Pluggable Architecture34 Built-in Modular Packages

Pick and choose modules for
every client, host, and workflow

Agencies don’t host all client sites in one place or use one single tool. Clockwork Control connects to SpinupWP, Pressable, WP Engine, Kinsta, and Cloudways, handles instant alerts via Slack, Mattermost, and Twilio SMS, and syncs with Bill.com to verify active Care Plans — while letting you activate only what you need.

Architecture Explained

Hosting Providers vs. Cloud Providers

Clockwork Control cleanly separates Hosting Providers (where WordPress sits) from Cloud Providers (the raw hardware hypervisor).

1. HostingProvider Contract

Manages WordPress sites, cert synchronization, SSH command execution, companion mu-plugin deployment, and orphan site detection. (e.g. SpinupWP, Pressable, WP Engine, Kinsta, Cloudways).

2. CloudProvider Contract

Polls hypervisors for CPU, memory, disk I/O, load averages, and private IP mappings. (e.g. DigitalOcean, Hetzner, Vultr, Linode, Azure Monitor).

The Layered Provider Advantage:

SpinupWP + DigitalOcean: SpinupWP manages Nginx, PHP, and MySQL on the server. The DigitalOcean module queries the DO hypervisor metrics API. Together, you get full operating system control plus raw hardware telemetry.

WP Engine & Kinsta: Dedicated managed WordPress environments with OAuth/Bearer API keys and per-site SSH tunnels for WP-CLI execution.

Pressable (Zero-SSH): Managed cluster addressed strictly by API and async command queues, seamlessly integrated alongside server-based hosts.

Built-in Hosting Modules

6 Hosting Modules

Connect the hosting environments your clients run on today.

SpinupWP

Server-Linked Hosting

Manages WordPress sites tied to direct Linux servers. Communicates via SSH as a non-root sudo user. Handles Nginx log tailing, apt updates, fail2ban jails, and PHP-FPM socket diagnostics.

Key Capabilities
✓SSH Command Execution
✓Server Linkage
✓Nginx Log Tailing
✓fail2ban Jail Management
✓Apt Package Inspection
✓Companion mu-plugin

Pressable

Managed Platform (Zero-SSH)

Manages WordPress sites with zero underlying server access. Addressed strictly by site_id. Uses Pressable OAuth2 REST API and async run_site_wpcli_commands / run_site_bash_commands runners.

Key Capabilities
✓Zero-SSH Architecture
✓Async WP-CLI Execution
✓REST API Management
✓S3 Glacier 90-Day Backup Relay
✓Object Cache Flushing
✓Companion mu-plugin

WP Engine

Enterprise Managed Hosting

Integrates with WP Engine API v1 using OAuth client credentials. Connects per-site SSH tunnels for WP-CLI execution and automated Companion mu-plugin deployment across client installs.

Key Capabilities
✓WPEngine API v1 Auth
✓Per-Site SSH Execution
✓Automated Companion Deploy
✓Diagnostic API Ping
✓Orphan Detection

Kinsta

Managed Container Hosting

Integrates with MyKinsta API v2 using static Bearer API keys. Maps Kinsta's Company → Site → Environment hierarchy, manages per-environment SSH commands, and validates API health.

Key Capabilities
✓MyKinsta API v2 Auth
✓Environment ID Mapping
✓SSH Command Runner
✓Automated Companion Deploy
✓Diagnostic Ping

Cloudways

Managed Cloud VPS

Implements both CloudProvider and HostingProvider contracts via Cloudways REST API. Gathers server-level CPU/RAM metrics and monitors client WordPress app environments.

Key Capabilities
✓Cloudways REST API v1
✓Dual Provider Contract
✓Server Hardware Metrics
✓App Environment Sync
✓Diagnostic Health Check

GridPane

High-Performance VPS Panel

Manages WordPress installs on cloud VPS (DigitalOcean, Vultr, Linode, AWS, Hetzner, UpCloud, Custom). Communicates via GridPane API v1 and runs WP-CLI over SSH.

Key Capabilities
✓GridPane API v1 Auth
✓Automated Fleet Sync
✓SSH Command Runner
✓View-Only Safe Mode
✓Companion Deployment
Built-in Cloud Modules

6 Cloud Provider Modules

Pulls raw 5-minute CPU, memory, and disk metrics from cloud APIs.

DigitalOcean

IaaS & Spaces S3

Pulls hypervisor-level CPU, memory, disk, and load telemetry every 5 minutes from DigitalOcean v2 API. Cross-references Droplet IPv4s, verifies Spaces S3 snapshots, and provides an interactive backup history modal.

Hardware Telemetry✓ Verified

Hetzner Cloud

IaaS Hypervisor

Integrates with Hetzner Cloud v1 API across North America and Europe datacenters. Gathers CPU, disk IO, and network telemetry for cost-effective dedicated and cloud instances.

