If you’re looking for a self-hosted When I Work alternative, the reasons usually come down to some mix of three: you don’t want your team’s time data living in someone else’s cloud, you’re tired of paying per head (and paying again to bolt time tracking onto scheduling), and you want to lock clock-in to your office in a way that can’t be faked from a phone at home.
Let’s be fair up front: When I Work is a genuinely good scheduling app. Its rostering, shift swapping, availability, and team messaging are polished, and it ships native iOS and Android apps. If building and communicating schedules is your primary problem and you’re happy with per-user billing and cloud-held data, it’s a reasonable choice.
But it’s scheduling-first — time tracking is a separate per-user add-on on top of the scheduling fee — and for the one job most buyers actually search for, stopping off-site and buddy punching, it locks clock-in with GPS geofencing only. There’s no true office-IP restriction. GPS needs the app open with location on, and it can be spoofed from a couch. Punchwell is a different shape: a self-hosted WordPress time clock with a hard, server-side office-IP lock, everything bundled into a flat annual price with no per-seat fee, and unlimited employees.
Punchwell is an independent product by Sturdyhaus. We are not affiliated with, endorsed by, or sponsored by When I Work or any other vendor named on this page. Competitor names are used descriptively (nominative fair use) only, to help you compare. All third-party names and trademarks belong to their respective owners.
Get Punchwell Pro — $99/yr → · See how the IP lock works →
Per site, not per seat. Unlimited employees. Your data stays on your server.
Where the two genuinely differ
The honest headline is that these tools lead with different jobs. When I Work leads with scheduling and team communication; Punchwell leads with attendance integrity. The three differences that decide it are where the clock lives, how you’re billed, and how the location lock actually works.
- Self-hosted vs. cloud. Punchwell runs inside your own WordPress site. When I Work is a hosted SaaS — your rosters and timesheets live in their cloud. If you’re a clinic, dental practice, or agency that would rather not put staff data on a third party’s servers, that distinction is the entire decision.
- Flat price vs. per-user billing (twice). When I Work is priced per user, and time tracking is an add-on (approximate, as of June 2026 — confirm current rates): roughly ~$5 per user per month for scheduling plus ~$2 per user per month for the time-clock add-on, which works out to ~$2,100/yr for a 25-person shop. Punchwell is $99/yr flat, everything bundled, unlimited employees. Your bill doesn’t move when you hire.
- True IP lock vs. GPS-only. This is the crux. When I Work restricts clock-in location with GPS geofencing — a real deterrent, but it needs the app and can be spoofed. Punchwell adds a hard-enforced office-IP lock that refuses the punch server-side, on top of its own optional GPS geofence. You get both tools; When I Work only gives you the one that can be faked from home.
Everything below expands on those three. We’ll keep the competitor numbers hedged — they’re approximate and as of June 2026, and SaaS vendors price dynamically, so confirm current rates before you budget against them.
Side by side
Here’s the honest comparison. When I Work gets credit where it’s due — its scheduling, team messaging, and native apps are genuinely better than ours.
| When I Work | Punchwell | |
|---|---|---|
| Hosting | Cloud SaaS — data on their servers | Self-hosted in your own WordPress site |
| Your data | Held in vendor cloud | Stays in your WordPress database; no data call-home (verified) |
| Pricing model | Per user, scheduling + time-tracking add-on (approx. ~$5 + ~$2/user/mo, as of June 2026) | Per site, flat — never per seat, everything bundled |
| ~25-staff annual cost | ~$2,100/yr (approximate, as of June 2026 — confirm current rates) | $99/yr flat, unlimited employees |
| Office-IP clock-in lock | No — GPS geofence only | Yes — hard-enforced, refuses the punch server-side |
| IP allowlist depth | — | Exact IPs, CIDR blocks, address ranges, IPv4 + IPv6 |
| Allowlist scope | — | Company + per-office + per-employee (unioned, widen-only) |
| Enforcement modes | — | Block / Warn / Flag, plus optional clock-in time window |
| GPS geofence | Yes | Yes — opt-in, per-office radius (metres or feet) |
| Kiosk / shared-device clock | Yes | Yes — short code + 6-digit PIN, enrolled device, venue IP must match |
| Mobile punch | Native iOS / Android apps | Responsive web / PWA punch screen (add-to-home-screen, not an app-store app) |
| Scheduling & team messaging | A genuine strength — rostering, swaps, availability, chat | Shift policies per department (no demand-based auto-scheduling or chat) |
| Payroll | Payroll integrations / partners | Exports payroll data (CSV + SurePayroll/Gusto connectors) — does not move money |
| License | Proprietary SaaS | GPL — you genuinely own the code |
| Best fit | Teams whose main need is scheduling and staff messaging, who accept per-user billing | Teams already on WordPress who want to own their data, pay flat, and lock clock-in by office IP |
1. Self-hosted: your roster stays on your server
This is the cleanest reason to choose Punchwell over a hosted clock. Punchwell lives inside the WordPress site you already run. Employees are just WordPress users; timesheets are rows in your own database. Nothing syncs to a vendor cloud — all of the original’s outbound network code was removed and verified — the free version makes no outbound calls at all, and the only outbound call Pro makes is validating your license key against our own billing server, never your data. (The only external content is optional YouTube tutorial embeds and Gravatar avatars — standard WordPress, and only if you use them.)
