Newshot AI website agent · free plan
Website down, slow or hacked? Mellonbot finds out why and fixes it.
Database errors, expired certificates, failing backups, attacks, slow pages. Mellonbot’s AI digs through your site and the server it runs on, tells you the real cause in plain words and fixes it once you say OK.
1 of 6: Your site says “Error establishing a database connection”
At the busiest moment your site’s PHP used more memory than the server has, so the database was pushed out and crashed.
Mellonbot can restart the database and lower PHP’s limit so both fit.
rosebakery.com · 06:12Root cause found
The site shows a database error. Is the database running?
$ systemctl status mysql
● mysql.service — failed (Result: oom-kill)
It was shut down for using too much memory. What else needs memory?
$ ps -C php-fpm --no-headers | wc -l
14 PHP workers × ~160 MB on a 2 GB server
millerplumbing.co · 09:41Root cause found
Visitors get a security warning. Is the certificate still valid?
$ curl -I https://millerplumbing.co
● SSL certificate problem: certificate has expired
It should renew itself. Why didn’t it?
$ systemctl status certbot.timer
certbot.timer — inactive (dead) since Jun 3
lakesideyoga.com · 03:00Root cause found
No new backup since September 1. What does the backup job say?
$ tail -n 1 /var/log/backup.log
● /opt/backup.sh: line 12: mysqldump: command not found
The tool it needs is gone. Did an update rename it?
$ grep mariadb /var/log/apt/history.log | tail -1
Start-Date: 2026-09-01 · Upgrade: mariadb-client
greenleafdental.com · 14:27Root cause found
The site got slow this afternoon. Is it real visitors?
$ grep -c "POST /wp-login.php" access.log
● 48213 login attempts in the last 24 hours
Bots guessing passwords. Which door are they using most?
$ grep -c "POST /xmlrpc.php" access.log
31870 — an old side door the site never uses
oakandthread.shop · 11:05Root cause found
Photo uploads are failing. Is the disk full?
● /dev/vda1 25G 25G 0 100% /
Completely full. What is taking up the space?
$ du -sh wp-content/* | sort -h | tail -1
21G wp-content/updraft (1,412 backups)
harborinn.com · 16:48Root cause found
Routine look-over. How current is the software?
● PHP 7.4.33 — security support ended Nov 2022
Can the site move to a newer PHP without breaking?
$ wp plugin list --update=available
9 plugins out of date · 2 won’t run on PHP 8
rosebakery.com · 06:12AI investigating
The site shows a database error. Is the database running?
$ systemctl status mysql
● mysql.service — failed (Result: oom-kill)
It was shut down for using too much memory. What else needs memory?
$ ps -C php-fpm --no-headers | wc -l
14 PHP workers × ~160 MB on a 2 GB server
Your site says “Error establishing a database connection”
At the busiest moment your site’s PHP used more memory than the server has, so the database was pushed out and crashed.
Mellonbot can restart the database and lower PHP’s limit so both fit.
Visitors see “Your connection is not private”
Your security certificate expired 12 days ago. Automatic renewal was switched off in June, so nothing noticed.
Mellonbot can renew it now and turn automatic renewal back on.
Your nightly backup hasn’t worked for 23 days
A server update on September 1 renamed a tool the backup script relies on, so it has been failing quietly every night.
Mellonbot can point the script at the new tool and take a fresh backup now.
Bots are trying to break into your site
Tens of thousands of password guesses a day, mostly through a side door your site doesn’t need, are slowing it down for real visitors.
Mellonbot can close the side door and slow down repeat guessers.
Old backups have filled up your whole server
A backup plugin has been saving copies for years and never deleting them. Now you can’t upload photos or take new orders.
Mellonbot can keep the five newest backups and clear out the rest.
Your site runs on software that stopped getting security fixes in 2022
Outdated PHP is one of the most common ways small sites get hacked — and two of your plugins would break if it were simply upgraded.
Mellonbot can update the plugins first, then walk you through upgrading PHP safely.
Your site says “Error establishing a database connection”
At the busiest moment your site’s PHP used more memory than the server has, so the database was pushed out and crashed.
Mellonbot can restart the database and lower PHP’s limit so both fit.
01 /The problem
Websites break at the worst possible time
Sites go down, slow down, get attacked or quietly stop sending email. Finding out why usually means logs, forums, plugins and guesswork.
- Fri 23:48shop owner“Black Friday, the busiest night of the year, and checkout just shows a white screen.”
Fri 23:48shop owner
“Black Friday, the busiest night of the year, and checkout just shows a white screen.”
- 09:14site owner“My site is down. The host says “check nginx”. I don’t even know what nginx is.”
09:14site owner
“My site is down. The host says “check nginx”. I don’t even know what nginx is.”
- 07:55café owner“A customer texted me a screenshot: “Your website says it’s not secure.” I had no idea.”
