordPress fleet
SITE
CORE
PLUGINS
ADMINS
acme.com
6.6.1
Current
2
blog.acme.com
6.6.1
3 outdated
4
shop.acme.com
6.5.4
7 outdated
3
northwind.co
6.6.1
1 outdated
2
globex-events.com
6.4.2
12 outdated
6
+ 42 more sites
WordPress policies
Wordfence must be installed and active
Hello Dolly must not be installed
Administrators must use an @acme.com email
Core version must be 6.6 or newer
Policies
Write a policy once and it applies across every site you connect. Require a plugin to be installed and active on every site. Forbid the ones you have banned. Pin a minimum core version.
Policies reach users too: require that every administrator signs in with a corporate email address, cap how many admins a site can have, or flag any account without two-factor authentication. The moment a site drifts, you know.
Require plugins on every site: a security plugin, your backup tool, your analytics
Block plugins you have retired or never approved
Require every admin account to use your corporate email domain
Audit log
Every meaningful action on every site lands in one searchable log: a user creating another user, a role change, a plugin installed or activated, a theme switched, a core update, a login from a new location.
Each entry records who did it, on which site, from where, and when. When something breaks or a client asks what changed, the answer is one search away instead of a dig through a dozen dashboards.
Audit log
LIVE
j.carter created user contractor-dev (Administrator)
shop.acme.com
2m
contractor-dev installed plugin wp-file-manager 7.2
shop.acme.com
9m
a.okafor changed role m.chen → Editor
blog.acme.com
31m
Outpost updated core 6.5.4 → 6.6.1
northwind.co
1h
m.chen logged in from new location Lagos, NG
globex-events.com
3h
Remote action
Disable account
Update Wordfence
Update Astra theme
Sessions destroyed and login blocked on all 3 sites
Remote actions
The Outpost plugin accepts signed commands from your dashboard, so the fix is a click away from the finding that raised it.
Disable a user account instantly. Active sessions are destroyed and further logins blocked.
Update a plugin or theme on one site, or on every site that runs it
Install, activate, deactivate, or delete plugins and themes remotely
Access hygiene
Sites accumulate users for years. Outpost compares every account to your roster and surfaces the ones that should not be there.
A freelancer finished the build six months ago and still has an editor account on three sites. Disable them everywhere in one action.
Accounts that have not logged in for months, still active, still a way in. Spot them across the fleet and clean them up.
Administrators signed up with a personal email, an old agency address, or a domain you have never heard of. Flag every one.
Outpost detects the two-factor plugins your sites use and flags every administrator who has not enrolled.
Who it is for
One site is manageable by hand. Ten, fifty, or three hundred are not.
Every client site in one view. Prove to clients which plugins are current, who has admin, and what changed. Hand off cleanly when an engagement ends.
Marketing runs a dozen sites on a dozen hosts. Apply one security baseline to all of them and see the ones that fall behind.
Network installs report every sub-site. Track users and roles per site, and manage network-activated plugins alongside site-level ones.
Join the waitlist for early access. Be among the first to know when Outpost launches, and lock in founding-customer pricing.
Built for security teams that can't be everywhere at once.