For privacy-sensitive shops — clinics, dental practices, agencies handling client staff — that’s often the whole point. Your staff data never leaves your server, which helps with your privacy obligations. (Compliance is your configuration, not our certification — but self-hosting removes the “it’s in someone else’s cloud” problem entirely.)
And “self-hosted” doesn’t mean “manage a server.” If you already run WordPress, you have everything you need — Punchwell installs like any other plugin and updates through your dashboard. There’s no separate server and no cloud account to set up.
See the security and privacy picture →
2. Flat price: no per-seat creep, no add-on to unlock time tracking
When I Work is priced per user, and the time clock is an add-on on top of the scheduling fee. Approximate, and as of June 2026 (confirm current rates — SaaS pricing moves): roughly ~$5 per user per month for scheduling plus ~$2 per user per month for time tracking. For a 25-person shop that lands around $2,100/year — and it climbs every time you hire.
Punchwell is flat, and everything is bundled:
- Free / Community — $0 on WordPress.org. Base HR: employees, departments, leave, basic attendance, and a basic single-office IP lock.
- Pro — $99/year, per site. Everything bundled: the full per-employee/per-office IP-lock depth, GPS geofence, kiosk, mobile punch, payroll export, PTO accrual, reminders, checklists, recruitment, loans, attendance reports, self-service, and permissions.
Per site, never per seat. Unlimited employees on every tier. There’s no separate module to unlock the time clock — it’s all in the one price. Hire your hundredth person and your bill doesn’t change. The renewal price is locked for as long as you never lapse — no surprise increase at employee #26. And because it’s GPL and self-hosted, even if you cancel you keep the plugin and every record.
Free on WordPress.org. Unlimited employees. No card required.
3. A true office-IP lock — the part GPS alone can’t do
This is where Punchwell pulls ahead, and it’s the exact job most buyers are searching for. When I Work restricts clock-in location with GPS geofencing only. That’s a real deterrent, but it has two structural limits: it needs the app open with location services on, and GPS can be spoofed from a couch. It logs where someone says they are; it doesn’t refuse a bad punch.
Punchwell’s office-IP lock is per-employee and hard-enforced. Flag a worker as office-only and they can clock in or out only from an allowlisted address. It refuses the punch server-side when they’re off your network — it doesn’t merely record a location for review. That’s the difference between a record of a bad punch and a blocked one.
The depth:
- Allowlist by exact IP, CIDR block (e.g.
203.0.113.0/24— a whole range of office addresses without listing each one), or address range. IPv4 and IPv6. - Three scopes, unioned (widen-only): company-wide, per-office (each location can carry its own IPs), and per-employee (“additional allowed IPs” on the profile). Adding an address only ever widens access — so on-site cashiers can be locked to the building while remote staff clock in from anywhere.
- Block / Warn / Flag enforcement modes — choose how strict to be. Plus an optional clock-in time window (only accept punches around shift start; it never blocks clock-out) and a blocked-attempt email to HR.
And because an IP lock isn’t the only tool you might want, Punchwell also ships an opt-in GPS geofence (per-office radius, in metres or feet), a kiosk/wall-tablet clock (short code + PIN on a shared device), and a mobile/PWA punch screen. We say this plainly: GPS is a deterrent, the IP lock is the hard control. When I Work gives you the deterrent; Punchwell gives you both — and lets you go granular on the one that can’t be faked from home.
See how the IP lock works → · GPS geofence, kiosk & mobile punch →
What When I Work does that Punchwell doesn’t (the honest part)
Naming the limits is what makes the rest believable. On several fronts When I Work is genuinely the stronger tool.
- Scheduling and team communication. This is When I Work’s home turf. Its rostering, shift swapping, availability management, and built-in team messaging are a real, mature strength. Punchwell has shift policies per department (with rounding, grace periods, auto clock-out, and overnight shifts) but no demand-based auto-scheduling and no team chat. If building and communicating rosters is your core job, When I Work does it better — full stop.
