What is Canyon Pulse?

Canyon Pulse is the operations platform Canyon built to run the WordPress sites we manage, all from one panel. It monitors uptime and SSL, scores and crawls pages for SEO, scans for malware and known vulnerabilities, rolls out updates safely, and reports GA4 and AI crawler traffic.

Can I buy Canyon Pulse on its own?

Not as a self-serve subscription. Pulse comes with Canyon's managed WordPress and website care plans, so you get the platform and the team that responds to what it finds. Get in touch and we'll scope a plan for your sites.

How often does Pulse check whether my site is up?

As often as every 60 seconds, or as rarely as hourly. An incident opens after two failures in a row, so one slow response doesn't set off a false alarm. SSL certificates are checked every six hours.

Does Pulse change my site without asking?

No. Every change Pulse makes on a site is logged and visible, and AI-drafted SEO metadata never goes live until a person approves it. Updates follow a canary rollout and stop automatically if anything fails.

Which AI crawlers does Pulse track?

GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-CloudVertexBot, CCBot, Amazonbot, Meta-ExternalAgent, DuckAssistBot, YouBot and others. It also records visits referred by AI assistants such as ChatGPT and Perplexity.

Does it work with Yoast or Rank Math?

Yes. Pulse reads SEO metadata from Yoast, Rank Math or native WordPress, and writes approved changes back through the same plugin, so your existing setup keeps working.

Every WordPress site we run, watched every minute.

Canyon Pulse is the operations platform behind our managed WordPress service. It checks uptime, scores SEO, scans for malware, rolls out updates safely and reports traffic, including the AI crawlers now reading your site.

Talk to us about Pulse See it in action

Canyon Pulse dashboard showing twelve monitored WordPress sites, their up, degraded and down status, and a needs-attention feed of open incidents. — Swipe to explore the screen

Fastest uptime check interval: 60s
Weighted on-page SEO checks per page: 9
AI crawlers and assistants tracked: 14+
AI edits published without a human: 0

Why we built it

WordPress breaks quietly. Pulse notices first.

Most WordPress trouble doesn't announce itself. A plugin update takes a contact form down. A certificate lapses over a weekend. An administrator account shows up that nobody created, or a hidden spam injection appears only to Googlebot. By the time a customer mentions it, the rankings and leads are already gone.

We built Pulse so none of that waits on a customer. A small, signed plugin on each site reports back to one panel. That panel watches uptime, certificates, content, security posture and traffic across every site we look after, and tells the right person when something needs a hand.

What it does

Everything Pulse handles for you.

Uptime & incidents

HTTP checks from every 60 seconds, keyword and status assertions, SSL expiry warnings, and incidents that open only after two consecutive failures.

SEO scoring & crawls

Every page scored against nine weighted checks, a sitemap crawler for broken links, redirects and noindex, plus Lighthouse on mobile and desktop.

Security scanning

Google Safe Browsing, cloaking detection, weekly malware and core-integrity scans, known-vulnerability matching and a posture score.

Safe fleet updates

Core, plugin and theme updates roll out to a canary wave first, halt on failure, and verify each site is still up afterwards.

GA4 & AI traffic

Sessions, channels and key events from GA4, alongside the AI crawlers reading your pages and the visitors ChatGPT and Perplexity send you.

AI agent access (MCP)

A Model Context Protocol server over OAuth 2.1, so an assistant can report on uptime, SEO and security in plain English, with no power to publish.

Product tour

Inside Canyon Pulse real screens.

Canyon Pulse site overview for a real-estate client: 24-hour, 7, 30 and 90-day uptime, certificate expiry, tether plugin status and a 24-hour response time chart. — Swipe to explore the screen

Uptime monitoring

Uptime you can actually prove

Each site gets its own overview: uptime over 24 hours, 7, 30 and 90 days, the certificate expiry date and issuer, the connected plugin version, and response time for the last day. An incident opens after two failed checks in a row and alerts by email. It sends a reminder every four hours until someone acknowledges it, and stays quiet during maintenance windows.

Check intervals from 60 seconds to an hour, with 3 to 30 second timeouts
Expected status code and "keyword must appear" assertions
SSL warnings at 21 days and critical at 7
Flap suppression, so a two-second blip does not page anyone

Canyon Pulse SEO view listing pages by score with their meta titles and descriptions, next to PageSpeed Lighthouse scores for mobile and desktop. — Swipe to explore the screen

SEO

Every page scored, weakest first

Every night, Pulse pulls your page inventory from WordPress (Yoast, Rank Math or neither) and scores each page out of 100. Titles, meta descriptions, H1s, word count, image alt text, internal links and focus keywords all carry weight. The pages losing you search traffic sort to the top.

