Manage GPL
Sign up free
Built by GPL Times

Manage every WordPress site
from one dashboard.

Stop logging into 50 different WP admins. Connect your sites, see every premium plugin and theme in one place, update them all with a single click.

Start free See how it works

No credit card · Free for 5 sites · Set up in 60 seconds

HMAC-signed · Open-source connector · No password storage

www.managegpl.com/dashboard
Library
Add site
M Maria

Welcome back, Maria

Here's what's happening across your sites.

Plan
Agency
Billing
Sites
6 / 1000
View all
Last activity
26m ago
Across all sites
Quick action
Connect site
Recent sites
View all
Connected
Connected 1
Connected 1
Cross-site views
Plugins
Across all sites
Themes
Across all sites
Billing
Plan & invoices

Powering site management for developers and agencies worldwide

74,000+
WP.org plugins & themes
6,500+
Premium plugins & themes
1,000
Sites on Agency Plan
99.9%
Uptime target
Features

Everything you need to run multiple sites

Built for developers, agencies, and anyone managing more than one WordPress install.

Bulk one-click updates

Pick a plugin, pick the sites, update them in parallel. Per-site results stream back as each one finishes; failures surface the exact error. (Single-item updates on WP.org items work on Free too.)

Available on Developer Agency

WordPress Multisite networks

Pair a whole network with one token, install network-wide or scope to a specific blog, SSO into any blog in one click. Whole network counts as one site.

Available on Free Developer Agency

Install from anywhere

Browse 60,000+ WordPress.org plugins, 14,000+ free themes, or the premium GPL Times catalog. Pick, queue, install on any site.

Available on Free Developer Agency

SSO login

Open any connected WP admin in one click — already logged in. One-time signed link, expires in 60 seconds.

Available on Free Developer Agency

Schedule Updates

Set it and forget it: pick the days, hour, timezone, and either all items or a specific allowlist. Runs in the background — no browser tab, no cron juggling.

Available on Developer Agency

Whitelabel branding

Rebrand the connector plugin per site or globally — name, author, hide-from-list. Live progress on bulk pushes.

Available on Agency
View all features
Killer feature · Agency plan

Rebrand once.
Apply to every site instantly.

Set your agency's plugin name, description, author, and homepage link in one form. Click save — we push the new branding to every connected site in parallel, with a live progress bar and per-site retry. No FTP, no client logins.

  • Global default — one profile covers your entire fleet.
  • Per-site overrides — swap in a different brand for a specific client.
  • Or hide it completely — one toggle removes the connector from the Plugins page and Settings menu. No trace.
See how it works View Agency plan
WP admin · Plugins
Before
Manage GPL Connect
Centralize updates across every WordPress site you manage. By Manage GPL
After
Apex Maintenance Toolkit
Keeps your Apex Digital site up-to-date and monitored. By Apex Digital
Applying whitelabel to 47 sites…
32 / 47
32 applied 12 in progress 3 retrying

We'll be right back.

apex-digital.com is down for scheduled maintenance.

Thanks for your patience — we're making the site better. Please check back in a few minutes.

If you're the site owner, log in to disable maintenance mode.
HTTP 503 · Retry-After 3600
Maintenance mode

One click.
Branded splash. Zero FTP.

Flip any site into a branded 503 maintenance page from your dashboard — no SSH, no wp-admin, no plugin upload. Logged-in administrators still see the live site; search engines get a Retry-After header so nothing drops from the index.

  • Admins stay in — maintenance mode never blocks your own access to the site.
  • SEO-safe 503 — the Retry-After header tells search engines to come back later, keeping rankings intact.
  • REST & cron exempt — scheduled tasks, backups, and webhooks keep running in the background.
Get started View pricing

Available on Developer and Agency plans.

Built for trust

Your sites stay yours. Always.

No backdoors, no password storage, no shared secrets. Every interaction between us and your WordPress site is signed, verified, and logged.

HMAC-signed every request

A unique secret per site signs every API call. Replays fail. The secret never leaves your site or our database in plaintext, and you can rotate it any time by re-pairing.

