MainWP for managing multiple WordPress sites

If you run more than a handful of WordPress sites, logging into each wp-admin for updates, backups, and security checks gets old fast. MainWP is an open-source management tool that turns one WordPress install into a central dashboard for many independent sites, including sites on different hosts.

It is not Multisite. Each child site stays its own WordPress install. MainWP connects them so you can work from one place.

How MainWP is set up

MainWP uses two plugins:

1. MainWP Dashboard on a dedicated WordPress site you use as the control panel
2. MainWP Child on every site you want to manage

Connect each Child site to the Dashboard, then they appear in your site list. MainWP’s own getting started guide walks through the connection steps.

Treat the Dashboard site like infrastructure: strong unique passwords, two-factor authentication, limited admin accounts, and a host you trust. Compromising the Dashboard can mean access to every connected child.

What MainWP is good at

MainWP’s free core covers a lot of day-to-day agency and freelancers work:

• Update plugins and themes across many sites from one screen
• Monitor posts, pages, and users without hopping logins
• Group sites by client or project
• Watch domain expiry and basic site health signals
• Plug in extensions for backups, uptime, staging, reports, and more

Updates matter because outdated plugins and themes are still the most common WordPress vulnerability path. A dashboard that shows “needs update” across 30 sites beats hoping you remembered every install. Pair that habit with the vulnerabilities hub.

User and role management from the Dashboard helps you keep least privilege honest: editors stay editors, and Administrator stays rare. More on roles: WordPress user roles.

Security with MainWP (honest take)

MainWP improves visibility and speed of maintenance. It does not replace security hardening on each site. You still need:

• Solid hosting and PHP versions
• Strong logins and MFA on every site (and on the Dashboard)
• Fewer plugins, kept updated
• Tested backups you can restore
• A security plugin (or equivalent controls) on each child

If you already use WP Security Ninja, the Security Ninja for MainWP extension shows scan results and vulnerabilities from the Dashboard, and can trigger remote scans. Details and free vs premium differences live on that page and in the MainWP docs.

Pricing and extensions

MainWP’s dashboard and many features are free. Paid plans and add-ons unlock extras (white label child plugin, advanced reporting, certain backup integrations, and so on). Check MainWP’s current free features and add-ons list before you buy; catalogs and prices change.

You do not need every extension on day one. Start with updates, connection hygiene, and backups. Add reporting or staging when your process actually needs them.

Who should use it

MainWP fits freelancers and agencies managing many separate WordPress sites. It is overkill for a single brochure site. Multisite networks are a different model; MainWP can still manage many Multisite installs as children, but it is not a substitute for careful network admin practices. See multisite security tips.

For a full WordPress security baseline beyond “manage updates faster,” use the WordPress security guide and checklist.

Quick start checklist

• Dedicated Dashboard site with MFA and a unique, strong admin password
• MainWP Child only on sites you manage; remove it when a site leaves your care
• Update workflow you actually run (weekly or after vuln alerts)
• Offsite backups with a restore test, not only “backup available” badges
• Security tooling on each child; MainWP overview if you use Security Ninja

MainWP is a solid open-source control plane for WordPress fleets. Use it to reduce login hopping and missed updates, not as a magic shield. Security still happens on each site.