<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Pharweb</title>
    <description>The latest articles on DEV Community by Pharweb (@pharweb).</description>
    <link>https://dev.to/pharweb</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3945916%2F68986282-d514-4994-b486-b3373471754a.png</url>
      <title>DEV Community: Pharweb</title>
      <link>https://dev.to/pharweb</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/pharweb"/>
    <language>en</language>
    <item>
      <title>How I built a monitoring SaaS for Joomla, WordPress &amp; PrestaShop agencies</title>
      <dc:creator>Pharweb</dc:creator>
      <pubDate>Fri, 22 May 2026 10:55:57 +0000</pubDate>
      <link>https://dev.to/pharweb/how-i-built-a-monitoring-saas-for-joomla-wordpress-prestashop-agencies-2m9k</link>
      <guid>https://dev.to/pharweb/how-i-built-a-monitoring-saas-for-joomla-wordpress-prestashop-agencies-2m9k</guid>
      <description>&lt;p&gt;After years managing dozens of Joomla, WordPress and PrestaShop sites &lt;br&gt;
for clients, I kept running into the same problem: I was always the &lt;br&gt;
last one to know when something broke.&lt;/p&gt;

&lt;p&gt;A client would call me to say their site was down. Or I'd discover &lt;br&gt;
during a routine check that an SSL certificate had expired three days &lt;br&gt;
ago. Or a backup hadn't run in two weeks.&lt;/p&gt;

&lt;p&gt;So I built &lt;strong&gt;SiteOps&lt;/strong&gt; — a professional monitoring SaaS specifically &lt;br&gt;
designed for CMS sites and web agencies.&lt;/p&gt;

&lt;h2&gt;
  
  
  The problem with existing monitoring tools
&lt;/h2&gt;

&lt;p&gt;Most monitoring tools (UptimeRobot, Pingdom, etc.) do one thing well: &lt;br&gt;
uptime. You get a ping every 5 minutes and an email if the site goes &lt;br&gt;
down.&lt;/p&gt;

&lt;p&gt;But managing client sites means you need much more:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Is the SSL certificate about to expire?&lt;/li&gt;
&lt;li&gt;Did the Akeeba or UpdraftPlus backup actually run last night?&lt;/li&gt;
&lt;li&gt;Is the Joomla or WordPress version up to date?&lt;/li&gt;
&lt;li&gt;Are there brute-force attacks being blocked?&lt;/li&gt;
&lt;li&gt;What's the current PHP version on the server?&lt;/li&gt;
&lt;li&gt;Is the domain registration about to expire?&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;None of the general-purpose tools covered all of this in one place.&lt;/p&gt;

&lt;h2&gt;
  
  
  What SiteOps monitors
&lt;/h2&gt;

&lt;p&gt;Here's what the platform checks for each site:&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;Availability&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Uptime every 30 seconds from 8 worldwide locations&lt;/li&gt;
&lt;li&gt;Response time tracking&lt;/li&gt;
&lt;li&gt;Multi-location availability map&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Infrastructure&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;SSL certificate validity and expiry alerts&lt;/li&gt;
&lt;li&gt;DNS records (A, MX, TXT, NS)&lt;/li&gt;
&lt;li&gt;WHOIS / domain expiry&lt;/li&gt;
&lt;li&gt;IP reputation and DNSBL checks&lt;/li&gt;
&lt;li&gt;TCP port monitoring&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Security&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;HTTP security headers (HSTS, CSP, X-Frame-Options...)&lt;/li&gt;
&lt;li&gt;Google Safe Browsing status&lt;/li&gt;
&lt;li&gt;Brute-force detection and blocking status&lt;/li&gt;
&lt;li&gt;File integrity monitoring&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;Performance &amp;amp; SEO&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;Google PageSpeed score (mobile + desktop)&lt;/li&gt;
&lt;li&gt;Core Web Vitals&lt;/li&gt;
&lt;li&gt;SEO meta tags analysis&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;&lt;strong&gt;CMS-specific (via native agents)&lt;/strong&gt;&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;CMS version (Joomla 4/5/6, WordPress, PrestaShop)&lt;/li&gt;
&lt;li&gt;Plugin/extension/module updates available&lt;/li&gt;
&lt;li&gt;Backup status (Akeeba for Joomla, UpdraftPlus for WordPress)&lt;/li&gt;
&lt;li&gt;PHP and MySQL versions&lt;/li&gt;
&lt;li&gt;Server load and memory usage&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  The native agent approach
&lt;/h2&gt;

&lt;p&gt;The key differentiator is the native agent architecture. Instead of &lt;br&gt;
just pinging a URL from outside, SiteOps installs a lightweight agent &lt;br&gt;
directly on the CMS:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Joomla&lt;/strong&gt;: system plugin (available on JED, GPL licensed)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;WordPress&lt;/strong&gt;: plugin (available on WordPress.org)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;PrestaShop&lt;/strong&gt;: module (available on PrestaShop Addons)&lt;/li&gt;
&lt;/ul&gt;

