After managing 50+ WordPress sites for clients, I was spending 15+ hours per month just on routine maintenance tasks. Backups, updates, security scans, uptime monitoring—it never ended. So I built a fully automated system with n8n that handles everything. Here's exactly how.
The Problem with Manual WordPress Maintenance
Every WordPress site needs:
- Daily backups (database + files)
- Plugin/theme updates (tested, not blindly applied)
- Security scanning (malware, vulnerabilities)
- Uptime monitoring (with instant alerts)
- Performance reports (Core Web Vitals tracking)
Do this manually for 10 sites, and you're looking at 5+ hours per month. Scale to 50 sites? That's 25+ hours—over half a work week gone.
My n8n Automation Stack
I built this system using n8n (self-hosted on a €5 Hetzner VPS) plus these integrations:
1. Automated Backup Workflow
Trigger: Schedule (Daily 2 AM)
↓
HTTP Request → WordPress Site (/wp-json/backup/v1/create)
↓
Google Drive Upload (backup files)
↓
Slack Notification (success/failure)
The backup workflow uses WordPress REST API endpoints I created. Each site gets:
- Database dump (mysqldump via SSH)
- Files archive (tar.gz, excluding cache/uploads)
- 30-day retention in Google Drive
- Slack alert if backup fails
2. Security Scan Automation
Every 6 hours, n8n triggers:
// n8n Function node
const sites = [
'https://client1.de',
'https://client2.de',
// ... more sites
];
for (const site of sites) {
// Check Wordfence API for vulnerabilities
// Run external scan via WPScan API
// Compare plugin versions against CVE database
}
If vulnerabilities found → Telegram alert with severity level + fix recommendations.
3. Uptime Monitoring + Auto-Recovery
This one saved me multiple times:
Trigger: Schedule (Every 5 minutes)
↓
HTTP Request → Ping all sites
↓
Switch node:
- Status 200 → Log success
- Status != 200 → Trigger recovery workflow
The recovery workflow automatically:
- Checks if it's a PHP error (via SSH)
- Rolls back recent plugin updates if needed
- Restarts PHP-FPM if crashed
- Alerts me only if auto-recovery fails
4. Weekly Performance Reports
Every Monday at 9 AM, clients receive automated emails with:
- Core Web Vitals (LCP, FID, CLS)
- Page load times (desktop + mobile)
- Uptime percentage
- Security scan results
- Recommendations for improvements
Generated using n8n's HTML node + Gmail integration.
The Complete n8n Workflow Structure
Here's my actual workflow structure:
workflows/
├── wordpress-backup-daily.json
├── wordpress-security-scan.json
├── wordpress-uptime-monitor.json
├── wordpress-performance-report.json
├── wordpress-auto-recovery.json
└── shared/
├── credentials.json
└── site-list.json
Each workflow is modular—I can add new clients in 2 minutes by updating site-list.json.
Real Results After 6 Months
- Time saved: ~20 hours/month
- Zero missed backups (was 2-3 per month before)
- Average incident response: 8 minutes (was 2+ hours)
- Client churn: Down 40% (better reliability = happier clients)
Cost Breakdown
| Component | Monthly Cost |
|---|---|
| Hetzner VPS (CX22) | €5 |
| Google Drive Storage | €2 |
| WPScan API | €0 (free tier) |
| Total | €7/month |
Compare that to ManageWP ($3/site/month = $150 for 50 sites) or similar services.
How to Build This Yourself
- Self-host n8n on a cheap VPS (I have a guide for this)
- Install Wordfence on all WordPress sites (free version works)
- Set up Google Drive for backup storage
- Create Slack/Telegram for alerts
- Import my workflow templates (link below)
The entire setup takes about 4 hours. After that? It runs itself.
Get My Workflow Templates
I've packaged all 5 workflows + setup instructions:
👉 Free n8n Workflow Pack: https://nevikschmidt.gumroad.com/l/uhrqpe
Includes:
- Daily backup workflow
- Security scan workflow
- Uptime monitoring + auto-recovery
- Performance reporting
- Complete setup guide
Need Help?
If you want this set up for your agency but don't have time:
👉 WordPress Maintenance Service: https://nevki.de (ab €49/Monat pro Site)
Fully managed. I handle everything—backups, updates, security, monitoring. You get weekly reports and 24/7 peace of mind.
Built with n8n. Running in production since October 2025. Zero data loss. Zero missed alerts.
Top comments (0)