What is Canyon Pulse?

Canyon Pulse is the operations platform Canyon built to run the WordPress sites we manage. It monitors uptime and SSL, scores and crawls pages for SEO, scans for malware and known vulnerabilities, rolls out updates safely, and reports GA4 and AI crawler traffic. All of it runs from one panel.

Can I buy Canyon Pulse on its own?

Pulse comes with Canyon’s managed WordPress and website care plans rather than as a self-serve subscription. You get the platform and the team that responds to what it finds. Get in touch and we will scope a plan for your sites.

How often does Pulse check whether my site is up?

As often as every 60 seconds, configurable up to hourly. An incident opens after two failures in a row, so a single slow response does not trigger a false alarm. SSL certificates are checked every six hours.

Does Pulse change my site without asking?

No. Every change Pulse makes on a site is logged and visible, and SEO metadata drafted by AI is never published until a person approves it. Updates follow a canary rollout and stop automatically if anything fails.

Which AI crawlers does Pulse track?

GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-CloudVertexBot, CCBot, Amazonbot, Meta-ExternalAgent, DuckAssistBot, YouBot and others. It also records visits referred by AI assistants such as ChatGPT and Perplexity.

Does it work with Yoast or Rank Math?

Yes. Pulse reads SEO metadata from Yoast, Rank Math or native WordPress, and writes approved changes back through the same plugin, so your existing setup keeps working.

Every WordPress site we run, watched every minute.

Canyon Pulse is the operations platform behind our managed WordPress service. It checks uptime, scores SEO, scans for malware, rolls out updates safely and reports traffic, including the AI crawlers now reading your site.

Talk to us about Pulse See it in action

Canyon Pulse dashboard showing twelve monitored WordPress sites, their up, degraded and down status, and a needs-attention feed of open incidents. — Swipe to explore the screen

Fastest uptime check interval: 60s
Weighted on-page SEO checks per page: 9
AI crawlers and assistants tracked: 14+
AI edits published without a human: 0

Why we built it

WordPress breaks quietly. Pulse notices first.

Most WordPress trouble does not announce itself. A plugin update takes a contact form down, a certificate lapses over a weekend, an administrator account appears that nobody created, or a hidden spam injection shows only to Googlebot. By the time a customer mentions it, rankings and leads are already gone.

We built Pulse so none of that waits for a customer to notice. A small, signed plugin on each site reports back to one panel, and the panel watches uptime, certificates, content, security posture and traffic across every site we look after, then tells the right person when something needs a hand.

What it does

Everything Pulse handles for you.

Uptime & incidents

HTTP checks from every 60 seconds, keyword and status assertions, SSL expiry warnings, and incidents that open only after two consecutive failures.

SEO scoring & crawls

Every page scored against nine weighted checks, a sitemap crawler for broken links, redirects and noindex, plus Lighthouse on mobile and desktop.

Security scanning

Google Safe Browsing, cloaking detection, weekly malware and core-integrity scans, known-vulnerability matching and a posture score.

Safe fleet updates

Core, plugin and theme updates roll out to a canary wave first, halt on failure, and verify each site is still up afterwards.

GA4 & AI traffic

Sessions, channels and key events from GA4, alongside the AI crawlers reading your pages and the visitors ChatGPT and Perplexity send you.

AI agent access (MCP)

A Model Context Protocol server over OAuth 2.1, so an assistant can report on uptime, SEO and security in plain English, with no power to publish.

Product tour

Inside Canyon Pulse real screens.

Canyon Pulse site overview for a real-estate client: 24-hour, 7, 30 and 90-day uptime, certificate expiry, tether plugin status and a 24-hour response time chart. — Swipe to explore the screen

Uptime monitoring

Uptime you can prove, not just claim

Each site gets its own overview: uptime over 24 hours, 7, 30 and 90 days, the certificate expiry date and issuer, the connected plugin version, and response time for the last day. Incidents open after two failed checks in a row, alert by email, remind every four hours until someone acknowledges them, and stay quiet during maintenance windows.

Check intervals from 60 seconds to an hour, with 3 to 30 second timeouts
Expected status code and "keyword must appear" assertions
SSL warnings at 21 days and critical at 7
Flap suppression, so a two-second blip does not page anyone

Canyon Pulse SEO view listing pages by score with their meta titles and descriptions, next to PageSpeed Lighthouse scores for mobile and desktop. — Swipe to explore the screen

SEO

Every page scored, weakest first

Pulse pulls your page inventory from WordPress each night, whether you use Yoast, Rank Math or neither, and scores every page out of 100. Titles, meta descriptions, H1s, word count, image alt text, internal links and focus keywords are all weighted, so the pages losing you search traffic sort to the top.