Tokens, never passwords

Pairing requires a one-time token visible only to WP admins. We never store or transmit your WordPress password. The auto-installer keeps credentials in memory for a single request, then drops them.

Short-lived signed download URLs

Premium package URLs are scoped to a single (site, item, version) tuple, signed, and expire within minutes. A leaked URL grants nothing — the connector on your site is the only thing that can use it, and only once.

One-time SSO links

When you SSO into a connected site, the URL is signed, single-use, and expires in 60 seconds. A leaked link grants nothing past that window.

Open-source connector

No obfuscation, no minification. The plugin we install on your site is plain readable PHP — audit every line before you trust it.

Per-site audit trail

Every install, update, lifecycle action, push, login, and connectivity event is logged per site for 30 days. You always know what happened, when, and who triggered it.

Download

Manage GPL Connect plugin

Free WordPress plugin that connects your site to your Manage GPL dashboard. Drop it into any WP install, copy the token from its settings page, paste it into Manage GPL — done.

WordPress 5.6+ PHP 7.4+ HMAC-secured Open-source (GPLv2)
Download plugin or sign up first →
How it works

Three steps to centralized control

01

Sign up — free

Create a free account in seconds. No credit card required.

02

Install the connect plugin

Download the connector, install it on your WordPress site, then copy the token from its settings page and paste it into Manage GPL.

03

Update everything

See all your premium plugins and themes in one place. Update with one click, on every site.

Pricing

Simple plans, no hidden fees

Start free. Upgrade when you need more sites or premium features. Annual billing — no per-action charges, no monthly add-ons.

5 sites

Free

For hobbyists

$0 / year

Forever free — no card required

Start free
  • WP.org plugin + theme install + updates
  • SSO login to any wp-admin
  • WordPress Multisite support (unlimited sub-blogs)
  • Plugin crash auto-recovery (drop-in)
  • Premium plugin & theme catalog (GPL Times)
  • Bulk updates across sites
  • Schedule Updates
  • Health + uptime monitoring with email alerts
  • Per-site activity log (30 days)
  • One-click maintenance mode
  • Whitelabel the connector plugin
  • Priority support
Most popular 50 sites

Developer

Most teams pick this

$99 / year

≈ $8.25 / month, billed annually

Get started
  • WP.org plugin + theme install + updates
  • SSO login to any wp-admin
  • WordPress Multisite support (unlimited sub-blogs)
  • Plugin crash auto-recovery (drop-in)
  • Premium plugin & theme catalog (GPL Times)
  • Bulk updates across sites
  • Schedule Updates
  • Health + uptime monitoring with email alerts
  • Per-site activity log (30 days)
  • One-click maintenance mode
  • Whitelabel the connector plugin
  • Priority support
1,000 sites

Agency

For agencies + teams

$199 / year

≈ $16.58 / month, billed annually

Get started
  • WP.org plugin + theme install + updates
  • SSO login to any wp-admin
  • WordPress Multisite support (unlimited sub-blogs)
  • Plugin crash auto-recovery (drop-in)
  • Premium plugin & theme catalog (GPL Times)
  • Bulk updates across sites
  • Schedule Updates
  • Health + uptime monitoring with email alerts
  • Per-site activity log (30 days)
  • One-click maintenance mode
  • Whitelabel the connector plugin
  • Priority support

3-day money-back guarantee on initial paid plans · Cancel anytime, no questions asked · All prices in USD

Why Manage GPL

Save hours every week.
No more 50-tab nightmares.

Manage GPL connects to every WordPress site you own. We check what's installed automatically, surface outdated plugins and themes, and let you push updates with a single click — across one site or all of them.