&lt;p&gt;The agent runs on every page load and pushes metrics to SiteOps via &lt;br&gt;
a secure API. This gives access to data that external monitoring simply &lt;br&gt;
cannot see — backup status, plugin versions, server metrics.&lt;/p&gt;

&lt;h2&gt;
  
  
  The tech stack
&lt;/h2&gt;

&lt;ul&gt;
&lt;li&gt;
&lt;strong&gt;Backend&lt;/strong&gt;: Laravel 13 / PHP 8.2&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Admin panel&lt;/strong&gt;: Filament v4&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Database&lt;/strong&gt;: PostgreSQL 16&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Infrastructure&lt;/strong&gt;: European VM (GDPR compliant)&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Uptime checks&lt;/strong&gt;: Cloudflare Workers at 8 worldwide locations&lt;/li&gt;
&lt;li&gt;
&lt;strong&gt;Alerts&lt;/strong&gt;: Email, SMS, Slack, Telegram, Discord, Teams, Webhook&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  Multi-tenant architecture for agencies
&lt;/h2&gt;

&lt;p&gt;SiteOps is built from the ground up for agencies managing multiple &lt;br&gt;
client sites. Each tenant has their own isolated dashboard with:&lt;/p&gt;

&lt;ul&gt;
&lt;li&gt;All their sites in one view&lt;/li&gt;
&lt;li&gt;Per-site alert configuration&lt;/li&gt;
&lt;li&gt;White-label option (Agency plan)&lt;/li&gt;
&lt;li&gt;Client-facing status pages&lt;/li&gt;
&lt;/ul&gt;

&lt;h2&gt;
  
  
  What I learned building this
&lt;/h2&gt;

&lt;p&gt;&lt;strong&gt;1. PostgreSQL strict GROUP BY is your friend.&lt;/strong&gt;&lt;br&gt;
Coming from MySQL, the strictness catches real bugs. Embrace it.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;2. Observers over lifecycle hooks.&lt;/strong&gt;&lt;br&gt;
Laravel's afterCreate() in Filament isn't always reliable. Model &lt;br&gt;
Observers are more robust for post-creation side effects.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;3. Cloudflare Workers are excellent for distributed uptime checks.&lt;/strong&gt;&lt;br&gt;
8 worldwide locations, sub-second latency, virtually free at low &lt;br&gt;
volume. Highly recommended for distributed monitoring.&lt;/p&gt;

&lt;p&gt;&lt;strong&gt;4. CMS agents need to be lightweight.&lt;/strong&gt;&lt;br&gt;
The Joomla plugin runs on every page load — it needs to be fast. &lt;br&gt;
Async API calls and aggressive caching were essential.&lt;/p&gt;

&lt;h2&gt;
  
  
  Current status &amp;amp; pricing
&lt;/h2&gt;

&lt;p&gt;SiteOps launched this week. Plans:&lt;/p&gt;

&lt;div class="table-wrapper-paragraph"&gt;&lt;table&gt;
&lt;thead&gt;
&lt;tr&gt;
&lt;th&gt;Plan&lt;/th&gt;
&lt;th&gt;Sites&lt;/th&gt;
&lt;th&gt;Price&lt;/th&gt;
&lt;/tr&gt;
&lt;/thead&gt;
&lt;tbody&gt;
&lt;tr&gt;
&lt;td&gt;Discovery&lt;/td&gt;
&lt;td&gt;1&lt;/td&gt;
&lt;td&gt;€10/month&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Starter&lt;/td&gt;
&lt;td&gt;5&lt;/td&gt;
&lt;td&gt;€15/month&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Pro&lt;/td&gt;
&lt;td&gt;20&lt;/td&gt;
&lt;td&gt;€35/month&lt;/td&gt;
&lt;/tr&gt;
&lt;tr&gt;
&lt;td&gt;Agency&lt;/td&gt;
&lt;td&gt;Unlimited&lt;/td&gt;
&lt;td&gt;€79/month&lt;/td&gt;
&lt;/tr&gt;
&lt;/tbody&gt;
&lt;/table&gt;&lt;/div&gt;

&lt;p&gt;All plans include a &lt;strong&gt;10-day free trial&lt;/strong&gt;, no credit card required.&lt;/p&gt;

&lt;p&gt;👉 &lt;strong&gt;&lt;a href="https://siteops.fr" rel="noopener noreferrer"&gt;siteops.fr&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;




&lt;p&gt;Happy to answer any questions about the architecture, the CMS agents, &lt;br&gt;
or the multi-tenant setup. What monitoring features would you add?&lt;/p&gt;

</description>
      <category>webdev</category>
      <category>php</category>
      <category>laravel</category>
      <category>saas</category>
    </item>
  </channel>
</rss>
