# Checklist — agency WordPress stack (7 plugins) 2026

**Agency:** _________________________  
**Active sites:** _______  
**Date:** _________________________

> Repeatable standard stack on every new client or takeover — one role per plugin.

---

## Phase 0 — Before client onboarding

- [ ] Existing plugin inventory (export or wp-admin screenshot)
- [ ] Staging access + tested backup
- [ ] MainWP: site added to central dashboard
- [ ] Client folder created (runbook, JSON exports)

---

## Phase 1 — Agency core (recommended order)

- [ ] **1. MainWP Child** on client site + dashboard connection
- [ ] **2. UpdraftPlus** — scheduled backup + remote destination (S3/Drive)
- [ ] **3. Wordfence** — firewall, off-peak scheduled scan
- [ ] **4. Plugin Usage Detector** — Full audit, JSON export archived

---

## Phase 2 — Volade extensions (free without account)

- [ ] **5. Heartbeat Control Manager** — Agency preset imported
- [ ] **6. PHP Compatibility Checker** — scan target host PHP version
- [ ] **7. Redirection** — 301 rules if migration or URL redesign

---

## Phase 3 — Deliverable checks

- [ ] One backup plugin active only
- [ ] One primary security firewall plugin
- [ ] Heartbeat: one manager only (not WP Rocket + HCM)
- [ ] Heartbeat + PUD JSON export in client folder
- [ ] Client informed: no plugins without agency validation

---

## Phase 4 — Fleet scaling (optional)

- [ ] **≤ 5 premium Volade sites** → evaluate V+ Pro (€14.90/month)
- [ ] **6+ sites** → evaluate V+ Agency (€19.90/month, unlimited)
- [ ] Quarterly inventory: [V+ inventory preset](/downloads/preset-inventaire-sites-vplus-fr.json)

---

*Volade · volade.com/en/blog/top-7-plugins-agence-wordpress-2026*