Best WordPress Maintenance Agents in 2026: 10 Compared

ManageWP, MainWP, WP Umbrella and WP Remote are dashboards that update plugins and themes across many client sites in bulk, most of them with a backup before and a check after, started by a person or a schedule. FleetWP’s Autopilot and MaintainHQ’s Gus are AI agents that can run updates on their own, check the site and roll back within limits you set, while SiteGround’s AI Agent updates plugins across sites when you ask in its chat and GoWP pairs automatic updates with an AI editor and a team. Respira AER, the chat in your Respira dashboard that edits your WordPress sites, updates when a person presses the button, checks the site after each update and guards a vulnerable plugin with a restore point and a rollback, and WP-CLI stays the free command line under all of them.

I make Respira, one of the ten below. Every fact about the others comes from their own site, linked where it appears, read on 15 October 2026. Where a tool’s pages do not say something, the table says so instead of guessing.

All ten at a glance

As published by each tool on 15 October 2026. Sources are linked in each section below.

Agent or dashboard: the question that decides it

A dashboard shows every site’s updates in one list and runs them when you press a button or when a schedule fires. An agent decides something: which update is safe, whether the site still works, whether to roll back, what to tell the client. Most tools here are dashboards that run a check after the update. Two of them, FleetWP and MaintainHQ, let an AI make the call without you. The rest of the decision is three questions:

1. Who presses the button. You, a schedule, or the agent. An unattended update at 3 AM is convenient until it breaks a checkout.
2. What it checks afterwards. An HTTP status, a screenshot compared with the one before, the page builder still rendering, a new fatal error in the log. More checks catch more breakage.
3. How it gets back. A full-site restore point, the previous plugin version, or nothing. Core updates and premium plugins are where rollbacks often run out.

The tools, one by one

1. ManageWP

ManageWP is a dashboard whose core is “free on unlimited websites, forever”, with a monthly cloud backup, a security check, a performance check and client reports. Paid add-ons are per site: backups $2, automated security checks $1, advanced client reports $1, or all bundles for $150 a month for up to 100 sites. Safe Updates, “a free upgrade for everyone with the premium Backup add-on”, take a restore point, capture a before screenshot, run a post-update HTTP status check that rolls back on a 4xx or 5xx error, and show an after screenshot side by side. You can schedule them in bulk across sites. Its pricing page mentions no AI.

A fit for: agencies who want a free core for many sites and a proven update routine.

2. MainWP

MainWP is “self-hosted and open source”: the dashboard runs on a WordPress site you own. The core is free, and Pro is $199 a year, $29 a month or $599 lifetime, for unlimited sites, adding automatically generated client reports. Security comes from a vulnerability scanner using the NVD API and Jetpack Protect, plus integrations with Sucuri, Wordfence and others. MainWP MCP connects “Claude, Codex, Cursor, or any MCP-compatible assistant” to the dashboard: “ask what needs updating, which sites are disconnected, or which clients need attention, then act on it in the same conversation.” MainWP calls it an experiment, with confirmation requirements and a safe mode. The pages I read describe no check after an update.

A fit for: agencies with many sites who prefer to host their own dashboard, and now want an AI assistant on top of it.

3. WP Umbrella

WP Umbrella is €1.99 a site a month with no minimum, and a 14-day trial with no card. Its Safe Update “tests and validates updates before they go live with visual regression testing and pre-backup”, bulk safe updates come “with built-in checks and automatic rollback”, and Update Automation runs them for you. It checks for vulnerabilities every 6 hours, monitors uptime, performance and PHP errors, keeps backups for 50 days and sends white-label reports; firewall and malware scanning are a €2 add-on. WP Umbrella MCP connects Claude, Cursor and ChatGPT to the sites you manage there. It is read-only by default; with write access on, an assistant can run plugin, theme and core updates, each action set to allow, ask or block, and every action lands in an AI activity log.

A fit for: small and mid-size agencies who want automated updates with a visual check, priced per site, and an assistant that can ask about every site.

4. WP Remote

WP Remote has a free plan with plugin and theme management, auto-updates, scheduled client reports and uptime monitoring. Paid plans are listed from $1.99 a site a month (Essential: a backup before each update, staging, visual regression on the home page), $4.99 (Premium: five pages, virtual patching) and $19.99 (Advanced: 25 pages plus mobile, and Sandbox Updates that “test on staging, run visual checks, and approve”). Its API can “connect ChatGPT, Zapier, and more to 150+ WP Remote features.”

A fit for: agencies who want staging and visual checks before an update reaches a busy site.

5. FleetWP

FleetWP is a dashboard for backups, security, uptime and performance with an AI layer on top. Its Autopilot runs “an autonomous backup, update, verify, and rollback loop” for safe changes, and “anything riskier, it escalates for your approval.” An AI co-pilot answers questions about your sites, and the same management is open through a REST API, a CLI and an MCP server. Checks include vulnerability scans, file-change detection, PHP errors, uptime, broken links and Core Web Vitals, with branded reports that carry AI-written summaries. Pricing starts at $15 a month for 3 sites, $29 for 5 and $99 for 10, then per site; Pro includes 5 Autopilot credits a month and Agency 25, spent only when Autopilot runs a maintenance run unattended. There is a 14-day trial with a card on file; the pricing page lists no free plan.

A fit for: agencies who want updates to happen without them, with a rollback they did not have to press.