07:55café owner
“A customer texted me a screenshot: “Your website says it’s not secure.” I had no idea.”
- 02:07developer“The site says 502 and I’m half asleep, digging through logs to find out which service died.”
02:07developer
“The site says 502 and I’m half asleep, digging through logs to find out which service died.”
- 06:15developer“Our backups had been failing for a month. I only found out when I actually needed one.”
06:15developer
“Our backups had been failing for a month. I only found out when I actually needed one.”
- 10:30clinic manager“Patients can’t book online, and the person who set up our server moved abroad years ago.”
10:30clinic manager
“Patients can’t book online, and the person who set up our server moved abroad years ago.”
- Mon 08:30agency“Twenty client servers. One full disk nobody noticed, and a certificate that expired over the weekend.”
Mon 08:30agency
“Twenty client servers. One full disk nobody noticed, and a certificate that expired over the weekend.”
- 11:02blogger“My site got so slow that visitors leave before the page even finishes loading.”
11:02blogger
“My site got so slow that visitors leave before the page even finishes loading.”
- Fri 23:48shop owner“Black Friday, the busiest night of the year, and checkout just shows a white screen.”
Fri 23:48shop owner
“Black Friday, the busiest night of the year, and checkout just shows a white screen.”
- 09:14site owner“My site is down. The host says “check nginx”. I don’t even know what nginx is.”
09:14site owner
“My site is down. The host says “check nginx”. I don’t even know what nginx is.”
- 07:55café owner“A customer texted me a screenshot: “Your website says it’s not secure.” I had no idea.”
07:55café owner
“A customer texted me a screenshot: “Your website says it’s not secure.” I had no idea.”
- 02:07developer“The site says 502 and I’m half asleep, digging through logs to find out which service died.”
02:07developer
“The site says 502 and I’m half asleep, digging through logs to find out which service died.”
- 06:15developer“Our backups had been failing for a month. I only found out when I actually needed one.”
06:15developer
“Our backups had been failing for a month. I only found out when I actually needed one.”
- 10:30clinic manager“Patients can’t book online, and the person who set up our server moved abroad years ago.”
10:30clinic manager
“Patients can’t book online, and the person who set up our server moved abroad years ago.”
- Mon 08:30agency“Twenty client servers. One full disk nobody noticed, and a certificate that expired over the weekend.”
Mon 08:30agency
“Twenty client servers. One full disk nobody noticed, and a certificate that expired over the weekend.”
- 11:02blogger“My site got so slow that visitors leave before the page even finishes loading.”
11:02blogger
“My site got so slow that visitors leave before the page even finishes loading.”
- 13:45shop owner“The contact form stopped sending emails weeks ago. I only noticed when a customer phoned to complain.”
13:45shop owner
“The contact form stopped sending emails weeks ago. I only noticed when a customer phoned to complain.”
- Fri 17:40agency“A client’s WordPress got hacked through a plugin nobody had updated in two years. Goodbye, weekend.”
Fri 17:40agency
“A client’s WordPress got hacked through a plugin nobody had updated in two years. Goodbye, weekend.”
- 14:20site owner“Google emailed me about “server errors” on my site. Is that bad? I honestly can’t tell.”
14:20site owner
“Google emailed me about “server errors” on my site. Is that bad? I honestly can’t tell.”
- 03:12developer“Logs never rotated, the disk hit 100% at 3 am and the database quietly stopped saving orders.”
03:12developer
“Logs never rotated, the disk hit 100% at 3 am and the database quietly stopped saving orders.”
- 16:05b&b owner“My host says my server was sending spam. Now my booking emails land in people’s junk folders.”
16:05b&b owner
“My host says my server was sending spam. Now my booking emails land in people’s junk folders.”
- 04:50developer“Someone spent the whole night trying to guess the root password. Thousands of attempts.”
04:50developer
“Someone spent the whole night trying to guess the root password. Thousands of attempts.”
- 21:37agency“Once a month I lose a whole day logging into client sites just to check they’re still OK.”
“Once a month I lose a whole day logging into client sites just to check they’re still OK.”
- 15:20shop owner“The site takes eight seconds to load, and three speed plugins later it still does.”
15:20shop owner
“The site takes eight seconds to load, and three speed plugins later it still does.”
- 13:45shop owner“The contact form stopped sending emails weeks ago. I only noticed when a customer phoned to complain.”
13:45shop owner
“The contact form stopped sending emails weeks ago. I only noticed when a customer phoned to complain.”
- Fri 17:40agency“A client’s WordPress got hacked through a plugin nobody had updated in two years. Goodbye, weekend.”
Fri 17:40agency
“A client’s WordPress got hacked through a plugin nobody had updated in two years. Goodbye, weekend.”
