For agencies  ›  WordPress website takeover Inherited sites · Under your brand

White Label WordPress Website Takeover for Agencies

You won a new client, and with them came a WordPress site someone else built: no documentation, a previous developer who still has the keys, or no keys at all. We take the site over for you, in the right order, lock it down, and hand you a baseline report in your agency’s name so you can quote the real work from facts instead of guesses.

✓  Free outside-in pre-check ✓  Access recovered, not rebuilt ✓  Previous access removed ✓  Fixed cost or per hour ✓  NDA before any client material
The takeover order Why this sequence
1
Domain Whoever controls the registrar controls everything else. Confirmed or recovered first.
2
DNS and email Password resets land in the inbox. A dead inbox is what actually sets the clock.
3
Hosting Account moved into the client’s name, or the site moved to a host they own.
4
WordPress admin Previous developers’ accounts removed, passwords rotated, two-factor on.
5
Licences and third parties Premium plugins, CDN, forms, payments, analytics: inventoried and re-owned.
6
Backups and staging Off-site backup taken and restore-tested before anything is changed.
7
Baseline report What the client owns, what is at risk, and what to do first, in your name.
How agencies end up here

Three ways a site you did not build becomes your problem

Each one needs the same takeover order, with a different first move. We have done all three enough times to know where the surprises hide.

You won the client from another agency

The handover is polite on the surface and incomplete underneath. Logins arrive in dribs, the hosting is on the old agency’s account, and nobody mentions the three premium plugins licensed in their name. Your client’s site keeps working until the first renewal fails.

Risk: the old agency can still log in, and your client is paying for things they do not own.

The previous developer disappeared

A freelancer stopped replying. The domain may be registered in their name, the hosting invoices go to an inbox nobody can open, and the client is asking you to “just take it over”. This is recovery work before it is development work.

Risk: time. Registrars and hosts move slowly, and the site may be on a plan that expires while you wait.

You inherited a half-built project

The client paid someone for a site that was never finished. What exists is a mix of a theme demo, real content and promises. Before you quote the completion, somebody has to establish what was actually built and whether it is worth finishing.

Risk: quoting a finish on a foundation that should be replaced, and owning the result.

If the developer is already gone, our guide on getting control of a site when your web developer disappeared is written for the client. Send it to them while we start.

What we find most often

The eight things inherited sites hide, and what we do about each

None of these show up in a screenshot. All of them show up in the first week, usually at the worst time.

!  Admin accounts that should not exist

Ex-developers, old agencies, “temp” users from 2021. We list them, you confirm with the client, we remove them and rotate every password.

!  Licences in someone else’s name

Premium theme, page builder, forms, backups, security. If the client paid the developer rather than the vendor, the licence walked out with them. We inventory each one and tell you what to re-buy and what to drop.

!  The domain registered to the developer

The single worst finding. We tell you honestly whether it is recoverable, how (invoices, trademark, registrar dispute), and what to save right now in case it is not.

!  No working backup

Backups that were never set up, or a backup plugin pointing at an account nobody can open. The first thing we do with access is take one off-site and restore-test it.

!  Nulled or abandoned plugins

Pirated premium plugins with hidden code, or plugins with no update in years. Both are how inherited sites get hacked a month after you take them on.

!  Tracking that still reports to the old agency

Analytics, Tag Manager, Search Console and ad pixels owned by the previous team. We move ownership to the client and add you as a user.

!  Email that breaks on moving day

The domain’s mail runs through the old host. Moving hosting without moving DNS carefully takes the client’s email down. We map it before anything moves.

!  A site that was never built for mobile, or on a dead builder

Sometimes the honest finding is that the foundation is not worth keeping. We say so in the report, and quote a redevelopment or a rebuild separately.

What you hand your client

A takeover report in your agency’s name

The client gets a document that shows what was wrong, what you fixed on day one and what they now own. You get the facts to quote the real work from. Neither mentions us.

The risk ordering follows our WordPress site audit method: money first, breakage second, visibility third. The keep, fix or replace verdicts use the same test as our white label redevelopment service.

Hire us
01
Ownership map Domain, DNS, hosting, WordPress, licences, email, analytics, payments: who owns each today, who should, and what changed.
02
Access log Every account removed, every password rotated, every account created, with dates. The client’s record of the handover.
03
Risk list, by cost What is losing the client money now, what is about to break, and what can wait. Ordered the way our site audit guide orders it.
04
Keep, fix, or replace For the theme, the builder, each plugin and the hosting: our verdict and why. Where the foundation fails, a separate redevelopment or rebuild quote.
05
Forward plan you can price The support and maintenance the site actually needs, written so you can put your own retail price next to each line.
How it runs

From “can you take this over?” to a site the client actually owns

1

Free pre-check

From the URL alone: registrar, host, theme, visible plugins, known vulnerabilities, obvious ownership flags. Within two business days, in your name.

2

Fixed quote and authority

We quote the takeover as a fixed cost. You confirm in writing that the client has authorised the work. NDA signed.

