Skip to main content
mySites.guru

JCE Profiles Hack (12th June): Joomla sites running JCE are being actively exploited. Find and fix rogue profiles and webshells across every site.

Manage Multiple WordPress Sites Like a Pro

Manage Multiple WordPress Sites Like a Pro

Once you’re past about five WordPress sites, the cracks start showing. You forget which ones you’ve updated, backups slip, and you only find out about a security issue when a client asks why their site is redirecting to a pharmacy.

Here’s what actually works when you’re managing lots of sites, based on over a decade of doing this myself.

Get everything into one dashboard

Logging into each site individually is the first thing that has to go. You need a single place that shows you update counts, security status, and uptime across every site.

mySites.guru does this for unlimited WordPress, Joomla, and PHP sites at a flat monthly price. There are other options like ManageWP and MainWP too, but they tend to charge per site, which gets expensive fast when you’re managing hundreds. For a deeper look at what a proper setup covers, see the guide to managing multiple WordPress sites from a single dashboard.

Whatever you pick, stop using browser bookmarks as your “management system”.

Automate backups

Manual backups don’t happen. Everyone says they’ll do them weekly, nobody actually does. Set up automated backup schedules and forget about them. mySites.guru lets you schedule backups across thousands of sites using Akeeba Backup or All-In-One Migration.

The important bit: test your restores occasionally. A backup you’ve never tested is just a file that makes you feel better.

Update in bulk

Outdated plugins are the number one way WordPress sites get hacked. That’s not opinion, it’s what I see across the 80,000+ sites connected to mySites.guru.

Bulk updates let you push plugin, theme, and core updates to every site at once. You still need to pay attention to what you’re updating, especially major version jumps like WordPress 7.0 “Armstrong”, but the days of clicking “Update” on each site individually should be behind you. If you want full control, you can also disable WordPress automatic updates across all your sites from the dashboard so nothing changes without your say-so. See the full walkthrough on how to bulk update WordPress sites if you want the step-by-step detail.

Security goes deeper than a plugin

Installing Wordfence is fine, but it’s surface-level. Real security means scanning every file in your webspace for things that shouldn’t be there: backdoors, injected code, modified core files. If you’re still thinking of site management as just updates and backups, it covers a lot more ground than that.

You also want real-time alerts when files change unexpectedly or someone logs into an admin panel. Finding a hack three months after it happened is significantly worse than catching it the same day. And when you do need to jump in, one-click admin login gets you into any site’s admin console without hunting for credentials.

Security headers and SSL certificate monitoring are easy wins that most people skip.

Teams need their own logins

If your whole agency shares one mySites.guru login, or worse, one WordPress admin password across all client sites, stop. Give everyone their own account with appropriate permissions. It’s free with mySites.guru and means you can actually see who did what.

Audit your sites regularly

Not just for SEO. Check for best practice issues, PHP version compatibility, disk space warnings, leftover default content like the Sample Page and Hello World post, and admin customisations like removing the WordPress logo from the admin bar. The mySites.guru snapshot runs over 100 checks on each connected site, twice a day. You can also run a free audit right now to see what it finds.

The short version

Get a proper dashboard, automate your backups, update in bulk, scan deep for security issues, and give your team their own access. That’s it. None of this is complicated. The hard part is actually setting it up instead of telling yourself you’ll get to it next week.


For the complete approach, see our agency multi-site management guide.

Frequently Asked Questions

What is the single biggest cause of WordPress sites getting hacked?
Outdated plugins - based on data from over 80,000 sites connected to mySites.guru, failing to keep plugins updated is the most common root cause of WordPress compromises.
Why aren't manual backups reliable for a large portfolio of sites?
Manual backup schedules almost always slip in practice, so automating backups across all sites is essential - and you should periodically test restores to confirm the backups actually work.
Should each team member have their own mySites.guru login?
Yes - sharing a single login removes accountability and auditability; mySites.guru provides individual accounts with configurable permissions at no extra cost.

What our users say

Chris Wilcox
Chris WilcoxLightbulb Web Design
★★★★★

With over 260 Joomla websites linked at the time of writing this review, MySites.guru has been an essential part of my web design agency client support tools for many years. Knowing all websites are monitored and easily updated in one central location is something I almost can't consider in terms of the time it would take to manage all of this manually. In the rare occasion I've had to ask for support, Phil replies almost faster than I reply to my own clients, and that is almost unheard of! For the fixed monthly cost, it really is a no-brainer to have as a standard tool if you support your client websites on a long-term basis.

Read more reviews
Mike Pritchard
Mike PritchardPritchard Websites
★★★★★

My Sites is such a great tool! It's a life-saver for us, with over 200 sites to manage it would be a nightmare with out it. We have tried a similar tool before but so happy we switched to mysites.guru. And Phil rocks with personal and speedy service!

Read more reviews

Read all 189 reviews →

Ready to Take Control?

Start with a free site audit. No credit card required.

Get Your Free Site Audit