The modular command center to manage
all of your clients' hosting
Stop jumping between fragmented hosting logins or paying compounding per-site SaaS fees. Clockwork Control gives you one self-hosted control panel to monitor, secure, and operate all client sites. Pick and choose only the hosting and cloud services your agency uses.
Manage all of your clients' hosting
in 3 steps
Every agency’s hosting setup is unique. Clockwork Control does not force you into a proprietary stack. You pick the tools you already use.
Pick Your Hosting Modules
Do you manage servers via SpinupWP or GridPane? Run client sites on Pressable, WP Engine, Kinsta, or Cloudways? Turn on only the hosting modules your agency uses.
• WP Engine • Cloudways • Custom VPS
• Pluggable for any future host
Pick Your Cloud & Services
Plug in your hypervisors (DigitalOcean, Hetzner, Vultr, Linode, Azure), connect Cloudflare, and integrate Limit Login Attempts Reloaded to push bans straight into Linux fail2ban.
• Cloudflare real-IP protection
• WordPress-to-Kernel fail2ban
Run One Unified Center
Sit back with total operational visibility. Inspect origin SSL certificates, fan-out downtime alerts to Slack, Mattermost, or instant Twilio SMS paging, and verify Bill.com care plan status before performing client work.
• Bill.com Care Plan Sync
• 100% Self-Hosted on your LAN
Modules built for your
agency’s exact stack
Enable what you need, ignore what you don’t. Need support for a new provider? Vibe-code a custom module with AI in 30 minutes.
Hosting Provider Modules
Plug in the hosting platforms your agency uses
Spinup
Direct SSH substrate across VPS droplets. Checks apt security updates, executes graceful delayed reboots, tails Nginx logs, and manages fail2ban jails.
GridPane
High-performance cloud VPS orchestration. Discovers servers and sites via API v1, tracks origin SSL behind Cloudflare, and runs SSH commands.
Pressable
Zero-SSH REST API management. Executes async WP-CLI commands and relays backups to S3 Glacier Instant Retrieval for 90-day retention.
WP Engine
Enterprise WP Engine API v1 integration with per-site SSH runners for command execution and automated Companion deployment.
Kinsta
MyKinsta API v2 integration mapping Company → Site → Environment hierarchy with per-environment SSH tunnels.
Cloudways
Dual CloudProvider and HostingProvider contract implementation for Cloudways managed VPS servers and apps.
Custom VPS / Other Hosts
Extensible via clean contracts. Vibe-code any hosting module with Claude Code or Gemini in ~30 minutes.
Cloud & Infrastructure Modules
Pull raw hardware metrics directly from hypervisors
DigitalOcean
Pulls droplet CPU, memory, disk, and load telemetry every 5 minutes via DO v2 API. Direct DO Spaces S3 verification.
Hetzner Cloud
Pulls CPU, disk I/O, and network telemetry for high-performance, cost-effective instances in Europe and North America.
Vultr Cloud
Tracks CPU, disk, memory specs, and automates server IP reconciliation across Vultr high-frequency and regular compute instances.
Linode (Akamai)
Pulls native CPU usage series, monitors hardware specs, and cross-references public IPs across worldwide Linode datacenters.
Azure Monitor
Enterprise Service Principal integration querying Azure Monitor for CPU percentage and available memory bytes.
Security, Storage & Client Modules
Layer on defense, off-host backups, and client reporting
LLAR & fail2ban Bridge
Ingests Limit Login Attempts Reloaded lockouts from WordPress and escalates them to Linux iptables drops via fail2ban.
AWS S3 Glacier Relay
Asynchronously archives client backups to S3 Glacier Instant Retrieval for long-term care plan compliance without opening ports.
Clockwork Companion
Lightweight mu-plugin for 1-click SSO into client wp-admin and a white-label Tools → Clockwork Control client portal.
Incident Alerting & Notification Modules
Instant alerts where your engineering team and clients communicate
Twilio SMS Text Alerts
Urgent on-call SMS text paging dispatched the moment a client site goes down, with off-hours scheduling and VIP client escalation.
Slack Integration
Real-time downtime alerts, origin SSL renewal warnings, and IP ban actions sent to Slack.
Mattermost Integration
Self-hosted incident alerting for agencies running private Mattermost chat. Gated on transitions to keep ops channels noise-free.
Client Slack Channels
Per-site customer Slack webhooks routing maintenance reports and verified backup confirmations directly to client channels.
Agency Operations & Billing Modules
Connect client contracts, invoices, and performance monitoring
Bill.com Care Plan Sync
Cross-references active Bill.com invoices so engineers instantly know whether a client site is covered by an active Care Plan before performing maintenance.
GTmetrix & PageSpeed Audits
Scheduled automated Core Web Vitals and Lighthouse performance scans with regression alerts to maintain fast client sites.