  • No more logging into individual WP admins
  • No more "what version of X is on which site?"
  • Every request signed with a per-site HMAC secret
  • Premium downloads served via short-lived, per-site HMAC-signed URLs
  • Always up to date — we check plugins & themes when you open a site
Live update flow
  • Manage GPL Queued: yoast/wordpress-seo on 12 sites now
  • mainsite.com Downloading yoast/wordpress-seo 24.1... 2s ago
  • client-blog.io Downloading yoast/wordpress-seo 24.1... 3s ago
  • mainsite.com Updated to 24.1 8s ago
  • client-blog.io Updated to 24.1 12s ago
FAQ

Common questions

How does Manage GPL connect to my WordPress site?
Two flows in the Add Site form: Automatic — give us wp-admin credentials once (used in memory for that single install request, never persisted); we install the connector plugin and pair the site in under 30 seconds. Manual — download the connector, install it yourself, copy the pairing token from its Settings page, paste it into Manage GPL. Both end the same way: every request between us and the site is HMAC-signed with a per-site secret. No passwords stored, ever.
How do I know the connector plugin itself is safe?
It's open-source — the entire plugin is plain readable PHP, no obfuscation, no minification. You can read every line before installing it, and you can pull it any time. We have no other way into your site beyond what the connector exposes, so removing the plugin removes our access immediately.
How are premium plugin downloads authenticated?
Every download URL is scoped to a single (site, item, version) tuple, HMAC-signed, and short-lived (minutes, not hours). The connector uses the URL once to fetch the package over HTTPS; a leaked URL is useless to anyone else. The connector also supports SHA-256 content verification (via an expected_sha256 field the platform can send) for future end-to-end package signing.
What if I want to disconnect or rotate credentials?
Click Pause site from any site's page to immediately suspend our access without deleting state. To rotate the HMAC secret, just re-pair the site — the old secret is replaced and any leaked credentials become useless. To leave entirely, click Delete site from the dashboard (or click Regenerate token in the connector's WP admin settings) — both drop our row and revoke the HMAC secret in one click.
What plugins and themes can I install or update?
Three sources: the full WordPress.org catalog (60,000+ free plugins + 14,000+ free themes, refreshed every 6 hours), the GPL Times premium library (6,500+ plugins and themes, refreshed hourly), and any self-hosted plugin or theme that publishes its own update URL. All three appear together on the per-site page.
Can I schedule updates to run automatically?
Yes — on the Developer and Agency plans. Open Settings → Schedule Updates, pick the days of the week, hour, and timezone, and choose to update either all plugins & themes or a specific whitelist. A per-site override at Sites → [site] → Schedule Updates replaces the global schedule for that site. Minimum cadence is once per day. You get a failure email by default (opt in to completion emails if you want them).
What does whitelabel actually do?
On the Agency plan, you can rename the Manage GPL Connect plugin so it appears under your own brand on every connected site — set the name, description, author, and author URL globally or per site. You can also hide it from the WP plugins page entirely. Bulk pushes show a live progress bar with a Retry button per failed site.
Does it work with subdirectory WordPress installs?
Yes — sites at example.com/blog or example.com/webapp work exactly the same as root installs. We also accept pasted URLs from your browser address bar (wp-login.php, /wp-admin, with or without query strings) and resolve them to the WP root automatically.
Is there a free tier?
Yes. The Free plan lets you connect up to 5 sites, install + update free WordPress.org plugins one click at a time, see what's installed on each site, and SSO-login. Premium one-click updates, bulk operations, and whitelabel branding require Developer or Agency.
Can I cancel anytime?
Yes. Cancel from your billing dashboard at any time. Your subscription remains active until the end of your current billing period; after that you drop to Free with no data loss. You can also switch plans at any time — upgrades apply immediately with a prorated charge, downgrades take effect at the end of the period.
What happens if a payment fails?
Stripe automatically retries the failed charge for a few weeks per its standard dunning schedule. You'll get Stripe's payment-failure emails plus one notification from us when the first retry fails. Your features stay active for the entire dunning window. If every retry fails, Stripe cancels the subscription and your account drops to Free. Your sites remain connected — you keep view-only access to them on the Free tier.
Where is my data stored?
On our servers in Europe. We never store your WordPress admin passwords. Per-site HMAC secrets are stored at rest, used to sign every request, and rotatable on demand by re-pairing.

Ready to centralize your sites?

Free to start. Sign up takes under 30 seconds — no credit card required.

Start free See pricing