InfiniteWP pioneered self-hosting in 2012.
Clockwork Control is how modern agencies run in 2026.
InfiniteWP showed us the value of self-hosting, but running a decade-old PHP codebase with historical worker security vulnerabilities and annual add-on paywalls ($147–$247/year) is no longer how modern WordPress agencies operate. Clockwork Control is a generational leap forward: a modern, hardened Laravel 13 application backed by 2,100+ automated tests, direct hosting provider API integrations, and $0 licensing fees.
A decade of engineering progress
Why running a modern Laravel 13 application completely transforms your agency operations compared to 2012-era PHP scripts.
Modern Laravel 13 vs. 2012 Scripts
InfiniteWP is built on custom PHP scripts from more than a decade ago. Clockwork Control is a clean, modern Laravel 13 app with 2,100+ automated tests, strict types, and compiled assets.
Hardened Security & Nonces
InfiniteWP has suffered from high-profile client plugin auth bypass exploits. Clockwork Companion uses ephemeral HMAC-SHA256 nonces with zero password storage and Must-Use tamper protection.
$0 Pricing vs. $147+ Add-On Bundles
InfiniteWP gates client reporting, scheduled backups, and broken link checks behind annual addon renewals ($147–$247/yr). In Clockwork Control, 100% of modules are free and open-source under MIT.
Deep Hosting Infrastructure Sync
InfiniteWP only speaks to the WordPress admin layer. Clockwork Control synchronizes directly with SpinupWP, Pressable, WP Engine, Kinsta, Cloudways, and Linux VPS hypervisors.
InfiniteWP vs. Clockwork Control
A comprehensive side-by-side evaluation of legacy PHP architecture versus modern self-hosted command center engineering.
| Evaluation Criteria | InfiniteWP (Legacy PHP Scripts) | Clockwork Control (Modern Laravel 13) |
|---|---|---|
| Software Architecture & Framework | Legacy custom PHP scripts dating back to 2012 (often requires custom IonCube loaders or obsolete server configurations) | ✓Modern, hardened Laravel 13 application running on PHP 8.4 with 2,100+ automated tests and clean modular contracts |
| Software Cost & Add-On Licensing | Freemium core with paid add-on bundles ($147 – $247 / year) required for reporting, scheduling, and broken link checks | ✓$0 / month (100% Free & Open-Source under the MIT License — every module is built-in with zero add-on paywalls) |
| Security & Authentication Posture | Historical security vulnerabilities in client plugin (including high-severity authentication bypass exploits CVE-2019-19134) | ✓Cryptographically signed short-lived HMAC-SHA256 nonces, zero shared password storage, and read-only audit logging |
| Hosting & Cloud API Sync | None (InfiniteWP has no connection to modern managed hosting APIs or cloud hypervisors) | ✓Native API & SSH synchronization with SpinupWP, Pressable, WP Engine, Kinsta, Cloudways, DigitalOcean, Hetzner, Vultr, Linode, & Azure |
| Client WordPress Plugin Bridge | InfiniteWP Client (standard plugin in wp-content/plugins/ that client admins can accidentally deactivate) | ✓Clockwork Companion (lightweight Must-Use mu-plugin deployed to wp-content/mu-plugins/ that cannot be modified or deactivated by clients) |
| Dashboard User Experience | Dated 2012-era dense table layout with legacy modal popups and slow refresh cycles | ✓Dual-Layout Architecture: switch instantly between high-density Command Center operations rail and spacious Modern Studio with real-time live search |
| Visual Fleet Grid & Screenshots | None (basic text-only tables) | ✓Toggleable visual card grid with automated 16:10 website preview thumbnails and real-time health-colored accent status strips |
| Automated Client Reports | Paid add-on ($147–$247/yr bundle) with rigid legacy templates | ✓Built-in Executive Client Reports module in /settings/companion with Master Agency Brand Palette cascading to PDF, web, and emails at $0 |
| Backups & Long-Term Archival | Paid cloud backup add-ons or cumbersome local zip creation that can choke client server disks | ✓DigitalOcean Spaces S3 verification paired with automated offsite backup relay to AWS S3 Glacier Instant Retrieval (90-day retention) |
| Full-Stack Server Telemetry | Basic ping only (completely blind to CPU spikes, RAM exhaustion, or disk exhaustion) | ✓Real-time telemetry: hypervisor CPU load, memory exhaustion, Ubuntu apt security updates, and fail2ban firewall jails |
| Multi-Layer Security & Threat Intel | Basic plugin version audits | ✓4-layer threat intel: Google Cloud Web Risk API + Spamhaus/URLhaus + remote Sucuri + core checksums + fail2ban IP jail sync |
| Synthetic Form Testing | None (blind to broken client contact forms) | ✓Automated synthetic form submissions verifying deliverability on Gravity Forms & CF7 with streak failure alerts |
| Emergency Alerting & SLA | Email notifications only | ✓Twilio SMS emergency text dispatch to on-call phones + Slack/Mattermost channels with DNS fault attribution |
How to migrate from InfiniteWP in 5 steps
Follow this field-tested procedure to upgrade your fleet without interrupting maintenance or risking client sites.
