What DevPilot can and cannot do

• Page and post content

  Yes

  Text, headings, buttons and links — on pages, posts and custom post types.

• Custom fields and post meta

  Yes

  Any key, including the layout data a page builder stores.

• Categories, tags and taxonomies

  Yes

  Including custom taxonomies.

• Navigation menus

  Yes

  Add, remove and reorder items.

• Which menu shows where

  Yes

  Theme menu locations.

• Widgets and sidebars

  Yes

  Including each widget's saved settings, which is where footer phone numbers usually live.

• Comment moderation

  Yes

  Approve, spam, trash, edit, and empty spam and trash.

• Site CSS

  Yes

  Written into its own managed block, so any CSS you added yourself is left untouched.

• Theme and plugin source files

  Yes

  Anywhere in the install, including mu-plugins and wp-config.php.

• Create a child theme

  Yes

  A proper one — style.css plus a functions.php that enqueues the parent correctly.

• Gutenberg — block-level edits

  Yes

  One block changes and the rest of the page stays byte-for-byte identical. If that block has moved since we read it, the edit is refused rather than applied to whatever took its place.

• Elementor — widget-level edits

  Yes

  A single widget is patched by its id; the rest of the page structure is untouched.

• Elementor global colours and fonts

  Yes

  The site kit's own palette and typography.

• Divi — page content

  Partly

  Text, links, buttons and structure can be edited. A module's design options are compiled into Divi's own format that only its editor writes, so those stay in Divi.

• WPBakery — page content

  Partly

  The same as Divi: copy, links and structure edit in place; per-element design options have to be done in the builder.

• Bricks, Oxygen, Beaver Builder

  Coming soon

  We detect them and name them, and we do not edit them. They keep layouts in their own storage and take over rendering, so an edit would change nothing on the page. You are told this on the first scan — not after you have paid.

• Your brand kit — the site's real colours, fonts and logo

  Yes

  Read when we scan the site, so new work is built in your colours instead of a guess at them.

• Block templates, template parts, theme.json

  Yes

  Including the database copies that override the theme's own files.

• Upload an image

  Yes

  No second login needed, up to 5 MB. The upload is snapshotted, so undoing the change removes the file too.

• Alt text, in bulk

  Yes

  We can list exactly which images are missing it first.

• Replace a file, keeping its URL

  Yes

  Every page that references it keeps working — the whole point of replacing rather than re-uploading.

• Delete media, regenerate thumbnails

  Yes

  Files are copied into the snapshot first, so a delete can be undone.

More SEO work lives in other sections of this page: alt text in bulk under Media, image weight and Core Web Vitals under Speed, and every heading, link and word on the page under Content.

• Work through an SEO audit, page by page

  Yes

  Hand over a ticket, an audit or a list of URLs — from your consultant, from Ahrefs or Screaming Frog, from SEOPilot — and DevPilot works the list. A real one: a table of 53 orphan URLs, done as a scheduled list of separate jobs rather than one enormous run, each page with its own report of what changed.

• The same fix across many pages

  Yes

  Titles, headings, internal links, thin copy, a missing description — applied page by page in the site's own words rather than pasted from a template. Every page is snapshotted separately, so one page can be undone without touching the rest.

• Find what is wrong with your SEO

  Coming soon

  Orphan pages, internal link structure, keyword gaps and rank tracking are analysis, not execution — that is SEOPilot's job, the next product in this family. DevPilot reads a site and changes it; it does not crawl your link graph.

• Title, description, canonical, noindex, Open Graph

  Yes

  Works the same whether the site uses SEOPress, Yoast, Rank Math or All in One SEO.

• 301 redirects

  Yes

  Served by the DevPilot connector itself, so there is no redirect plugin to install.

• robots.txt

  Yes

  Written as a real file at the root of the site.

• Schema and JSON-LD

  Partly

  We can write it through a snippet plugin, an mu-plugin or the theme — but WordPress has no single home for structured data, so what is possible depends on how the site is built.

• Sitemap control

  Partly

  We report where the sitemaps are. Regenerating one means changing your SEO plugin's own settings.

• A screen for the shop

  Yes

  Every product with what is wrong with it — no price, no image, out of stock, no description — plus coupons, orders, shipping zones and tax rates. Price and stock edit inline.

