The compliance layer your WordPress agency is missing

The EU Cyber Resilience Act takes effect 11 September 2026. Any "product with digital elements" placed on the EU market — including WordPress sites you build and operate — must self-assess against Annex I cybersecurity requirements, ship without known exploitable vulnerabilities, provide security updates, and disclose vulnerabilities through a documented process. WP HealthKit derives the CRA verdict per plugin from the deterministic + AI audit findings, and exports an EU Declaration of Conformity per plugin on demand.

The fleet dashboard is the agency view: every client × every plugin/theme they use, with CRA / GDPR / WCAG / EAA chips, latest score, score delta, and "changed since last visit" highlights. The per-audit results page is the technical deep dive for one plugin. Both come included in the Agency tier — fleet is the daily working surface; per-audit is what you forward to a developer.

Yes. Once you've added a plugin or theme to a client's portfolio, you can re-audit it as often as you want — manually, on plugin update, or via the API — at no extra charge. Re-audits within 14 days of the previous audit are even more efficient on the platform's side thanks to our diff-aware cache. You can also configure a self-imposed monthly cap from Settings → Billing to defend against a runaway team member.

Once a day, you receive one email per agency summarising every state change across your fleet — new audits, score drops, compliance verdict shifts, new CVEs, and new upstream versions. The digest groups by client and links every row back to the relevant fleet dashboard view or audit. Empty mornings mean no email — we don't send when nothing moved.

Yes. Each finding can be assigned to any active team seat, has a status workflow (Open → In Progress → Fixed → Accepted), and supports a threaded comment discussion. Team members logged into your agency see only their portfolio. Findings assigned to a teammate can be filtered by status, severity, plugin, or client.

Existing Agency subscribers stay on £149/month for 12 months from 14 May 2026. Inside Settings → Billing, legacy subscribers see "£149/mo (legacy)" instead of the public price — your renewal stays at £149 until the grandfather window closes, then it converts to the current public Agency rate.

Agency (£149/mo) is the compliance platform: unlimited audits inside a registered portfolio, fleet dashboard, morning digest, CRA / GDPR / WCAG / EAA reports, finding assignment, 5 team seats, white-label PDFs, and REST API + webhooks.

Yes — the REST API returns structured JSON findings with severity, location, category, and remediation. Agencies typically poll the fleet endpoint nightly or subscribe to the webhook topics (audit.completed, finding.assigned, alert.unacked) for real-time integration into Linear, Notion, or an internal Retool dashboard.