Patchstack Developer

Monitor WordPress vulnerabilities across your websites

Patchstack matches installed WordPress core, extensions, and themes against its vulnerability database. The free Personal plan provides vulnerability alerts, a central dashboard, update management, and snapshot security reports. Automatic updates for vulnerable extensions can be enabled optionally.

Patchstack Developer and Enterprise are paid subscriptions. They add automatic vulnerability protection and preventive security controls to the extension’s detection and reporting features.

Detection, alerts, and reports

The service can detect vulnerabilities in WordPress core, plugins, and themes. The Patchstack App gives you a central view of connected sites, with logs and analytics for reviewing security activity. Email alerts and snapshot PDF reports are available with the free plan; paid Developer subscriptions also include Slack alerts and weekly or monthly PDF reports.

Targeted protection with vPatches

When Patchstack detects a specific vulnerability on a site, it can deploy a targeted virtual patch, or vPatch. These non-intrusive firewall rules block exploit attempts against vulnerable plugins and themes without modifying site code. The paid offering includes access to more than 12,000 individual protection rules.

Hardening and custom controls

Developer and Enterprise subscriptions include advanced hardening options, WordPress-specific hardening rules, two-factor authentication, CAPTCHA, a community IP blocklist, and advanced security options. They also include unlimited custom firewall rules and alert triggers, along with unlimited Patchstack App API usage.

For agencies, shop owners, and hosts

Agencies can use the dashboard to review customer sites covered by care or maintenance plans. WooCommerce site owners can monitor vulnerabilities as part of their site security process, and hosting companies can oversee protection across sites. Individual site owners can review alerts and reports through the App without needing advanced technical knowledge.

Install and connect

Install the Patchstack extension on the WordPress site you want to monitor, connect it to the Patchstack App, and review the security overview. Configure alerts, reports, hardening settings, and custom protection rules for the site. Once connected, use the App to review detected vulnerabilities, logs, analytics, and reports across your sites.