- Native mobile apps. When I Work ships polished iOS and Android apps. Punchwell’s mobile punch is a responsive web / PWA screen you add to your home screen — not an App Store / Play Store app. For most on-site clock-in use that’s plenty (and it works on any device with a browser), but if you specifically need a native app, that’s a real difference.
- Hosted convenience. With When I Work there’s nothing to host — you sign up and go. Punchwell needs a WordPress site (which you likely already have, but it’s a prerequisite).
- Payroll processing. Punchwell exports payroll data (a payout report with weekly and daily overtime, double-time, holiday pay, worker classification, and CSV export, plus SurePayroll and Gusto connectors). It does not move money — by design, so there’s no payment-processor or tax-custody risk. You take the payroll-ready CSV to your provider. If you want deep payroll-partner integrations inside the clock, When I Work has more of them.
If those trade-offs are dealbreakers — especially the scheduling — When I Work may suit you better, and that’s fine. If owning your data, paying flat, and a true IP lock matter more, Punchwell is built for exactly that.
Moving from a hosted clock to Punchwell
You don’t import much, because the model is simple: set up your departments and shift policies, add employees as WordPress users (or they already exist), confirm your office IPs under Structure → Locations, and flag who’s office-only. Most teams are clocking in the same day.
If you’re coming from the abandoned original “WP Human Resource Management” plugin rather than a SaaS clock, there’s a documented in-place migration — your existing employees, attendance, and leave records carry over.
FAQ
Is Punchwell affiliated with When I Work? No. Punchwell is an independent product by Sturdyhaus. We are not affiliated with, endorsed by, or sponsored by When I Work or any other vendor. We reference “When I Work” descriptively (nominative fair use) only, to help you compare time-clock options. All third-party names and trademarks belong to their respective owners.
Does Punchwell really cost less than When I Work? For most teams, yes — and the gap widens as you hire. When I Work is priced per user, and the time clock is an add-on on top of the scheduling fee (approximately ~$5 per user per month plus ~$2 per user per month for time tracking, as of June 2026 — confirm current rates), which is roughly $2,100/year for 25 staff. Punchwell is $99/year flat with everything bundled and unlimited employees. Where When I Work can be worth the premium is if scheduling and staff messaging are your main need and you want a fully hosted app with native mobile apps and no WordPress site to run.
Does When I Work have an IP lock like Punchwell? No — When I Work restricts clock-in location with GPS geofencing only. Punchwell adds a hard-enforced office-IP lock that refuses the punch server-side, with CIDR blocks and address ranges, IPv4 and IPv6, company + per-office + per-employee allowlists (unioned), and block/warn/flag modes plus an optional clock-in time window. Punchwell ships a GPS geofence too, so you get both.
Isn’t GPS geofencing enough to stop buddy punching? It helps, but it has limits: it needs the app open with location on, and GPS can be spoofed from home. It logs a location rather than refusing a bad punch. An office-IP lock can’t be faked from a phone at home, and Punchwell refuses the off-site punch server-side. We’re honest that GPS is a deterrent while the IP lock is the hard control — Punchwell gives you both and lets you choose how strict to be.
Is my data really mine if it’s self-hosted? Yes. Punchwell lives inside your own WordPress database — your employees, timesheets, and leave records are your rows on your server. There’s no vendor cloud holding them, and no data call-home (all of the original’s outbound network code was removed and verified; Pro’s only outbound call is license validation, never your data). It’s GPL, so even if you cancel a Pro license you keep the plugin and every record.
Do I have to run my own server? No. If you already run a WordPress site, you have everything you need — Punchwell installs and updates like any other plugin. “Self-hosted” just means your data lives in your WordPress database instead of a vendor’s cloud. There’s no separate server or cloud account to set up.
Own the clock, not just rent it
When I Work is a capable hosted app, and if scheduling and team messaging are what you want, it’ll serve you well. But if you’d rather keep your team’s data on your own server, pay a flat annual price instead of per head, and lock clock-in with a true office-IP restriction instead of GPS alone — Punchwell is built for exactly that.
Get Punchwell Pro — $99/yr → · See how the IP lock works →
Per site, not per seat. GPL. Self-hosted. Your data stays on your server.
Disclaimer: Punchwell is an independent product by Sturdyhaus and a maintained GPL fork of the “WP Human Resource Management” plugin. Sturdyhaus is not affiliated with, endorsed by, or sponsored by When I Work or any other vendor named on this page. “When I Work” and any other product names are referenced descriptively (nominative fair use) solely to allow honest comparison. Competitor pricing is approximate and as of June 2026; vendors price dynamically — confirm current rates before budgeting. All third-party names and trademarks belong to their respective owners. Punchwell, by Sturdyhaus.