3

Access day

Whatever logins exist come to us. We work down the takeover order, take an off-site backup first, and touch nothing on the live site until it is restore-tested.

4

Lockdown and inventory

Old accounts out, passwords rotated, two-factor on, licences and third-party accounts moved to the client, hosting and DNS mapped.

5

Report and handover

The takeover report in your name, a plain-English note for the client, and a forward plan you can price. Then support or maintenance if you want it.

When there are no logins at all

Recovering a domain or a hosting account from an unresponsive developer is a process with registrars and hosts, not a technical fix, and its length is set by them. We tell you after the pre-check what looks recoverable and what does not, we save what can be saved from the live site immediately, and that recovery work runs per hour because nobody can scope a registrar’s response time.

Two ways to pay

A fixed cost for the takeover, per hour for the unknowns

The pre-check tells us enough to fix the price of the takeover itself. Access recovery and the fixes that follow are priced separately, so you never pay a padded number for things that might not be needed.

The takeover itself

Fixed cost

✓  Lockdown, inventory, backups, staging and the takeover report, one price ✓  Quoted from the pre-check before you commit to the client ✓  Your retail price and margin known in advance ✓  Fixes and improvements found during the takeover quoted separately, as fixed prices

This is how most agencies buy it: one line on their proposal to the new client.

Recovery and the long tail

Per hour

✓  Recovering domains or hosting from an unresponsive developer ✓  Chasing registrars, hosts and vendors on the client’s behalf ✓  Small fixes you want handled as they come up after the takeover ✓  Time logged and reported monthly, per client site, in your name

Switch to a fixed cost the moment a piece of work becomes scopeable. No minimum, no contract.

The same white label rules as our support and development services: NDA first, no contact with your client or the previous developer unless you ask for it, our name nowhere, and every account ends up in the client’s name, not ours.

Authority, and the previous developer

We only act on a site when you confirm in writing that the client has authorised it, and we keep that confirmation with the access log. We do not contact the previous developer or agency. If a conversation with them is needed, for a licence transfer or a registrar release, you or your client has it, with a script from us if you want one.

Nothing is deleted. Old accounts are removed after a full backup, old plugins are deactivated before they are uninstalled, and a copy of the site as we found it is kept until you say otherwise. If the site turns out to be hacked, the takeover pauses and our malware removal process runs first.

Who does the work

People who have untangled this before

Survyc is an AI-first digital agency. On a takeover, automation does the inventory: every user, plugin, licence, DNS record and third-party tag listed in minutes instead of an afternoon. A senior developer then decides what is a risk, what is a relic and what to do first, and makes every change by hand.

We do not show client logos because our agency clients are under NDA. The free pre-check is the proof: send one URL and judge what we can see from the outside. Meet the team.

Questions agencies ask

WordPress website takeover questions

Can you take over a WordPress site with no logins at all?

Usually, but it is recovery before it is development. We start with what the live site reveals (registrar, host, theme), save a copy of the content immediately, then work through registrar and host ownership processes with your client’s invoices and identity. We tell you after the free pre-check what looks recoverable.

Will the previous developer or agency know we are involved?

Not from us. We never contact them, our name appears nowhere in the site or the report, and account changes are made as your agency or the client. If a licence transfer or domain release needs a conversation with them, you or your client has it, and we give you the exact wording to use.

What if the domain is registered in the developer’s name?

That is the worst finding, and we treat it as the first priority. Options are, in order: a polite transfer request from the client, a registrar dispute backed by invoices and business records, and in rare cases a trademark route. Meanwhile we save everything on the live site in case the domain cannot be recovered.

Do you rebuild the site or keep it?

Keep it, unless the foundation fails. The takeover report gives a keep, fix or replace verdict for the theme, builder, plugins and hosting, with reasons. Where a redevelopment or rebuild is justified, it is quoted separately under your brand, and you decide with your client.

How long does a takeover take?

With logins in hand, the lockdown, inventory and report usually complete within a week or two, depending on the size of the site and how many third-party accounts are involved. Without logins, the recovery steps are set by registrars and hosts, and we give you a realistic estimate after the pre-check.

Will the client’s site go down during the takeover?

No. Nothing is changed on the live site until a restore-tested backup exists. Hosting moves are planned around DNS and email so the client’s mail keeps flowing, and they happen on staging first. The client should notice nothing except that things start working more reliably.

What happens after the takeover?

You decide. The forward plan lists the support and maintenance the site needs, with each line written so you can price it for your client. Many agencies hand the ongoing work to our white label support and maintenance, under their brand, but there is no obligation and no contract.

Free pre-check

Send the site before you promise the client anything

From the URL alone we tell you who the registrar and host are, what the site is built on, what is visibly exposed, and which ownership flags to raise with the client, within two business days and in your agency’s name. No logins needed, no obligation.

✓  Pre-check within two business days ✓  Fixed cost for the takeover, per hour for recovery ✓  Previous access removed, every account in the client’s name ✓  NDA before any client material

Get the free pre-check

One client site per request. We only ever talk to you.
Thanks. You will have the pre-check within two business days, and we will not contact anyone but you.

Get an Expert