WordPress management glossary
Plain definitions for the terms that appear across WordPress maintenance, security and care plan work. Written to be genuinely explanatory rather than circular.
Care plan
A recurring service, usually monthly, under which a provider keeps a WordPress site updated, backed up, monitored and supported for a fixed fee, with a defined scope and reporting.
Core Web Vitals
Google's user experience metrics: Largest Contentful Paint (loading), Interaction to Next Paint (responsiveness) and Cumulative Layout Shift (visual stability). They influence search ranking and correlate with conversion.
CVSS score
The Common Vulnerability Scoring System rates severity from 0 to 10. It measures severity rather than urgency, so a high score requiring administrator access can be less pressing than a lower score requiring none.
Canary rollout
Applying a change to one representative site first, verifying the result, then releasing to the rest of the portfolio. Limits the blast radius of a bad release.
File integrity monitoring
Hashing core, plugin and theme files and comparing them against known-good versions, so unexpected modifications, such as an injected backdoor, become visible.
Freeze window
A defined period during which no changes are applied to a site, used around campaigns, sales and trading peaks. Security patches can optionally be allowed through.
Incremental backup
A backup that transfers only what has changed since the last copy, rather than the whole site. Faster, lighter on the server and practical to run frequently.
Managed WordPress hosting
Hosting optimised specifically for WordPress, typically including caching, staging and automatic core updates. It is not the same as maintenance, which covers plugins, verification, monitoring and reporting.
Mean time to patch
The average time between a vulnerability being disclosed and the patch being applied across a portfolio. The single most useful WordPress security metric.
Multisite
A WordPress feature running many sites from one installation with a shared plugin and theme set. Suitable for sites under one owner, poorly suited to independent client sites because it creates a shared failure domain.
One-click login
Reaching a site's WordPress admin without entering credentials, using a short-lived signed token rather than a stored password.
Restore point
A backup taken immediately before a change, specifically so the change can be reversed without losing anything that happened since the last scheduled backup.
Restore testing
Automatically restoring a backup into an isolated environment and confirming it boots and works. The difference between having backups and having recovery.
Risk scoring
Assessing an update before applying it, using version distance, changelog, vulnerability data, network-wide failure signals and the criticality of the site, to decide whether it can ship automatically.
Rollback
Reverting a site to its state before a change. Automatic rollback triggers without human involvement when post-update verification fails.
Serialised data
PHP data structures stored as strings in the WordPress database, commonly used by page builders and plugin settings. A plain search and replace corrupts them, which is why URL rewriting during migration must be serialisation-aware.
Staging site
A private copy of a site used to test changes before they reach production. Should be password protected and blocked from search engines.
Time to First Byte
How long the server takes to begin responding. Usually the clearest signal of whether a slowness problem is hosting, a plugin, or front-end code.
Visual regression testing
Comparing screenshots of key templates before and after a change, pixel by pixel, to detect layout breakage that a status code check would miss.
Vulnerability matching
Comparing published security advisories against the exact plugin, theme and core versions installed across a portfolio, so alerts describe real exposure rather than general news.
White label
Delivering a service entirely under your own brand, with no third-party vendor branding visible on the portal, reports, emails or connector plugin.
Stop logging into forty dashboards
Connect your first site in under two minutes. No credit card, no contract, no migration fee.
Free during early access. Keep your data, export any time.