WordPress security for agencies: one licence, every client site
Protect up to 15 client sites on a single Business licence at 2.60 € per domain. Ship Hive white-label under your own brand, automate onboarding with WP-CLI, and resell managed security as a profit line. Made in Germany, GDPR-first, DPA included.
Why this gets better the more sites you run
One of your client sites gets hit at three in the morning. Every other site you manage has already blocked that address by the time you wake up.
Hive reports the attacking IP address to a network of sites running the same plugin, and reads back everything the others have reported. Nothing about your client leaves the site, only the attacker’s address and what it tried. So the fifteen sites on one Business licence are not fifteen separate installations, they are fifteen sensors that defend each other.
That is also why the maths below works. You are not buying a licence per client, you are connecting a portfolio to a network that is already watching.
The agency maths: one plan, not one purchase per client
Most security plugins are licensed per single site, buy a separate licence for every client and the monthly bill climbs fast. Hive is licensed per plan, so each extra site lowers your cost per domain. Prices incl. 19 % VAT; Enterprise is quoted net (B2B).
| Plan | Price | Sites | € / domain | Built for |
|---|---|---|---|---|
| Professional | 14.90 €/mo | 3 | 4.97 € | Freelancers & small studios |
| Business | 39 €/mo | 15 | 2.60 € | Growing agencies |
| Enterprise | from 663 €/mo (net) | unlimited | – | Networks & hosts · custom AVV |
15 sites, one flat licence
A single Business licence covers 15 client sites for a flat 39 €/mo: 2.60 € per protected domain, with the managed mail/SMS relay shared across all of them. Bill it inside your existing care plan and the margin is yours. Annual billing saves 17 % (389 €/yr).
Manage every client site from one place
Network activation shares one threat state; the dashboard at reportedip.com keeps your whole portfolio in view.
Independent protection, per client
Each site keeps its own sensors, 2FA roster, whitelist and logs, tuned to that client without touching the others.
- All 16 sensors with per-site thresholds
- Registration rules and lockdown switches per client site
- Block a client account and drop its sessions without deleting it (Business)
- Per-site blocked list, whitelist and logs
- CSV / JSON export per site for handover
- Multisite: network-only activation, one shared state
Network-wide intelligence
An attacker hitting one client site is known to every other site on the Community Network in real time, coordinated campaigns are blocked before they spread.
- Shared blocklist across all your sites
- Coordinated-attack detection & Hardening Mode
- One account, all 15 domains in view
- Priority blacklist sync (daily) on paid plans
Ship it under your own brand
White-label is a Business feature, your clients see your agency, not ours.
Your logo, your texts, your templates
The quickstart, the customer-facing 2FA pages and the OTP mail templates all carry your brand. The WooCommerce onboarding flow is fully themed. Customers never see “ReportedIP” until they reach the support-escalation page, everything in front of them is yours.
- Custom logo and product name
- Branded mail & SMS templates
- White-label quickstart and frontend 2FA
- WooCommerce Subscriptions / Memberships aware
Onboard fifty sites without fifty clicks
Full WP-CLI surface on Business turns repetitive setup into a script.
Activate in bulk
Roll Hive out across your fleet with WP-CLI or network activation, no per-site dashboard clicking. The quickstart can be skipped for unattended installs.
Clone your baseline
Export a hardened settings profile once, then import it into every new client install, staging→production or studio-standard configuration in seconds.
Script everything
Bulk 2FA enrolment, whitelist imports, blocked-IP management and log export all run from wp reportedip perfect for CI and onboarding playbooks.
Turn security into a managed-service line
A 2.60 € per-domain cost base leaves room for a real margin in your care plan.
1. Buy at cost
Business covers 15 client domains for 39 €/mo: 2.60 € each, relay included.
2. Bundle it
Fold Hive into your existing maintenance or care plan as the “security” component, one line on the invoice.
3. Bill as Managed Security
Charge a monthly managed-security fee per client. The delta between your price and 2.60 € is recurring margin.
Compliance your clients can rely on
Security that does not become a data-protection liability for you or your clients.
GDPR-first, by design
Minimal logging, 30-day retention, 7-day anonymisation and libsodium encryption at rest. Mail and SMS relay run on EU-only sub-processors under signed DPA, so your sub-processor chain is documented. A built-in GDPR export tool answers client data-subject requests, and the open-source core means no lock-in, if a client leaves you, their site keeps working in Local Shield.
- Signed DPA & EU-only sub-processors
- GDPR data-subject export tool (Business)
- No telemetry, offline-by-choice operation
- Open-source core, clients are never locked in
What it costs
One Business licence covers 15 client sites at 2.60 EUR per site per month. Up to 20 licences go on one bill, which is 300 sites. The full comparison, including the Free and Professional plans, is on the pricing page.
Reselling to many clients?
If you manage more than 15 sites, want custom branding terms or a recurring referral margin, the partner programme is for you. Co-signed DPA, white-label deployment and volume pricing, let’s talk.
Agency FAQ
For platform-wide questions see the general FAQ or the plugin overview.
Can I manage all my client sites from one dashboard?
Yes. With one account you see every site on your licence (3 on Professional, 15 on Business) from the reportedip.com dashboard, and a WP Multisite network activates Hive network-wide with one shared threat state. Per-site thresholds, logs and whitelists stay independent.
Does white-label really remove all ReportedIP branding?
On Business, the quickstart, the customer-facing 2FA pages and the OTP mail templates carry your logo and texts. Customers only encounter the ReportedIP name on the support-escalation page. Professional keeps the ReportedIP brand on the quickstart.
Who is the data processor for my clients, me or ReportedIP?
You remain the controller for your client sites. ReportedIP acts as a processor for the managed mail/SMS relay and Community Network, with a signed DPA and EU-only sub-processors. The chain is documented so you can pass it to your clients.
What happens to my clients if I stop paying?
Nothing breaks. The protection is open-source and runs in Local Shield without an account, all 16 sensors and the 2FA suite keep working. You only lose the managed relay, multi-site licensing convenience and white-label. No lock-in, ever.
Can I automate onboarding for dozens of sites?
Yes. Business ships the full WP-CLI surface: bulk activation, settings import/export, 2FA enrolment, whitelist and blocked-IP management all run from wp reportedip ideal for CI pipelines and onboarding playbooks.
Secure your whole client portfolio
15 sites on one Business licence: 2.60 € per domain, white-label, full WP-CLI. 14-day money-back, cancel any time.