Hardware Telemetry✓ Verified

Vultr Cloud

IaaS Hypervisor

Integrates with Vultr API v2. Discovers instances, maps plan size tiers, matches server public IPs, and monitors instance lifecycles across SpinupWP and standalone VPS fleets.

Deep dive →✓ Verified

Linode (Akamai)

IaaS Hypervisor

Integrates with Linode API v4. Pulls native CPU time series metrics, monitors hardware specs, resolves instance tiers, and cross-references public IPs across worldwide datacenters.

Azure Monitor

Enterprise IaaS

Enterprise Azure Resource Manager integration using Entra ID Service Principals. Queries Azure Monitor for Percentage CPU and Available Memory Bytes on production VMs.

Cloudways Cloud

Managed VPS Metrics

Queries Cloudways API for server-level CPU, memory, and disk usage across Cloudways-provisioned droplets and compute instances.

Hardware TelemetryHelp test →
Incident & Alert Modules

Ops Chat & SMS Notification Channels

Fan-out alerts where your team already works: Twilio SMS, Slack, Mattermost, and per-client channels.

Twilio SMS Text Module

On-Call SMS Alerts

Urgent SMS text paging dispatched directly to on-call engineers when a production client site goes down. Supports recipient phonebooks, off-hours schedules, and VIP care-plan escalation.

Built-in (modules/Twilio)

Slack Alerts Module

Ops Chat Alerting

Webhooks and incident fan-out for agency Slack channels. Broadcasts downtime alerts, origin SSL renewal warnings, and IP ban actions.

Built-in (modules/Slack)

Mattermost Module

Self-Hosted ChatOps

Self-hosted incident alerting for agencies operating private Mattermost instances. Keeps team ops channels noise-free with state-transition gating and rich markdown alert cards.

Built-in (modules/Mattermost)

Client Slack Channels

Client Webhooks

Multi-tenant client Slack notifications routing maintenance reports and verified backup confirmations exclusively to customer-specific Slack channels.

Built-in (modules/ClientSlack)
Agency Operations & Finance

Bill.com Care Plan Integration

Never perform maintenance or out-of-scope work on unmanaged sites by mistake.

Bill.com Care Plan Sync

Care Plan Verification
Active Module

Agency billing and invoice reconciliation overlay. Links client WordPress sites directly to Bill.com customer accounts and active subscriptions. Know instantly whether each website is covered under an active Care Plan, grace period, or unpaid status before performing maintenance or out-of-scope work.

Package: clockwork/module-billcom✓ Live Sync

Why Care Plan Verification Matters:

Eliminate Billing Leaks: When clients cancel their monthly retainer or fall behind on invoices, your team shouldn't be applying emergency plugin updates or fixing outages for free.

Instant Status Badges: Every site in your dashboard reflects its current Bill.com standing — Active Care Plan, Grace Period, or Unmanaged / Bill Overdue.

Automated Tier Rules: Trigger emergency Twilio SMS paging and 1-hour response SLAs only for VIP clients on active tier plans.

Performance & Threat Detection

Speed Audits, Security & Email Authentication

Automated Core Web Vitals, real-user CrUX field metrics, Sucuri malware checks, and DNS-over-HTTPS email authentication.

GTmetrix REST API

Speed & CWV Audits

Automated website speed, Core Web Vitals, and Lighthouse testing. Runs scheduled audits pinned to consistent datacenters and triggers alerts on speed regressions.

Built-in (modules/GTmetrix)

Google PageSpeed & CrUX

Lighthouse & CrUX Field Data

Automated 4-category Lighthouse audits (Performance, Accessibility, Best Practices, SEO) paired with Google Chrome UX Report (CrUX) 28-day rolling real-user Core Web Vitals field metrics.

Built-in (modules/PageSpeedInsights)

Sucuri & Threat Intelligence

Malware & Web Risk

Automated remote malware scanning, Google Cloud Web Risk API domain reputation monitoring, Spamhaus DBL threat checks, and domain safety reports.

Built-in (modules/Sucuri)

Email Authentication Posture

SPF, DMARC, DKIM & Client Notices

Fleet-wide email authentication deliverability and anti-spoofing defense. Validates RFC 7208 SPF lookup limits (<10) and void queries, RFC 7489 DMARC policies, multi-selector DKIM probing via DNS-over-HTTPS, state degradation alerts, and an interactive Client Notice Composer for 1-click deliverability notices.

Built-in (modules/EmailAuth)
Fleet Operations & Client Experience

ManageWP Replacement & Operations Modules

Built-in operational modules to manage clients, run snippets, moderate comments, and deliver executive reports with $0 per-site add-on fees.