6. MaintainHQ

MaintainHQ is built around Gus, “MaintainHQ’s AI ops assistant inside your dashboard”, wired to site health, scans and updates. Per site you choose: “Gus acts autonomously, or queues every change for your approval before it touches production”, with staging-first updates and automatic rollback. It sends branded reports on a schedule. Plans start with a free plan for 2 sites, then Starter at $29 a month for 5 sites, Pro at $79 for 25 and Agency at $199 for unlimited sites, which the first 100 agencies can lock at $149. It is in early access, and says so: core monitoring, the WordPress connector, security scans and the Gus chat are live, while deeper malware scanning is still on the roadmap.

A fit for: agencies who want an AI to handle overnight breakage and can work with an early-access product.

7. AI Agent by SiteGround

SiteGround’s AI Agent is a plugin with 1+ million active installs that lets you “manage WordPress and WooCommerce through an AI chat”, including “update plugins and themes across all sites”. It “works with any WordPress site, regardless of where it is hosted.” Its Power Mode pauses before irreversible operations such as deletions and bulk changes, and core updates need it switched on. SiteGround describes it as part of its AI Studio, free for SiteGround customers with 20,000 AI tokens a month, and says you can ask it to back up a site before running updates. Neither page describes scheduled runs, a check after an update or maintenance reports.

A fit for: SiteGround customers who want to ask for updates in plain words, on sites hosted anywhere.

8. Respira AER

Respira AER is the chat in your Respira dashboard that edits your WordPress sites. It works through Respira for WordPress, the plugin on each site, and runs on your own AI provider key. For maintenance it has cards that need no model: /updates shows every site’s plugins, themes and WordPress updates in one card, you tick the sites, and pressing Update is the approval. Each update is pinned to the version you saw, and after each one the site checks its front page and REST API; an unhealthy answer stops the batch. Every site hands back a receipt.

/security lists the known vulnerabilities an available update closes, on one site or a fleet, and runs each as a guarded update: a preflight, a restore point through the site’s backup plugin, the update, four health checks (the site answers, the front page and the last edited page answer, no new fatal in debug.log, the page builder still renders), and the previous version back from wordpress.org if a check fails. The full sequence is on the security page.

Where it is weaker, plainly. It does not update on its own: a person presses the button. A run that has worked can be repeated daily, weekly or monthly and emails a report, with any approval still waiting for you. The guarded update covers wordpress.org plugins only, since it needs the previous version archived there, so a premium plugin is refused. Core updates stay on the same branch and have no rollback.

It is included in every Respira plan, from €9 a month for one site, with a 7-day trial. Runs across several sites at once and runs that carry on after the tab closes come from a monthly allowance that starts on Builder, €19 a month for 5 sites. Your AI provider bills the tokens and Respira adds nothing. For a client, /run care-report writes a monthly care report: what changed, how the site is doing, and what needs attention next. The same update tools are open to Claude, ChatGPT, Codex and Cursor through the Respira MCP server, approval included.

A fit for: agencies who already edit client sites in page builders with Respira and want updates and security fixes in the same place, approved by a person.

9. GoWP

GoWP has looked after WordPress sites since 2014 and mixes software with people. It offers “automatic updates with visual checks”, “daily security scans and cleanup”, daily backups with 90 days of history, uptime and SSL monitoring, reports, and an AI editor where you describe a change and “preview every change before publishing.” Its AI editor works in Elementor, Divi, Beaver Builder, WPBakery and the block editor. The free plan has monitoring, 5 AI edits a month and one manual update with visual checks. Pro, at $39 a site a month, adds automatic updates, backups, security scans, reports and 15 AI edits; Business, at $99, adds 50 AI edits and 5 edits a month by the GoWP team. A white-label option for agencies is $49 a month on top.

A fit for: site owners and agencies who would rather hand the care to a service than run a tool.

10. WP-CLI

WP-CLI is the free, MIT-licensed command line for WordPress. wp plugin update --all updates every plugin with an update waiting; --minor and --patch limit the jump, --exclude skips named plugins, and --dry-run previews. With SSH aliases and alias groups, one command runs on several sites. It does not check the site after an update or roll back, so the checks are yours to script. Any coding agent with a terminal can run it, which makes it the floor under every tool above.

A fit for: developers who script their own maintenance and check sites themselves.

How to choose

• You want updates to happen without you: FleetWP or MaintainHQ for an AI that decides and rolls back; WP Umbrella, ManageWP or WP Remote for a schedule with a check.
• You want a free dashboard for many sites: ManageWP’s core or MainWP, which also connects Claude, Codex and Cursor.
• You want to ask in plain words: SiteGround’s AI Agent if you are a SiteGround customer, WP Umbrella’s MCP if your sites are already there, or Respira AER with a person approving each batch.
• You edit client sites in page builders and want maintenance in the same place: Respira AER, with the Elementor, Divi and Bricks work done through the same plugin.
• You want someone else to do it: GoWP.
• You script everything: WP-CLI.

These combine. A dashboard for the schedule and an AI assistant for the work in between run side by side. For connecting an assistant to a site in the first place, see WordPress MCP servers compared. To check a site for known vulnerabilities before choosing anything, the free WordPress vulnerability scanner needs no plugin and no login.

Questions people ask

How I put this together

I read each tool’s own site on 15 October 2026, mostly its pricing and feature pages, and linked the source next to each claim. Prices are what each tool publishes and may depend on monthly or annual billing. The facts about Respira AER come from its page, the security page and the tool catalogue. If something here is out of date, write to word@respira.press and I will correct it.