Companion Auto Update
View on WordPress.orgScores higher than 88% of indexed plugins
About
Manage all updates on your WordPress site. Stay in the know with several optional e-mail notifications and logs. For free.
Security History
What It Does
Companion Auto Update centralizes control over WordPress core, theme, and plugin updates, letting site owners decide what auto-updates, what waits, and what gets skipped. It adds email notifications and a complete update log, giving administrators a clear audit trail of every change applied to the site.
Who It's For
This plugin fits small business owners, agencies managing multiple client sites, and anyone in a regulated environment who needs documented control over the update process rather than WordPress's default automatic behaviour. It is also a solid fit for ecommerce stores where an unexpected broken update could cost revenue.
Who Should Skip It
If you are comfortable with WordPress's built-in auto-update settings and never need an audit trail, this plugin is unnecessary overhead. Developers who prefer managing updates through Composer, Git workflows, or a dedicated staging pipeline will also find it redundant.
The Bottom Line
Companion Auto Update is a well-maintained, highly rated plugin that delivers exactly what its name promises with thoughtful logging and notification features. The only meaningful red flag is its track record of unresolved support threads, so lean on its documentation and test on staging before relying on it. Recommended for cautious site owners, agencies, and anyone needing documented update control.
Related Plugins
Pick this when your priority is HTTPS enforcement and broad site hardening rather than granular update control.
Choose Wordfence if you need active firewall, malware scanning, and login protection well beyond what an update manager can offer.
Opt for Jetpack when you want security, backups, performance, and update management bundled into one subscription-based plugin.
AIOS makes more sense if you need a free security plugin that includes update management as part of a wider hardening suite.
Safe SVG solves a completely different problem (SVG sanitization) and is only a relevant alternative if SVG handling is your actual gap.