▸ Role Matrix
Per-site permission control.
Custom roles plus three system roles (Owner / Technical / Marketing). Assign users — aggregator variables update automatically when team changes. Workflows route by role with no extra config.
▸ REST API
REST API restriction. Set once.
Deny anonymous REST access by default, add a custom allowlist for the endpoints you do want public, or block REST entirely on staging. Built-in passes for FlowMattic, WooCommerce, Wordfence, Site Kit, and ContentPen.
▸ Automation Bridge
Automation bridge on every site.
Connect SyteOps to your automation platform — every user, role, and Variable Set surfaces as a named variable, ready to drop into a workflow. Featured integration: FlowMattic, on a platform-agnostic bridge designed to support more.
▸ Endpoint Control
Manage every site from one console.
One SyteOps Server connects to many SyteOps Endpoints. Manage plugins across every connected site — view, install, update, remove — in bulk. Toggle REST restriction, deploy workflow templates, and kick endpoint debug — all bulk-actionable.
▸ Access Log
REST API access log.
Every REST request captured: route, method, user, outcome, timestamp. Configurable sampling, retention up to 365 days, hashed-IP mode, exclusion rules, filtered log viewer. CSV + JSON export from the admin.
▸ White-Label Admin
Branded as your agency.
Adopt any installed plugin as a restricted SyteOps module — it disappears from the WordPress Plugins list for non-SyteOps users. Suppress third-party admin notices for non-admins. Keep your licenses and automation tools hidden from anyone but the SyteOps Admin.
▸ Backups
Full + scheduled + cross-site restore.
Manifest-based ZIP backups, manual or scheduled with the retention window you set. Cross-site restore with URL rewriting — move a site without rebuilding it. Local + pCloud cloud backup. Secrets excluded from exports; post-restore lock requires license re-check.
▸ Integrations
20+ apps, ready to bridge.
AWS SES, Cloudflare, Wordfence, Squirrly SEO, Slack, FluentForms, FluentBooking, ContactForm7, Sendy, WooCommerce, ContentPen, UpdraftPlus, WPVivid, Frill, LinkCentral, Pulsetic, Trustily, and more — 20+ pre-built integrations ship working. Flagship content workflow: ContentPen → SyteOps webhook (signed & verified) → your automation platform → ACF → Squirrly, all auto-routed by role.
▸ Variable Sets
Custom admin tabs, synced everywhere.
Three flavors of variable tabs: Static (one value per entry — emails, URLs, prices), Dynamic (event markers + labels), Related Static (repeating groups of fields, up to 20). Every value mirrored to your automation platform. Update once — every workflow updates with it.
▸ Modules
Patch + extend without vendor releases.
When a 3rd-party plugin has a bug or missing feature, ship a SyteOps module to fix it — no waiting on the vendor. Modules install as signed ZIPs, update from your private manifest, and can ship private capability add-ons. Several capability modules ship alongside the core plugin.
▸ Workflow Templates
Pre-built automation packages.
Distribute proven workflow patterns as encrypted .sytepkg packages. Import once, deploy across every connected endpoint. Credentials and site-specific URLs scrubbed before distribution — you configure those after import. Move workflows between staging and production cleanly.
▸ CRM Directory
15 CRM systems, encrypted at rest.
One central tab for every CRM you use. Display name, dashboard URL, API key, API secret — keys stored encrypted, never displayed in the UI. Toggle per-CRM admin-only visibility. All CRM metadata mirrored to your automation platform, so workflows route customers to the right system without per-workflow config.