AiRemedy (Self-Healing Servers)

Self-Healing & Triage

AI-driven server triage and self-healing powered by OpenRouter (Claude Sonnet 4.5 default). Features continuous spike watchdogs, chronic 48-hour saturation tracking, Shadow Mode forensics, allowlist-guarded SSH execution, diagnostic accuracy reports, operator review queues, and automated 60-minute resolution outcome tracking.

Built-in (modules/AiRemedy)

Client Reports

Inline Executive Reports

Automated executive client reporting aggregating updates, uptime, security scans, backups, performance, and forms into white-labeled reports with full inline HTML emails, embedded brand logos, and automated monthly scheduling.

Built-in (modules/ClientReports)

Client Management

Client Directory

Agency client directory organizing sites by account with contact info, notes, and direct integration with automated client reports.

Built-in (modules/ClientManagement)

Code Snippets Workbench

PHP Workbench

Sandboxed PHP execution workbench with preset templates and custom scripts runnable across single or batch client sites via the Companion bridge.

Built-in (modules/CodeSnippets)

Site Maintenance Mode

Maintenance Mode

1-click WordPress 503 maintenance mode toggle with custom splash titles, messages, and secret bypass keys without requiring SSH access.

Built-in (modules/SiteMaintenance)

Comment Moderation

Comment Inbox

Multi-site comment moderation (approve, hold, spam, trash, delete) with automated weekly scheduled cleanup of old spam and trash.

Built-in (modules/CommentModeration)

Backup Relay & Archival

S3 Glacier Archival

Cross-provider backup relay and automated AWS S3 Glacier Instant Retrieval archival with 90-day air-gap retention at pennies per month.

Built-in (modules/BackupRelay)

Gatekeeper & fail2ban Bridge

Native Active Defense

Native login lockout defense and lockout log ingestion. Escalates WordPress lockouts to Linux fail2ban to drop attack packets at the firewall before hitting PHP.

Built-in (modules/Gatekeeper)

Visual Feedback & Claude Prompts

Visual Collaboration

Point-and-click visual annotations, live element pins, threaded discussions, and 1-click Claude prompt generation for instant design and bug triage.

Built-in (modules/Feedback)

Contact Form Testing

Synthetic Form QA

Automated synthetic end-to-end testing and delivery verification for WordPress forms (Gravity Forms, CF7, WPForms, etc.) with weekly/daily scheduling and chat alerts.

Built-in (modules/ContactForms)
Identity & Access Management

Team Single Sign-On (SSO) Modules

Enforce enterprise identity providers with corporate email domain allowlists.

Google Workspace OAuth

Google SSO

Sign in to Clockwork Control using Google Workspace or Gmail accounts with strict company email domain allowlist enforcement.

Built-in (modules/AuthGoogle)

GitHub OAuth

Developer SSO

Developer single sign-on with verified primary email matching and agency GitHub organization membership linkage.

Built-in (modules/AuthGitHub)

Microsoft Entra ID

Microsoft 365 SSO

Enterprise single sign-on using Microsoft 365 or Azure Entra ID with Microsoft Graph profile sync and tenant isolation.

Built-in (modules/AuthMicrosoft)
Extensible Architecture

Build a custom module in an afternoon

Clockwork Control was engineered with lightweight, minimal PHP contracts. The interfaces are so clean and self-contained that implementing a new provider takes only a few dozen lines of code.

CloudProvider Interface (~35 lines)Contracts/CloudProvider.php

Requires only 4 methods: id(), name(), pollTelemetry(Server $server), and discoverServers().

HostingProvider Interface (~50 lines)Contracts/HostingProvider.php

Feature-gated capabilities: supports(), syncSites(), and optional runSshCommand().

Example starter prompt for AI coding assistants (Claude Code / Gemini / Cursor):

"I need to add a new CloudProvider module for AWS EC2 to Clockwork Control. Please read `modules/DigitalOcean/src/DigitalOceanCloudProvider.php` for the contract implementation pattern, read `modules/Core/src/Contracts/CloudProvider.php`, and write a `modules/Aws` package with Pest tests and PHPStan Level 5 adherence."

Planned Community Modules:

AWS EC2 + CloudWatchCloud Provider
Google Cloud Compute EngineCloud Provider
Oracle Cloud InfrastructureCloud Provider
Open Extensibility

Want to build a module for your agency’s stack?

Clockwork Control’s decoupled contract system makes it easy to generate a custom module for RunCloud, ServerPilot, Scaleway, or any internal tool—and get it officially listed in our directory.

Build a 3rd-Party Module→
Clockwork Web Dev
Brought to you by Clockwork Web Dev

A real WordPress development agency building battle-tested operational tooling to run client fleets with zero bloat and total control.

Visit Clockwork Web Dev→