Discover, trust, install: FAIR 1.0 is here

Patchstack is a powerful tool that helps identify security vulnerabilities within your websites’ plugins, themes, and WordPress core. It is powered by the WordPress ecosystem’s most active community of ethical hackers. Patchstack is trusted by leading WordPress experts such as Pagely, Cloudways, GridPane, Plesk, and others!

Patchstack is a security plugin for WordPress that finds WP core, plugin and theme vulnerabilities in your websites.

The free version includes up to 48-hour early warning for new vulnerabilities found by our security research community. It also allows you to automatically update vulnerable software, manage updates remotely, and get snapshot reports on your sites’ security status.

The paid version includes automatic vulnerability protection. Patchstack deploys highly targeted rules on a per-site basis, only when a specific vulnerability is detected on a site.

This prevents vulnerable components from being exploited without modifying website code, or impacting site performance or functionality. Patchstack’s paid version includes access to 12,000+ individual protection rules (vPatches).

Patchstack paid version also includes other preventive security features, such as 2 factor authentication, WordPress specific hardening rules, a Community IP blocklist for malicious IP addresses, advanced security settings, and custom protection rules.

Post-hack cleanups vs attack prevention in WordPress security

Unlike the standard approach to WordPress security (malware scanning and infection cleanups), Patchstack is focused on preventing infections in the first place.

Thanks to its big WordPress security research community and partnerships with nearly one thousand plugin vendors and developers, Patchstack is regularly among the first to identify new vulnerabilities.

Who is Patchstack’s WordPress security plugin for?

Patchstack’s vulnerability management works extremely well for:

• Agencies with WordPress care/maintenance plans for their customers’ websites
• WooCommerce websites to protect their revenue and customers from attacks
• Hosting companies that want to deliver highly targeted vulnerability protection easily and at scale
  Website owners

You don’t have to be highly technical to use it. Install the plugin, connect it with the Patchstack App, and stay safe!

What features are included in the Patchstack Personal (Free) plan?

Patchstack’s Personal plan is a free security service for WordPress that lets you find and manage vulnerabilities in your websites. It includes access to a central security dashboard via the Patchstack web App for more visibility and control over your sites’ security:

• Be the first to know about new vulnerabilities.
• Receive notifications if any installed plugins or themes have security issues.
• Detect the latest security vulnerabilities in WordPress plugins.
• Detect the latest security vulnerabilities in WordPress themes.
• Detect the latest security vulnerabilities in WordPress core.
• Receive real-time alerts via email if any security vulnerabilities are found.
• Manage core, plugin and theme updates from a single dashboard.
• [Optional] Enable automatic updates for vulnerable plugins only.
• Generate snapshot reports about the security status of your website.

What features do Patchstack paid subscriptions have?

Patchstack’s paid subscriptions include automatic protection for WordPress vulnerabilities, as well as other protection modules.

• Virtual patching to prevent vulnerable components from being exploited
• Advanced hardening module for added WordPress security
• Remote hardening settings (including .httacess, login protection and reCAPTCHA)
• Community IP Blocklist of known attacker IP addresses
  All of these features are included in the Developer and Enterprise plans.
  Additionally, Developer and Enterprise plan users have access to custom protection rule creation, periodical security reports and report scheduling.

Personal (Free) plan users can enable these features on a per-site basis for $5 / site per month.

Important Resources

• Patchstack website
• Help Center
• Changelog
• Patchstack Vulnerability Database

See what our customers say about our paid plans:

• “An excellent and valuable service that’s backed by a company that contributes a significant number of resources and money directly back to the WordPress ecosystem.” – John Blackbourn
• “Patchstack is like CrowdStrike, but for websites!” – Ryan McCue, HumanMade
• “The service here is superb! And they are always right on it with the best solution to solve the problem or question at hand. The tool itself speaks for itself. I am very satisfied with this project and the service they offer.” – Daniel Canup
• “This is a security plugin everyone needs to install. The Patchstack team are incredible at what they do. We have been using them for years and have not been disappointed!” – @craniumstudio
• “We’ve been with Patchstack for a LONG time (even before they were Patchstack). It has always done its job seamlessly and without fail. Ongoing innovation and updates to the Patchstack product mean this plugin is a winner. 5 stars all the way.” – @guapx

(*Comparisons are made by evaluating paid versions.)

Sucuri vs. Patchstack
Wordfence vs. Patchstack
Malcare vs. Patchstack
Sitelock vs. Patchstack

Simply install the Patchstack plugin by searching for “Patchstack” on the plugin management page of WordPress, or install it manually by following these steps:

1. Download the plugin from the WordPress.org Patchstack plugin download page.
2. Unzip the .zip file.
3. Upload the entire patchstack directory to the /wp-content/plugins/ directory.
4. Activate Patchstack through the “Plugins” menu in WordPress.

1. 

   Patchstack security - be the first to receive notifications of new plugin vulnerabilities

2. 

   Patchstack security - automatic protection against ongoing attacks

3. 

   Patchstack security - level up your WordPress hardening and tweak the security rules

4. 

   Patchstack security - security analytics, detailed periodic reports and activity monitoring

To view the plugin changelog, go here.