No black box. Every action visible, every action reversible.

A backup before going live

Before an update goes live, Verploy puts the site in maintenance mode and backs up files and database. Nightly backups are encrypted and stored in the EU.

Every update checked, risky ones on a copy first

Verploy rates the risk of every update. Risky updates are tested on a private copy of the site first, on desktop and mobile, including forms and WooCommerce checkout. The copy sends no email, makes no outgoing requests and is not indexable.

Automatic rollback, checked

If something misbehaves after go-live, Verploy restores the previous files and database, reloads the tested pages and confirms the versions match before it reports rolled back. Orders and form entries made in between are kept aside so you can put them back.

Protection until the fix is safe

When a known vulnerability has no safe update yet, Verploy can block the exact request used to exploit it until a safe update is live. Requires Connector 2.23 or later.

You decide how much is automatic

Automatic updates can be switched on or off per agency and per site. For vulnerabilities, Verploy asks first by default. Automatic fixes only when you enable them, and only for high and critical vulnerabilities with a safe fix.

Every action visible

Every update run has a step log in the app, and every outcome (live, held back or rolled back) stays in your history. Releases of Verploy itself are on the public changelog.

Planned

Ctrl+Z for WordPress

Undo just the damage of a bad change and keep the rest of the site. Launching December 2026; not yet in the app.