MainWP 6.4: Native Backups, AI-Ready Extensions and Tighter Security

Product Updates

MainWP 6.4 Introduces Built-In Backups

The biggest release of the week is MainWP Dashboard 6.4, introducing Built-In Backups (beta), a new way to back up and restore WordPress sites directly from MainWP without installing an additional backup plugin.

Built-In Backups supports scheduled full, database-only, files-only, and incremental backups, with storage options including local storage, S3-compatible services, Google Cloud Storage, Dropbox, and SFTP. It also introduces snapshot restores, optional safety backups and rollback, encryption, flexible retention policies, and backup health monitoring.

The feature works alongside MainWP Child 6.4, which provides the necessary backup, transfer, and restore functionality on connected sites. Built-In Backups can also be managed through the Abilities API, extending its capabilities to supported MCP and AI-powered workflows.

Beyond backups, MainWP 6.4 delivers extensive security hardening, stronger Team Control permission enforcement, improved API request validation, better protection of sensitive credentials, and numerous reliability improvements across site management, updates, and connectivity.

Important: MainWP Dashboard 6.4 requires PHP 8.3 or newer. Built-In Backups requires the matching MainWP Child version. File backups and restores are currently unsupported when wp-content is located outside the WordPress core directory, although database-only operations remain available.

More MainWP Extensions Gain Abilities API Support

This week also brought updates to 14 MainWP extensions, with a common focus on expanding WordPress Abilities API integration, improving security, and strengthening compatibility with MainWP’s evolving MCP and AI tooling.

The following extensions now provide new or expanded Abilities API capabilities:

• File Uploader 5.1 adds abilities for file deployment workflows, including staging policies, deployment previews, status tracking, and rollback.
• Patchstack Integration 6.2 and Virusdie Integration 5.2 expose security status information through WordPress Abilities.
• Dashboard Lock 5.2 and SSL Monitor 5.4 introduce read-only access to Dashboard Lock settings and SSL certificate status.
• Cost Tracker Assistant 5.1, Favorites 5.4, and WooCommerce Status Integration 5.2 add read-only abilities for accessing their respective data.
• Maintenance 5.3, Lighthouse Integration 5.4, WP Rocket Integration 5.2, and Jetpack Protect Integration 5.1 introduce read-only abilities alongside additional compatibility and reliability improvements.

These additions make more MainWP functionality accessible through standardized interfaces, laying further groundwork for integrations with MCP clients, AI assistants, and automation tools.

Additional Security and Reliability Improvements

Alongside the Abilities API expansion, several extensions received important improvements.

Early Access 5.2.1 strengthens site-specific update preparation and rollback, adds stricter permission checks, and prevents invalid site selections from triggering unintended bulk actions.

Sucuri Integration 5.0.4 improves SSL verification handling, while Maintenance, WP Rocket, Jetpack Protect, and Sucuri gain additional database validation support.

Other fixes address Lighthouse memory usage on large site networks and translation handling in the Maintenance extension.

Together, these releases strengthen MainWP’s security and reliability while continuing to expand the functionality available to AI-powered workflows and third-party integrations.

Documentation Updates

Expanded Built-In Backups guidance covers retention policies, remote storage, restore behavior, and troubleshooting—helping you manage backup space and understand recovery options.

New: Built-In Backup Abilities explains how to automate backups and restores through the API or an AI assistant, preview actions, and monitor completion.

New: Site Access Queries explains how custom integrations can reuse MainWP’s site-access rules while preserving permission checks.

The refreshed Getting Started guide walks through MainWP 6.4’s streamlined setup wizard and CSV imports. Updated Child connection guidance explains the connection window and recovery after it expires.

Manage Users now documents the complete CSV import workflow, including role and site assignments, correcting failed rows, and retrying imports.

Updated Site Hardening guidance explains PHP security-release checks and when to ask your host about upgrades or backported security fixes.

Revised Connection Security and Private-Key Encryption guides clarify how MainWP authenticates requests, protects traffic with HTTPS, and safeguards stored signing keys.

Re-establish Connections now explains when Support may recommend resetting user sessions and how that differs from replacing signing keys.