Release 7 September 2026: The new dashboard, on new infrastructure
This release is the one you will see first when you log in from now on: a redesigned dashboard, and underneath it new hosting for the whole platform.
Read the articleBlog
WordPress security and releases, explained for people who run sites
Incidents and core releases that touch real sites, written with sources and dates, plus notes on running an agency.
Open an account before 31 December 2026 and pay €1.95 per site, for life
The list price is €2.95. Every account opened this year keeps €1.95 per site per month for as long as it stays, and only inflation can move it. Here are the exact conditions.
Justin van Dongen
Your WordPress site was hacked. Do these ten things, in this order
A checklist for the first two hours, written for the person who has to fix it, not for the person who has to be reassured.
Rik Smeets
Why not just give ChatGPT a key to your WordPress site?
You can. Most of the time it does what you asked. This is about the other times, and about what has to sit between a model and a live site.
Justin van Dongen
What a hacked client site really costs an agency
The cleanup is the small part. The night, the trust and the retainer are where the bill lands, and none of it shows up on an invoice.
Justin van Dongen
ClickFix: hacked WordPress sites are serving fake CAPTCHAs
Two research teams documented the same campaign at very different scales. The visitor infects their own computer; the site owner usually finds out from a complaint.
Rik Smeets
Release 31 August 2026: Release candidate for September
The last big round before the launch release: one plan instead of tiers, bulk plugin work, and the connector prepared for the WordPress.org directory.
Rik Smeets
WordPress 7.1: what changes for a site you look after
The release notes are long. These are the parts that touch a running site, and the order in which to update.
Rik Smeets
Elementor Pro and Forminator: two form vulnerabilities and what to do
Both are on millions of sites, both were patched, and both are still running unpatched on sites nobody logs into. The fix is a version number.
Rik Smeets
WordPress 7.0.3 and the security releases you may have missed
Minor releases install themselves on most sites. On the ones where they do not, nobody notices until the scan does.
Rik Smeets
Release 12 August 2026: The assistant for site owners, first version
The first version of the chat inside WordPress for the people who own the site, on tokens the agency allocates per site.
Rik Smeets
Release 9 August 2026: Knowing when a site goes quiet
A site that stops reporting is as much a problem as a site that is down. This release tells you when a connector goes silent, and why.
Rik Smeets
The BdThemes supply-chain attack: a plugin update that was the malware
When the vendor's own update server ships the payload, every site that did the right thing gets infected first. What happened, and what still protects you.
Rik Smeets
Release 22 July 2026: MCP first, hardened
Your own AI tools connect to WebCrew over one MCP server. This release made that connection the front door and locked the other doors.
Rik Smeets
Release 5 July 2026: Backups, visual checks and reports
The first release after launch: a full restore path, screenshots compared before and after a change, and monthly reports per site.
Rik Smeets
v0.1.0: First production release on app.webcrew.ai
WebCrew went live for the founders' own client sites: the dashboard, the worker that runs the checks, and the monitoring that watches WebCrew itself.
Rik Smeets