Sucuri SiteCheck Scanner
Automated remote malware scanning and domain blacklist monitoring (Sucuri v3 API) replacing proprietary ManageWP security add-ons.
Looking for production agency testers for Vultr, Linode, and Azure
Our core hypervisor telemetry integrations for Vultr Cloud, Linode (Akamai), and Azure Monitor are built and verified in development. If your agency hosts client WordPress sites on these platforms, test live metric polling and help shape the integrations!
Why Agency Owners & CTOs switch to Clockwork Control
One Fleet Dashboard
View all 20, 50, or 250+ client websites across SpinupWP, GridPane, Pressable, WP Engine, Kinsta, and cloud hosts on a single screen.
Origin SSL Tracking
Directly probes origin Let's Encrypt certificates behind Cloudflare. Catches renewal failures that buried emails and HTTP pingers miss.
Zero Per-Site Rent
100% self-hosted on your own LAN or office server. You're probably saving money per month compared to ManageWP while keeping all client credentials private.
Alerts & Care Plans
Emergency Twilio SMS paging on downtime, fan-out to Slack and Mattermost, and Bill.com sync to verify care plan coverage before running updates.
Escalate WordPress lockouts to Linux firewall drops
Limit Login Attempts Reloaded (LLAR) stops brute-force attacks inside WordPress — but bots still consume Nginx connections and PHP-FPM worker processes.
Clockwork Control bridges WordPress to the Linux kernel: when LLAR locks out an IP, Clockwork Control pulls the lockout data into a review queue and fires an SSH command to fail2ban. Malicious packets are dropped at the Linux firewall (iptables) before they ever touch PHP or attack neighbor client sites.
Frequently Asked Questions
What is Clockwork Control Panel in simple terms?
Clockwork Control is a self-hosted command center designed specifically for Agency Owners and CTOs to manage all of their clients' hosting in one place. Instead of logging into 5 different hosting dashboards or paying per-site SaaS fees, Clockwork Control lets you connect only the hosting providers and cloud services you actually use.
Can I pick and choose which hosting providers and tools to use?
Yes. Clockwork Control is completely modular. If your agency uses SpinupWP or GridPane on DigitalOcean, Hetzner, Vultr, or Linode, turn on those modules. If you host other clients on Pressable, WP Engine, Kinsta, or Cloudways, enable those modules. If you don't use Azure, leave it disabled. You only activate the modules your agency needs.
How does Clockwork Control handle downtime alerting and care plan billing?
Clockwork Control connects to Twilio to send emergency SMS text messages to on-call engineers when a production site goes down, while fanning out alerts to Slack or Mattermost channels. It also integrates with Bill.com to check client invoice and subscription status — so your team always knows if a website is covered by an active Care Plan before performing work or running automated updates.
How does it solve the Cloudflare + SpinupWP origin SSL blindspot?
When Cloudflare proxies a site, browsers connect to Cloudflare's edge SSL certificate. If the origin server fails to renew its Let's Encrypt certificate, SpinupWP sends an email that easily gets buried in busy agency inboxes. External pingers report "200 OK" because they only see Cloudflare's edge. Clockwork Control inspects origin certificates directly on the server and highlights real expiration dates on your dashboard before outages happen.
How does the Limit Login Attempts Reloaded (LLAR) integration work?
Normally, LLAR only blocks attackers inside WordPress, meaning brute-force bots still hit Nginx and consume PHP-FPM server resources. Clockwork Control pulls active LLAR lockouts into a central review queue and fires an instant SSH ban to the server's fail2ban jail — dropping the attacker's packets at the Linux firewall (iptables) before they ever touch PHP.
Where do my client credentials and SSH keys live?
100% on your own infrastructure. Clockwork Control is not a multi-tenant SaaS. Your database lives on your local network (e.g. your office server or Mac Studio), and all credentials are encrypted at rest using AES-256-GCM via Laravel’s Crypt facade. Zero client data or credentials ever touch an external cloud.
Can I write my own modules for other hosts or services?
Yes! Clockwork Control is 100% vibe-coded and designed for AI extensibility. The CloudProvider and HostingProvider interfaces are lightweight contracts (~35 to 50 lines). You can prompt Claude Code or Gemini with your provider's API documentation and have a working module in 30 minutes.
Up and running on your LAN in 15 minutes
Requirements: PHP 8.4+, MySQL 9.6+, Node 20+, and Composer. 100% Free & Open-Source under MIT.
# 1. Clone the open-source control panel
$ git clone https://github.com/clockwork-web-dev/clockwork-control-panel.git && cd clockwork-control-panel
# 2. Run automated setup (dependencies, app key, migrations, assets)
$ composer setup
# 3. Add your agency email to the Google OAuth allowlist
$ php artisan clockwork:add-user you@agency.com --name="Your Name"
# 4. Start local server & scheduler
$ php artisan serve & php artisan schedule:work
