WordPress Security for Agencies, White-Label

The problem

Why it’s harder than it looks.

One hacked client infects the rest

Client sites on a shared VPS usually run as the same user. One outdated plugin on one site can put webshells in all of them, and the clean-up lands on your team.

Security is eating your margin

Emergency clean-ups are unplanned, unbilled and pull developers off paid work. Per-site plugins add cost and still miss server-level backdoors.

Clients want proof

Clients increasingly ask what you do to keep them safe. Without reports, your security work is invisible until something goes wrong.

What you get

Built for how you actually work.

Fully white-label

Reports and client communication carry your agency brand, so security becomes part of your own care plan.

Whole-server monitoring

Every site on each server is discovered and scanned, including staging copies and sites you forgot were there.

Unlimited malware removal

Infections and re-infections are cleaned at no extra cost, with the entry point found and closed.

Updates across client sites

Core, plugin and theme updates handled across your client estate, reducing the most common way in.

Shareable monthly reports

Plain-English summaries with technical detail behind them, ready to send to clients each month.

Priority response

Agency accounts are prioritised when an incident is raised, and we start triage as soon as you get in touch.

Reporting

Reports your clients, insurers and auditors can read.

Plain-English executive summaries up front, full technical findings, timelines and hashed evidence behind them. HTML report plus ZIP package, under your brand.

INCIDENT REPORT · PZ-2026-0192

acme-prod-01 · Remediation summary

Risk beforeCritical

Risk afterLow

Files quarantined2,047

Evidence hashesSHA-256

Executive summary

The server was compromised through a vulnerable upload endpoint. The attacker installed a webshell, a rogue administrator and a cron job that re-downloaded the payload every minute. All persistence has been removed and the entry point closed.

report.html evidence.zip

How does white-label website security work for agencies?

You sell security as part of your own maintenance or care plan, and PatientZero does the technical work behind it. We connect to your servers, monitor and clean every client site, and produce reports under your brand. Your clients deal with you; we stay in the background unless you ask us to join a call.

Connect your servers. We connect over SSH and discover every WordPress site on each server.
Baseline scan. A Forensic scan and Malware sweep show where each client stands today.
Clean and harden. Existing infections are removed and hardening playbooks applied across every site.
Monitor and report. Scans run on a schedule and monthly reports go out under your brand.

For more detail, read our guide to white-label website security for agencies.

Can I see every client server in one place?

Yes. The platform Overview shows every server you manage, how many are connected, failed or untested, and which scans are running. The "Needs attention" queue lists anything that needs a decision, from new findings to servers ready for hardening, so your team can work through the estate in one place.

# Overview (fictional agency estate)
Servers 12   Connected 12   Failed 0   Untested 1   Scans running 2
acme-prod-01    root sees 18 WordPress sites    clean
shop-eu-02      root sees 6 WordPress sites     malware-intelligence · 9 findings  [Fix]

See monitoring and reports for how each part works.

How much does agency website security cost?

The Agency (white-label) plan starts from £299 a month and covers whole-server protection for your client sites, white-label reporting, updates across client sites and priority emergency response. Larger estates across several servers are scoped individually. There is no contract, and you can cancel any time.

Unlimited malware removal on every site covered
24/7 monitoring of every connected server
Hardening and reinfection prevention included
Fair use applies to full server rebuilds

Compare all plans on the pricing page.

Pricing

Plans that fit.

Every plan includes unlimited malware removal and no long-term contract.

Agency (white-label)

Whole-server protection for your client sites, under your brand.

From£299/month

White-label for your clients

Talk to us

Whole-server protection for client sites
Fully white-label
Shareable client reports
Updates across client sites
Priority emergency response

Server / Multi-site

Your whole VPS or shared server, every site on it included.

POA

Scoped to your server

Scope my server

Whole VPS or shared server
All sites included
Unlimited clean-ups
Full-server monitoring and hardening
Firewall and SSH lockdown
Priority response

Every plan includes unlimited malware removal and no long-term contract. New accounts start with a one-off £129.99 security audit so we know exactly what we’re cleaning before the first removal.

No contract
Cancel any time
Rapid response
Fair use applies to full rebuilds

FAQs

Frequently asked questions

Straight answers. If yours isn’t here, call 01932 593642.

Will my clients know PatientZero is involved?

Not unless you want them to. The Agency plan is fully white-label: reports and client-facing communication carry your brand. If you would like us on a call during an incident, we can join as part of your team.

Do you cover every site on the server or only some?

Every site the scan engine can see on each connected server is included. That matters because an unmonitored site on the same server is often the source of re-infection for the ones you care about.

Do you handle WordPress updates for client sites?

Yes. Updates across client sites are part of the Agency plan, which closes the most common entry point: outdated plugins and themes. We agree how updates are tested and scheduled with you so they fit your own processes.

What does priority response mean?

Incidents raised by agency accounts go to the front of the queue and we start triage as soon as you get in touch. We do not publish a fixed response time; we will agree expectations with you when you join.

Is there a minimum contract?

No. The Agency plan is monthly with no contract, and you can cancel any time. Pricing starts from £299 a month and larger estates are scoped individually.

White-label WordPress security for agencies

Why it’s harder than it looks.

One hacked client infects the rest

Security is eating your margin

Clients want proof

Built for how you actually work.

Fully white-label

Whole-server monitoring

Unlimited malware removal

Updates across client sites

Shareable monthly reports

Priority response

Reports your clients, insurers and auditors can read.

How does white-label website security work for agencies?

Can I see every client server in one place?

How much does agency website security cost?

Plans that fit.

Agency (white-label)

Server / Multi-site

Frequently asked questions

Tell us about your setup.

Under attack? We’ll call you straight back.