Export Active Fleet from InfiniteWP
Open your InfiniteWP Admin Panel and export your sites list. Gather domain URLs, client notes, and assigned server tags. Keep InfiniteWP running while you prepare your new setup.
# Review your active sites list
# InfiniteWP Admin Panel > Sites > Export SitesDeploy Clockwork Control in 3 Minutes
Clone the Clockwork Control repository to your local Mac Studio, office workstation, or a new Linux VPS. Run composer setup to automatically install dependencies, build the database, and create your agency admin.
git clone https://github.com/Clockwork-Web-Dev-LLC/clockwork-control.git
cd clockwork-control && composer setup
php artisan clockwork:add-user agencyadmin@agency.com --name="Agency Admin"Auto-Discover Fleet via Hosting APIs
Connect your SpinupWP, Pressable, WP Engine, Kinsta, or Cloudways credentials. Clockwork Control auto-discovers your servers, live environments, and staging sites without manual key entry.
# Auto-sync your entire hosting infrastructure
php artisan clockwork:import-spinupwp
php artisan clockwork:import-pressable
php artisan clockwork:import-kinstaInstall Clockwork Companion as a Must-Use mu-plugin
Deploy clockwork-companion.php into wp-content/mu-plugins/ across your client sites. It runs side-by-side with the InfiniteWP Client plugin during your transition with zero interference.
# Deploy via WP-CLI across your servers
wp-content/mu-plugins/clockwork-companion.php
php artisan clockwork:push-companion-brandingValidate Telemetry & Decommission InfiniteWP
Verify 1-click passwordless SSO, daily S3 Glacier backup verification, automated client reports, and threat scans. Bulk-deactivate the InfiniteWP Client plugin and decommission your legacy InfiniteWP server.
# Bulk-deactivate legacy InfiniteWP Client via WP-CLI
wp plugin deactivate iwp-client --allow-root
# Shut down legacy InfiniteWP server and cancel add-on renewals!Frequently Asked Questions About Leaving InfiniteWP
Everything you need to know about upgrading to modern Laravel fleet management.
Why should we migrate from InfiniteWP to Clockwork Control?
InfiniteWP was a great solution when it launched in 2012, but its legacy PHP architecture has aged poorly. It requires manual maintenance, lacks modern security controls (having suffered critical client plugin authentication bypass exploits in the past), charges $147 to $247/year for add-on bundles, and cannot connect to modern hosting APIs like SpinupWP, Pressable, or Kinsta. Clockwork Control is a modern Laravel 13 application running on PHP 8.4 with 2,100+ automated tests, $0 licensing under MIT, and full-stack hosting hypervisor telemetry.
Can Clockwork Companion and InfiniteWP Client run simultaneously?
Yes! Clockwork Companion deploys as an isolated Must-Use plugin (mu-plugin) in wp-content/mu-plugins/ and communicates via secure HMAC-SHA256 endpoints. It does not touch or conflict with the InfiniteWP Client plugin. You can run both systems side-by-side for as long as needed to validate your setup.
How does Clockwork Control compare on security?
Security is a core differentiator. InfiniteWP Client has historically been targeted by major CVE exploits that allowed unauthenticated remote administrative access. Clockwork Companion requires cryptographically signed, short-lived HMAC-SHA256 nonces for all operations, stores zero sensitive passwords in the database, runs in a protected mu-plugins directory that client admins cannot tamper with, and integrates directly with Linux fail2ban firewalls and Google Cloud Web Risk threat intelligence.
Do we have to pay for add-ons like we do in InfiniteWP?
No. InfiniteWP charges $147 to $247 per year for add-on suites that enable client reporting, broken link checks, and scheduled backups. In Clockwork Control, all of these features — including Executive Client Reports, Master Brand Palette, Code Snippets Workbench, 1-Click Maintenance Mode, and S3 Glacier backup archival — are 100% built-in and free under the MIT License.
Where do we host Clockwork Control?
You can host Clockwork Control wherever your agency prefers: locally on a Mac Studio or office workstation behind your firewall, or on a private Linux VPS (such as a $6/mo Hetzner or DigitalOcean droplet). Unlike InfiniteWP, it requires no obscure PHP extensions or IonCube loaders — just standard PHP 8.4, Composer, and SQLite or MySQL.
Can client site administrators deactivate Clockwork Companion?
No. Because Clockwork Companion deploys as a Must-Use plugin (wp-content/mu-plugins/), it does not appear in the standard WordPress deactivation interface. Client admins cannot accidentally or intentionally disable your agency command connection.
Upgrade to modern agency fleet engineering
Install Clockwork Control locally on your Mac Studio or office workstation. No credit card, no add-on fees, no recurring SaaS subscriptions.
