Lives at /settings (gear icon → “Settings Hub”, or clicking any settings tab). Serves as the central command center for fleet configuration, API integrations, maintenance runbooks, and system administration.

Prior to the unified hub, settings consisted of more than 24 independent pages in a flat navigation dropdown. The Settings Hub organizes all configuration into five structured operational pillars, backed by real-time client-side search, a desktop mega-menu, and cohesive sub-navigation tabs.

The Five Operational Pillars

The hub categorizes settings and operational tools into five functional areas:

1. Overview

The launchpad and discovery index for the entire administration suite:

Settings Overview (/settings) — Quick metrics, interactive search across all tools, and direct category jump cards.

2. Agency Branding

Unified agency white-label styling and client-facing branding:

Agency Branding & White Labeling (/settings/companion) — Dedicated single-tool pillar housing the Master Agency Brand Palette (primary, accent, surface, text), Companion (wp-admin) header chrome & branding, Client Reports styling, and Plugin Notification Email templates. When viewing this pillar, single-tool secondary ribbon noise is automatically omitted. See Companion & White Label.

3. Fleet Policies

Policies, fleet-wide plugins, and automated maintenance cadences:

Gatekeeper Lockouts (/settings/gatekeeper) — Configure native login lockout thresholds, progressive backoff durations, enterprise 429 page branding, and automated fleet sync.
WordPress Plugins (/settings/wordpress-plugins) — Fleet-wide plugin version inventory, adoption metrics, and update tracking.
Ingest Pipeline (/settings/ingest) — Threat log ingestion frequency (Gatekeeper, Wordfence, nginx) and IP ban auto-approval policies.
Security Scans (/settings/security-scans) — Daily vulnerability, checksum, and malware scan cadences.
Backup Relay (/settings/backup-relay) — Offsite S3/Glacier backup relay configuration and status monitoring. (Note: Tag Management (/settings/tags) is also accessible directly from the main Dashboard header and inline filter pills on / for rapid access).

4. Integrations & Alerts

Outbound API credentials, ecosystem modules, and alerting channels:

API Credentials (/settings/integrations) — Store and validate cloud provider (DigitalOcean, Hetzner, Azure, Vultr, Linode) and hosting provider API tokens (encrypted at rest, never echoed back).
Module Directory (/settings/modules) — Browse bundled and community extensions with trust tiers (official, verified, community).
Notifications & Alert Routing (/settings/notifications) — Internal on-call emergency dispatch lists, off-hours quiet windows, phone verification, and client alert subscriber contacts with multi-channel routing (SMS & Email).
Slack Alerts (/settings/slack) — Webhook integration and granular per-event notification toggles.
Mattermost Alerts (/settings/mattermost) — Self-hosted chatops integration and webhook channels.
Bill.com Sync (/settings/bill-com) — Automated recurring invoice synchronization and care plan reconciliation.
AiRemedy Autonomous Healing (/ai-remedy/settings / /ai-remedy) — OpenRouter API keys, model selection (Claude Sonnet 4.5 default, Haiku 4.5, Sonnet 4, GPT-4o, GPT-4o Mini, DeepSeek-V3), execution safety threshold (Passive Observation vs Auto-Heal), cooldown window, and rate limiting. See AiRemedy Autonomous Healing.
Feedback & Visual Annotations (/settings/feedback / /feedback) — In-app point-and-click comment pins, threaded team discussions, AI prompt generation for Claude/Grok, and module on/off controls. See Visual Feedback & Collaboration.

5. System & Workspace

Application governance, health diagnostics, and platform maintenance:

User Management (/settings/users) — Operator accounts, authentication allowlists, and role permissions.
Core Updates (/settings/updates) — Clockwork Control self-updater and Companion mu-plugin fleet deployment breakdown.
Database Maintenance (/settings/maintenance) — Database table statistics, cache clearing, and on-demand encrypted database exports.
Diagnostics & Health (/settings/diagnostics) — Live health probes across redis, database, scheduler, queues, and outbound APIs.
Scheduled Jobs (/settings/scheduled-jobs) — Every entry in the live cron schedule with its last outcome, duration, and a manual Run now trigger — see Scheduled Jobs Dashboard.
Threat Intelligence (/settings/weird-stats) — Pre-warmed analytics on blocked attacks, top attacker ASNs, and botnets.
Setup Checklist (/setup) — First-run installation wizard and initial provider onboarding checklist.
Documentation (/docs) — In-app team handbook, architecture docs, runbooks, and API catalogs.

Instant Client-Side Filtering: Powered by Alpine.js (x-model="search"). Filters all tool cards instantly by title, description, or keyword (e.g. typing "slack", "backup", "palette", or "token" highlights matching cards in real time).
Settings Sub-Tabs (settings._tabs.blade.php): A persistent navigation block rendered above <x-page-header> on every settings view. Below the lg breakpoint, Tier 1 is a full-width picker that lists all five pillars (Overview, Agency Branding, Fleet Policies, Integrations & Alerts, System & Workspace) so long labels are never clipped. At lg and up it is the underline tab row. Tier 2 displays a wrapping tools ribbon when the active pillar contains multiple tools, omitting ribbon clutter for single-tool pillars like Agency Branding.
Mega-Menu Popover: Desktop header gear icon opens a categorized popover menu matching the hub categories, providing single-click direct access to any destination.
Mobile Slide-Over Drawer: Responsive navigation drawer containing quick access links to settings pillars, theme switching, and sign-out actions.

Settings & Operations Hub