WordPress management glossary
Plain definitions for the terms that appear across WordPress maintenance, security and care plan work. Written to be genuinely explanatory rather than circular.
Updated
Care plan
A recurring service, usually monthly, under which a provider keeps a WordPress site updated, backed up, monitored and supported for a fixed fee, with a defined scope and reporting. See the WordPress care plans guide.
Core Web Vitals
Google's user experience metrics: Largest Contentful Paint (loading), Interaction to Next Paint (responsiveness) and Cumulative Layout Shift (visual stability). They influence search ranking and correlate with conversion.
CVSS score
The Common Vulnerability Scoring System rates severity from 0 to 10. It measures severity rather than urgency, so a high score requiring administrator access can be less pressing than a lower score requiring none.
Canary rollout
Applying a change to one representative site first, verifying the result, then releasing to the rest of the portfolio. Limits the blast radius of a bad release.
Consent log
A record of the cookie consent choices visitors made on a site: what was accepted or rejected, when, which banner wording was shown and which version of the policy pages was live at the time. It is the evidence you produce when somebody asks what a site was tracking and on what basis.
Cookie consent
Giving visitors a clear choice before non-essential analytics, advertising or tracking cookies run, then honoring and recording that choice. A banner that appears but does not hold the trackers back is not consent. Across a portfolio it is managed most cleanly as cookie consent from one dashboard rather than a separate plugin per site.
File integrity monitoring
Hashing core, plugin and theme files and comparing them against known-good versions, so unexpected modifications, such as an injected backdoor, become visible. See Sentinel security monitoring.
Freeze window
A defined period during which no changes are applied to a site, used around campaigns, sales and trading peaks. Security patches can optionally be allowed through.
Incremental backup
A backup that transfers only what has changed since the last copy, rather than the whole site. Faster, lighter on the server and practical to run frequently.
Managed WordPress hosting
Hosting optimized specifically for WordPress, typically including caching, staging and automatic core updates. It is not the same as maintenance, which covers plugins, verification, monitoring and reporting.
Mean time to patch
The average time between a vulnerability being disclosed and the patch being applied across a portfolio. The single most useful WordPress security metric.
Multisite
A WordPress feature running many sites from one installation with a shared plugin and theme set. Suitable for sites under one owner, poorly suited to independent client sites because it creates a shared failure domain.
One-click login
Reaching a site's WordPress admin without entering credentials, using a short-lived signed token rather than a stored password. See one-click WordPress login.
Restore point
A backup taken immediately before a change, specifically so the change can be reversed without losing anything that happened since the last scheduled backup.
Restore testing
Automatically restoring a backup into an isolated environment and confirming it boots and works. The difference between having backups and having recovery. See restore testing in WPCentrify.
Risk scoring
Assessing an update before applying it, using version distance, changelog, vulnerability data, network-wide failure signals and the criticality of the site, to decide whether it can ship automatically. See safe WordPress updates.
Rollback
Reverting a site to its state before a change. Automatic rollback triggers without human involvement when post-update verification fails.
Serialized data
PHP data structures stored as strings in the WordPress database, commonly used by page builders and plugin settings. A plain search and replace corrupts them, which is why URL rewriting during migration must be serialization-aware.
Staging site
A private copy of a site used to test changes before they reach production. Should be password protected and blocked from search engines.
Time to First Byte
How long the server takes to begin responding. Usually the clearest signal of whether a slowness problem is hosting, a plugin, or front-end code.
Visual regression testing
Comparing screenshots of key templates before and after a change, pixel by pixel, to detect layout breakage that a status code check would miss. See visual regression testing for WordPress.
Vulnerability matching
Comparing published security advisories against the exact plugin, theme and core versions installed across a portfolio, so alerts describe real exposure rather than general news. See WordPress vulnerability monitoring.
White label
Delivering a service entirely under your own brand, with no third-party vendor branding visible on the portal, reports, emails or connector plugin. See white label WordPress dashboard.
Stop logging into forty dashboards
Connect your first site in under two minutes. No credit card, no contract.
Free during early access. Keep your data, export any time.