Sitemap crawler flags errors, redirects, noindex and stray canonicals
PageSpeed Insights on mobile and desktop, including LCP, TBT and CLS
AI-drafted titles and descriptions that a person approves before they go live
Schema.org editor and robots.txt, llms.txt, ads.txt and security.txt management

Security

Findings ranked by what matters

Security findings from every site land in one list, ranked by severity. Pulse checks Google Safe Browsing every six hours and compares what visitors and Googlebot see, to catch SEO spam. On the server, it runs weekly malware and core-integrity scans. And every day it matches installed plugins, themes and core against a public vulnerability feed.

Alerts on any administrator account that was not approved
Detects web shells, obfuscated code and PHP hidden in uploads
One-click hardening: security headers, HSTS, CSP, XML-RPC and file editor off
Verifies the hardening actually reaches visitors, not just the settings page

Canyon Pulse AI traffic report: crawler hits from GPTBot, ClaudeBot, OAI-SearchBot and PerplexityBot, referrals from ChatGPT, Perplexity, Copilot and Claude, and the pages they land on. — Swipe to explore the screen

AI search visibility

See which AI engines read your site

Search is no longer only Google. Pulse logs the AI crawlers that fetch your pages, including GPTBot, ClaudeBot, PerplexityBot and Google-CloudVertexBot, and the visitors who arrive from ChatGPT, Perplexity, Copilot and other assistants, with the pages they land on. It sits next to your GA4 sessions and channels, so you measure AI visibility instead of guessing at it.

Crawler hits and assistant referrals, batched from the site every 15 minutes
GA4 sessions, users, engagement and channels, compared with the prior period
Manage llms.txt from the same panel that measures its effect

Under the hood

How it works.

The Tether plugin

A lightweight WordPress plugin sends an hourly signed heartbeat with versions, pending updates, administrators and environment flags. It also does what the panel asks: syncing SEO, running scans, applying hardening and installing updates. Self-updates come only from a signed release.

PHP 7.4+WordPress 6.0+Multisite-awareClean uninstall

Maintenance without surprises

Fleet updates go to a canary wave first, then out in batches of five. Any canary failure stops the rollout. Every site gets a health check before the update and an uptime check after it. Maintenance windows keep alerts quiet while the work happens.

Canary rolloutsAuto-haltPost-update checksWebP conversion

Clients see their own sites

Client accounts see only the sites assigned to them: uptime, incidents, analytics, SEO and changes. Security, fleet operations and the change queue stay with our team. Every change we push to a site is listed, and if one fails, it can be retried.

Per-site accessChange historyPasskeysMagic links

Security & reliability

Built to be trusted.

Built with

Laravel 13
PHP 8.4
MySQL 8
Redis & Horizon
Tailwind CSS
WordPress plugin
OAuth 2.1
WebAuthn passkeys
Model Context Protocol

Every request is signed

The panel and each site authenticate every request with HMAC-SHA256, a five-minute window and single-use nonces, so a captured request cannot be replayed. Keys rotate on demand.

Phishing-resistant sign-in

Passkeys, email magic links and password sign-in, with identity re-confirmed before sensitive actions. Offboarding someone signs them out everywhere and removes their site accounts.

AI drafts, people decide

AI assistants can read reports and draft metadata over OAuth 2.1 with PKCE. They cannot approve or publish anything. A person approves each change, and Pulse checks it is live on the page.

Hardened by design

A strict nonce-based Content Security Policy, SSRF-safe outbound requests, secrets redacted from logs, an append-only audit trail, and an adversarial review of every build phase.

Canyon Pulse questions

What is Canyon Pulse?: Canyon Pulse is the operations platform Canyon built to run the WordPress sites we manage, all from one panel. It monitors uptime and SSL, scores and crawls pages for SEO, scans for malware and known vulnerabilities, rolls out updates safely, and reports GA4 and AI crawler traffic.
Can I buy Canyon Pulse on its own?: Not as a self-serve subscription. Pulse comes with Canyon's managed WordPress and website care plans, so you get the platform and the team that responds to what it finds. Get in touch and we'll scope a plan for your sites.
How often does Pulse check whether my site is up?: As often as every 60 seconds, or as rarely as hourly. An incident opens after two failures in a row, so one slow response doesn't set off a false alarm. SSL certificates are checked every six hours.
Does Pulse change my site without asking?: No. Every change Pulse makes on a site is logged and visible, and AI-drafted SEO metadata never goes live until a person approves it. Updates follow a canary rollout and stop automatically if anything fails.
Which AI crawlers does Pulse track?: GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-CloudVertexBot, CCBot, Amazonbot, Meta-ExternalAgent, DuckAssistBot, YouBot and others. It also records visits referred by AI assistants such as ChatGPT and Perplexity.
Does it work with Yoast or Rank Math?: Yes. Pulse reads SEO metadata from Yoast, Rank Math or native WordPress, and writes approved changes back through the same plugin, so your existing setup keeps working.