Care plans fail when “updates and security” means reacting to whatever pinged last. A retainer needs an ordered queue that fits a booked block of hours.
Most WordPress retainers promise updates, backups, and “keeping an eye on security.” Backups and updates have obvious tools. Security usually becomes a folder of CVE newsletters and host tickets with no shared definition of done.
WP Triage makes the security slice of the retainer explicit: a score, a band (Safe / At Risk / Critical), three issues, and a fix order. You can explain the week’s work without dumping a scan PDF.
Agencies running this as a team process have a longer write-up: for agencies. Solo operators can keep the same queue with a smaller cap: for freelancers.
WP Triage will not pretend to replace those. It answers: which site, which issue, in what order, this week?
Plans are sold by site slots, not by “security features.” Pause monitoring to stop coverage without deleting history; permanent delete frees a URL for a different client. Details: pricing and billing docs.
Yes. The product is built for a weekly triage pass: sort by score, fix the top three on the worst sites, and use the digest as the “what changed” report — not as another scanner inbox.
No. Remote updates, backups, and uptime belong in a management tool. WP Triage tells the retainer which site and which issue to spend the booked hours on.
Instant email fires only for new critical or known-exploited issues, or a sharp score drop. Everything else waits for the weekday digest you choose in notification settings.