Sitemap crawler flags errors, redirects, noindex and stray canonicals
PageSpeed Insights on mobile and desktop, including LCP, TBT and CLS
AI-drafted titles and descriptions that a person approves before they go live
Schema.org editor and robots.txt, llms.txt, ads.txt and security.txt management

Security

Findings ranked by what matters

Security findings from every site land in one list, ranked by severity. Pulse checks Google Safe Browsing every six hours, compares what visitors and Googlebot see to catch SEO spam, runs weekly malware and core-integrity scans on the server, and matches installed plugins, themes and core against a public vulnerability feed every day.

Alerts on any administrator account that was not approved
Detects web shells, obfuscated code and PHP hidden in uploads
One-click hardening: security headers, HSTS, CSP, XML-RPC and file editor off
Verifies the hardening actually reaches visitors, not just the settings page

Canyon Pulse AI traffic report: crawler hits from GPTBot, ClaudeBot, OAI-SearchBot and PerplexityBot, referrals from ChatGPT, Perplexity, Copilot and Claude, and the pages they land on. — Swipe to explore the screen

AI search visibility

See which AI engines read your site

Search is no longer only Google. Pulse logs the AI crawlers that fetch your pages, including GPTBot, ClaudeBot, PerplexityBot and Google-CloudVertexBot, and the visitors who arrive from ChatGPT, Perplexity, Copilot and other assistants, with the pages they land on. It sits next to your GA4 sessions and channels, so AI visibility is measured rather than guessed.

Crawler hits and assistant referrals, batched from the site every 15 minutes
GA4 sessions, users, engagement and channels, compared with the prior period
Manage llms.txt from the same panel that measures its effect

Under the hood

How it works.

The Tether plugin

A lightweight WordPress plugin sends an hourly signed heartbeat with versions, pending updates, administrators and environment flags. It also carries out the panel’s requests: syncing SEO, running scans, applying hardening and installing updates. It updates itself only from a signed release.

PHP 7.4+WordPress 6.0+Multisite-awareClean uninstall

Maintenance without surprises

Fleet updates go to a canary wave first, then in batches of five, and stop after any canary failure. Every site gets a health check before the update and an uptime check after it. Maintenance windows keep alerts quiet while the work happens.

Canary rolloutsAuto-haltPost-update checksWebP conversion

Clients see their own sites

Client accounts see only the sites assigned to them: uptime, incidents, analytics, SEO and changes. Security, fleet operations and the change queue stay with our team. Every change we push to a site is listed, and a failed one can be retried.

Per-site accessChange historyPasskeysMagic links

Security & reliability

Built to be trusted.

Built with

Laravel 13
PHP 8.4
MySQL 8
Redis & Horizon
Tailwind CSS
WordPress plugin
OAuth 2.1
WebAuthn passkeys
Model Context Protocol

Every request is signed

The panel and each site authenticate every request with HMAC-SHA256, a five-minute window and single-use nonces, so a captured request cannot be replayed. Keys rotate on demand.

Phishing-resistant sign-in

Passkeys, email magic links and password sign-in, with identity re-confirmed before sensitive actions. Offboarding someone signs them out everywhere and removes their site accounts.

AI drafts, people decide

AI assistants can read reports and draft metadata over OAuth 2.1 with PKCE. They cannot approve or publish anything. A person approves each change, and Pulse checks it is live on the page.

Hardened by design

A strict nonce-based Content Security Policy, SSRF-safe outbound requests, secrets redacted from logs, an append-only audit trail, and an adversarial review of every build phase.

Canyon Pulse questions

What is Canyon Pulse?: Canyon Pulse is the operations platform Canyon built to run the WordPress sites we manage. It monitors uptime and SSL, scores and crawls pages for SEO, scans for malware and known vulnerabilities, rolls out updates safely, and reports GA4 and AI crawler traffic. All of it runs from one panel.
Can I buy Canyon Pulse on its own?: Pulse comes with Canyon’s managed WordPress and website care plans rather than as a self-serve subscription. You get the platform and the team that responds to what it finds. Get in touch and we will scope a plan for your sites.
How often does Pulse check whether my site is up?: As often as every 60 seconds, configurable up to hourly. An incident opens after two failures in a row, so a single slow response does not trigger a false alarm. SSL certificates are checked every six hours.
Does Pulse change my site without asking?: No. Every change Pulse makes on a site is logged and visible, and SEO metadata drafted by AI is never published until a person approves it. Updates follow a canary rollout and stop automatically if anything fails.
Which AI crawlers does Pulse track?: GPTBot, OAI-SearchBot, ChatGPT-User, ClaudeBot, Claude-SearchBot, PerplexityBot, Google-CloudVertexBot, CCBot, Amazonbot, Meta-ExternalAgent, DuckAssistBot, YouBot and others. It also records visits referred by AI assistants such as ChatGPT and Perplexity.
Does it work with Yoast or Rank Math?: Yes. Pulse reads SEO metadata from Yoast, Rank Math or native WordPress, and writes approved changes back through the same plugin, so your existing setup keeps working.