xCloud's September 2026 update adds Site Security Pro ($2/month for vulnerability scanning and hardening), a new AI caching plugin, Git-based deployment workflows, Docker backups, and unified team management across 428 one-click apps. The full changelog lists 165 updates.
Chapters
Welcome to the xCloud September 2026 roundup of all the cool new stuff that has been released this month. Now, last month I tried to tell you about literally everything that was new and cool, and it was too much. It was really long because they released great stuff every month. So this month I'm going to do 5 great highlights and show you where the changelog is so you can read every last detail. Because there's still a ton more really good stuff. Now, to get started, I want to point out that WordPress remains the core of what xCloud does. They've been doing some really cool stuff lately with other things, but WordPress is still the heart and soul. And so I'm going to show you a lot of things related to WordPress and how it's been improved on xCloud this month. This month we made it safer. faster and while expanding what else you can host and automate. Automation is a big key. Being able to automate your, your hosting is an enormous tool. So let's get started. The first thing I want to talk about is Site Security Pro from PatchStack. Now, what we're looking at here on the screen is the vulnerability scan without Site Security Pro. That's the default. If you get Site Security Pro for right now only $2 a month, you get all of this other stuff. And I'm going to give you just a real quick overview. This is not a tutorial because we don't have time for that. This is the, the overview tab on Site Security Pro. It says it's active. I just turned it on, so I don't have a whole lot of back history here. 8 vulnerabilities, 1 highly exploitable, 75 packages. And then down here it lists some of the vulnerabilities and you can choose to do more if you wish. If you go to advanced here, it gives you a bunch more information. There's my security score, which is not great. It'll probably be a lot better once I update my plugins. Attacks blocked, vulnerabilities found, etc. Again, I just turned it on so I don't have a lot of activity, but here are my plugins, my themes, etc. But then the superpower is under advanced hardening. These are actual tools that do things as opposed to just reporting about how you're doing, and you can choose basic, recommended, or strict. Strict as a, as a default, or you can come down and fine-tune everything. So you can turn on CAPTCHA on these forms, then login and access. This is all on one page, but this jumps to the different page. 2-factor authentication, brute force protection, block application passwords, a custom login URL, your attack surfaces. You can restrict XML-RPC, REST API, disable the file editor, etc. Under network, all kinds of stuff for IPs, blocking them, etc. IP access control right there. Information exposure. What are you telling the world? File protection. All these things, bots and spam and content and updates. These are all tools you can use to make your site more secure. And it's a really, really great deal. $2 a month is amazing. This comes from PatchStack. And so you get early warnings about security problems and stuff like that. So highly recommend it. And it's got a bunch of new stuff this month. Next, we're going to talk about Cache integration. There is a new caching plugin on xCloud. It was made by xCloud. Asif had a lot to do with it. And one of its really cool aspects is that it is very AI aware. There are a lot of caching plugins in the world and they all do a lot the same thing. And many of them are great. This one is the first one to really integrate with AI. So you can say to your MCP, my site is slow, figure out why and make it faster. And it'll just do it. There are a lot of options here, a lot of classic options, but then add on the AI and it's great. I actually installed it on HeroPress. And so you can see it right here. So Right here is where you can connect with your MCP. If we get on to cache, you can turn on page cache, preloader, the browser cache. Object cache is built in, so you don't need something like Redis, etc. You can do advanced caching stuff under optimization. All the classics like compression, CSS and JavaScript minification, lazy loading, whole 9 yards. But again, the magic is under the AI stuff. And it can help you out if you don't understand everything about caching. I mean, most people know a little bit about caching, but there are some really esoteric details that many people don't know. And this can help you with that. And it is available for free. There is a pro version. But you can just hook it up and there's even a migration path. I used to use LiteSpeed Cache, and when I installed this, it said, do you want to import all of your settings? And I said yes, and away we went. So migration is simple. It's super powerful. Give it a shot. Next, we're going to talk about Git staging environments. So something else new this month is the ability to use APIs and MCP with Git to make a Git deploy process that involves testing, staging, and production servers. So the docs are right here and you can set them up with a dashboard, CI/CD, or agent-assisted deployment. But especially with MCP, you can say, Here's my Git repo, set up a staging server, run these tests, etc. And then when it's done, say, okay, now move this to a testing server pulling data from this database and code from over here, etc., etc. And the whole flow makes it a lot harder to make mistakes, which is different from being easier. So this is super powerful because Literally, and this is like a professional deployment process. It's not just pushing up a new plugin, it's actually running tests and all that stuff. So using this method, you can have a much safer deploy process. Next, we're going to look at one-click apps and Docker backups. Now, I am on the One Click Apps page, and this number 428 is fun to watch because yesterday when I was researching this, it was less than 400, and last week when I made a video, it was about 325. So the apps are rolling in really, really fast. So this is something you want to keep an eye on. Now, uh, something kind of related because a lot of these come from Git But this is another method. So I went right there's one-click apps. But if you go to deploy via Git, you can click public repository right here and type in the name of an open source project that's on GitHub. And it searches GitHub and finds it right here. And you can click and deploy on a server. Just like that. You don't have to do a pull, download the file, create a server, upload them, configure everything. You don't have to do that stuff. You can search right here and do the deploy. Now, something that's very important is whether you're using this method or the one-click apps, you're going to use a Docker configuration. on your server. And something new this month is Docker backups, which are great. Right here I have a Jellyfin install on a Docker server, and I'm on the backups page, and you can see it's doing backups. Previously, backups were just for WordPress, but now you can back up any of your Docker servers. Which is really great because not having backups is terrible. Trust me, I know. All right. Last thing we're going to look at is managing multiple xCloud teams with one API token or MCP connection. This is new. We've had MCPs, we've had API tokens, we've had teams, but they were all broken up and separate and things like that. Now you can manage them all in one spot. Right here's the before and the now. So this will save you a ton of time if you have multiple teams, multiple servers under— on different teams, etc. So those are 5 things. We talked about Site Security Pro, we talked about the new cache plugin, we talked about the new Git deploy processes. We talked about Docker backups and the number of one-click options that are there. And lastly, managing xCloud teams with the MCP connection. Now, the last thing I want to point out though is the changelog is here and right here it says 165 updates and counting. Um, right here is September 28th full notes. And there's a ton of stuff in here, way more than I can do in this video. Um, 7 new customer-facing capabilities, 6 safety and usability improvements, 13 customer-impacting fixes. Uh, I recommend you read through this because it's good stuff. There's a lot going on here. Um, billing stuff, support ticket stuff. All that. As always, it was an exciting month at xCloud. There's a ton of new stuff. It happens every month. There's new stuff. So stop by a month from now and check out what happens in October, because it's sure to be exciting.