- 14:20site owner“Google emailed me about “server errors” on my site. Is that bad? I honestly can’t tell.”
14:20site owner
“Google emailed me about “server errors” on my site. Is that bad? I honestly can’t tell.”
- 03:12developer“Logs never rotated, the disk hit 100% at 3 am and the database quietly stopped saving orders.”
03:12developer
“Logs never rotated, the disk hit 100% at 3 am and the database quietly stopped saving orders.”
- 16:05b&b owner“My host says my server was sending spam. Now my booking emails land in people’s junk folders.”
16:05b&b owner
“My host says my server was sending spam. Now my booking emails land in people’s junk folders.”
- 04:50developer“Someone spent the whole night trying to guess the root password. Thousands of attempts.”
04:50developer
“Someone spent the whole night trying to guess the root password. Thousands of attempts.”
- 21:37agency“Once a month I lose a whole day logging into client sites just to check they’re still OK.”
“Once a month I lose a whole day logging into client sites just to check they’re still OK.”
- 15:20shop owner“The site takes eight seconds to load, and three speed plugins later it still does.”
15:20shop owner
“The site takes eight seconds to load, and three speed plugins later it still does.”
02 /The thinking
Other tools tell you what broke. Mellonbot works out why.
An alert leaves the hard part to you. Mellonbot’s AI asks follow-up questions, checks the answers and follows the clues until it finds the real cause — and the fix that stops it coming back.
Typical monitoring: CRITICAL · Disk usage 100% on /
Mellonbot investigates:
- What’s using the space? 21 GB in one folder — old backups from a plugin.
- Why does it keep growing? The plugin saves a copy every night and never deletes any.
- What has it broken? Photo uploads and new orders have failed since 11:05.
What happened: A backup plugin has saved a copy every night for three years. The disk filled up this morning, so your shop can’t save new orders.
Fix: Keep the five newest backups, delete the rest and make the plugin tidy up after itself.
Typical monitoring
CRITICAL · Disk usage 100% on /
That’s where it stops. Why it happened and what to do is up to you.
- What’s using the space?21 GB in one folder — old backups from a plugin.
- Why does it keep growing?The plugin saves a copy every night and never deletes any.
- What has it broken?Photo uploads and new orders have failed since 11:05.
What happened
A backup plugin has saved a copy every night for three years. The disk filled up this morning, so your shop can’t save new orders.
Keep the five newest backups, delete the rest and make the plugin tidy up after itself.
Typical monitoring
DOWN · rosebakery.com returned 500
That’s where it stops. Why it happened and what to do is up to you.
- Is the website itself running?Yes, but it can’t reach its database.
- Why is the database down?It was shut down at 06:12 for using too much memory.
- What used up the memory?PHP is allowed 14 workers — more than a 2 GB server can hold.
What happened
When traffic peaked, your site’s PHP used more memory than the server has and pushed the database out.
Restart the database and lower PHP’s limit so the two fit side by side.
Typical monitoring
WARNING · CPU above 95% for 30 min
That’s where it stops. Why it happened and what to do is up to you.
- What’s keeping the server busy?PHP, answering login requests.
- Are these real visitors?No — 48,213 login attempts from bots in a day.
- How are they getting in?Mostly through an old side door the site never uses.
What happened
Bots are guessing passwords all day, and your server is busy answering them instead of your customers.
Close the side door and slow down anyone who keeps guessing.
Typical monitoring
OK · All checks passing
Every check is green, so nobody looks.
- When was the last good backup?September 1 — 23 days ago.
- What does the backup job say?It can’t find the tool it uses to copy the database.
- What changed on September 1?A server update renamed that tool.
What happened
Your backups have failed quietly every night since an update on September 1. Nothing looked wrong, so nobody noticed.
Point the backup at the renamed tool and take a fresh backup now.
Typical monitoring
CRITICAL · Disk usage 100% on /
That’s where it stops. Why it happened and what to do is up to you.
- What’s using the space?21 GB in one folder — old backups from a plugin.
- Why does it keep growing?The plugin saves a copy every night and never deletes any.
- What has it broken?Photo uploads and new orders have failed since 11:05.
What happened
A backup plugin has saved a copy every night for three years. The disk filled up this morning, so your shop can’t save new orders.
Keep the five newest backups, delete the rest and make the plugin tidy up after itself.
03 /How it works
From “something's wrong” to fixed in four steps
- 01ConnectWaitingRun one command on your server — it installs a small agent that only connects out.
Connect
Run one command on your server — it installs a small agent that only connects out.
- 02CheckWaitingAsk, and it takes a read-only look at your site, SSL, services, disk, updates, security, databases and more.
Check
Ask, and it takes a read-only look at your site, SSL, services, disk, updates, security, databases and more.
- 03InvestigateWaitingThe AI follows the clues — logs, recent changes, what depends on what — to the real cause, then explains it in everyday words.