• Bulk import from a spreadsheet

  Yes

  Any CSV. The columns are read rather than forced to match a template, and repeated rows become one variable product instead of six separate ones. The whole import undoes in one go.

• Simple products

  Yes

  Create and edit.

• Product variations

  Yes

  Create and edit.

• Coupons and discounts

  Yes

  Create, edit and expire.

• Shipping zones and tax rates

  Yes

  Read and edit.

• Orders

  Partly

  Read only, and deliberately without customer names, emails or addresses. An order is a financial record, and DevPilot has no reason to hold your customers' details.

• Field labels and consent text

  Yes

  Contact Form 7, WPForms, Gravity Forms and Formidable.

• Submission counts, and whether the form still works

  Partly

  Counts and dates, never the contents of a submission. A form that stops delivering raises no error anywhere — enquiries simply stop. Note that Contact Form 7 stores nothing unless Flamingo is installed, and WPForms Lite stores nothing either; there we report "not stored", which is not the same as zero enquiries.

• Field types, validation, mail routing

  Coming soon

  We do not change where a form's mail goes. A wrong address fails silently and nobody notices for a month.

• Site settings — permalinks, reading, discussion, timezone

  Yes

  Any option, with the risky ones named in the log.

• Database-wide search and replace

  Yes

  Serialised data is unpacked properly rather than string-replaced — which is what breaks a site when this is done with a plain SQL query. There is a dry run, and every changed row is snapshotted.

• Scheduled jobs (WP-Cron)

  Yes

  View, schedule, unschedule and run now.

• Users, roles, password reset

  Yes

  Passwords can be set, never read. The last administrator cannot be removed or demoted.

• Install, activate and deactivate plugins

  Yes

  Including activating or deactivating what is already there.

• Update plugins and themes

  Yes

  The old folder is copied aside before the update runs — so "the update broke the site" is something you can undo.

• Delete plugins and themes

  Yes

  The folder is backed up first, and DevPilot refuses to delete itself or your active theme.

• Install and switch theme

  Yes

  Including switching back.

• Update WordPress core

  Partly

  It works, and it asks for explicit confirmation first. It is the one change no snapshot can undo, and we say so before running it.

• Measure how slow a page is, and why

  Yes

  Server time separated from download time, the real size of every asset, what is blocking the page from rendering, and whether compression and caching are genuinely on. Works on a site behind a password.

• Why the server is slow, from inside

  Yes

  Autoloaded options, revisions, transients, orphaned data, table sizes, and whether the cache plugin is really running.

• Lighthouse score and real Chrome field data

  Partly

  This comes from Google's own API, so the page has to be publicly reachable — no staging site, no password screen.

• Re-encode oversized images in place

  Yes

  Same path, same URL, so every page keeps working. The originals go into the snapshot.

• Database cleanup

  Yes

  Autoload flags and orphaned data can be undone. Deleting revisions, transients and spam cannot — and we say which is which before running it.

• Caching, compression and browser cache headers

  Partly

  All reachable, but assembled from several changes rather than one switch: a cache plugin is an install, compression and expiry rules are a small addition to .htaccess kept in its own block. There is no single "make it fast" button, and we will not pretend there is.

• Watch speed over time, alert on a regression

  Yes

  Weekly on Pro, daily on Business. Alerts when the score drops, the server slows, the page gets heavier, the cache stops working, or the site stops answering.

• Alert by email

  Yes

  To the workspace owner, or to any address you set — a shared inbox is usually what an agency wants. Sent once when an alert opens, not every hour while it stays open.

• Every site's speed on one screen

  Yes

  Measuring is free on every plan, free included.

• One-click speed pass, with before and after

  Partly

  Pro and above. Applies the fixes, waits for caches to settle, measures again, and shows you both numbers.

• Snapshot before every change

  Yes

  A copy of exactly what is about to change, taken before anything is written.

• Preview without saving

  Partly

  A throwaway copy of the page — not a full staging site, and we will not call it one.

• Health check and automatic revert

  Yes

  The page is loaded again after the change. If the site does not answer properly, everything is put back automatically and you are told that it happened.

• Undo a change afterwards

  Yes

  From a list, with a screen that names exactly what goes back before you confirm it.

• Hosting, DNS, domains, SSL

  Coming soon

  Out of scope by design. DevPilot never touches a control panel or a nameserver — which is also why it can never lock you out of anything.