Investigate
The AI follows the clues — logs, recent changes, what depends on what — to the real cause, then explains it in everyday words.
- 04FixWaitingYou approve, and Mellonbot applies the fix, checks it worked and keeps a backup so you can undo it.
Fix
You approve, and Mellonbot applies the fix, checks it worked and keeps a backup so you can undo it.
04 /What it fixes
The problems that actually take sites down
Each check is where the thinking starts: when one fails, Mellonbot works out why and what will fix it for good.
- Full diskChecking…
- Crashed servicesQueued
- SSL certificatesQueued
- Security updatesQueued
- Brute-force attacksQueued
- Risky SSH settingsQueued
- Docker containersQueued
- DatabasesQueued
- Memory & CPUQueued
- Failing cron jobsQueued
- DowntimeQueued
- Config errorsQueued
05 /You stay in control
You decide how much Mellonbot does on its own
Pick how much Mellonbot may do on its own — and watch what happens to the same four fixes. You can change it any time.
- Restart crashed nginxLow risk · undoableApplied· UndoWaitingfor youWaitingfor you
- Clear 6 GB of old logsLow risk · undoableApplied· UndoWaitingfor youWaitingfor you
- Install 12 security updatesMedium riskAppliedWaitingfor youWaitingfor you
- Raise PHP memory limitMedium risk · undoableApplied· UndoWaitingfor youWaitingfor you
Nothing runs until you say yes.
Low-risk, undoable fixes run on their own. The rest wait for you.
All but high-risk fixes run, up to 10 a day. The Stop button is always there.
Nothing runs until you say yes.
Always, in every mode
- 01Every command reviewedSigned for your server and checked by a second AI before it runs.
- 02Changes need your OKOnly commands that look run on their own. Everything else waits.
- 03Backup firstFiles are copied before they’re edited, one command at a time.
- 04A way backEvery change comes with how to undo it.
- 05Everything on the recordEvery command, its result and who approved it.
- 06Stop any timeStop a session and everything still waiting is cancelled.
06 /Built for
Whether you live in a terminal or not
One problem, explained the way you need it — from exact commands to plain English to a client-ready overview.
The same problem, as developers see it
finding · millerplumbing.co · sslcritical
Your padlock expires in 3 days
The certificate that keeps your site secure hasn’t been renewing. After it expires, visitors see a “Not secure” warning and most of them leave.
What Mellonbot will do
Fix the setting that blocks renewal and renew the certificate. Takes a minute, and you can undo it.
Clients · 14 servers
12 healthy1 warning1 critical
- Miller PlumbingCertificate expires in 3 days
- Lakeside YogaBackup failing for 23 days
- Rose BakeryAll checks passed
- Harbor InnAll checks passed
finding · millerplumbing.co · sslcritical
Questions, answered
The AI works out what’s wrong and proposes fixes, but every command it wants to run is signed for your server and reviewed by a second AI first. Commands that only look run on their own; anything that changes your server, reads passwords or sends data out waits for your OK. Files are backed up before they’re edited, every change comes with how to undo it, and the agent only connects out to Mellonbot.
WordPress, Laravel, Node, static and custom sites on a VPS or dedicated server running Ubuntu 22.04 or 24.04, Debian 12, AlmaLinux 8/9 or Rocky Linux 8/9, on any host — DigitalOcean, Hetzner, AWS and the rest, including servers behind NAT. Shared hosting without root works too, with the same command without sudo plus --user, or with the Mellonbot WordPress plugin; there Mellonbot can only change what your account owns. Site builders like Wix or Squarespace aren’t supported.
It looks for changed files, injected code and the hole the attacker came through. It backs up what it touches first, then removes the code and closes the hole only after you approve.
When the slowdown comes from the server — memory, PHP workers, the database or bots hammering the site — yes. It doesn’t redesign your theme or compress your images.
Create a free account, name your workspace and connect your first site with one command. The free plan gives you 100 credits to start, then 50 a month, no card needed.
Free with 100 credits to start, then 50 a month. Paid plans start at $9 a month, plus one-off credit packs — see the pricing page.
No. Everything is explained in plain English first, and connecting your site takes one command — or send a link to your developer or host and they run it. If you are technical, the full details are one click away.
No. Mellonbot is software that you control. Its AI investigates and proposes changes, you decide what runs, and no one at Mellonbot logs in to your site or server or works on it by hand.
Still have a question?
Every message goes straight to the founder.
Free plan · 100 credits to start
Let Mellonbot look after your website
Create a free account and connect your first site in a few minutes. Upgrade only when you need more.
- No card needed
- Leave any time
Prefer to talk first? Get in touch →
$ mellonbot start --free
- ✓ 100 credits to start
- ✓ No card needed
- ✓ One command to connect your site
Already have an account? Sign in