Patchstack Developer for WordPress Security

Patchstack matches the WordPress core, add-ons, and themes installed on a site against its vulnerability database. This identifies known vulnerable versions; the Personal (Free) plan does not perform external checks. Its security research community can provide up to 48 hours of early warning about newly found vulnerabilities.

Review findings in the Patchstack App

The Personal (Free) plan includes vulnerability detection, email alerts, remote update management, and snapshot security reports, with a central dashboard for up to three websites. Automatic updates for vulnerable plugins are optional. These capabilities give website owners a place to review detected issues and manage updates.

How Developer applies vPatches

Patchstack Developer and Enterprise are paid plans that add automatic vulnerability protection. When a specific vulnerability is detected in a WordPress add-on or theme, Patchstack deploys a targeted virtual patch, or vPatch, for that site. These non-intrusive firewall rules are designed to block exploit attempts without changing the affected component’s code. The paid plans include access to more than 12,000 individual protection rules.

Hardening and custom rules

Developer and Enterprise also include advanced hardening settings, two-factor authentication, CAPTCHA, WordPress-specific hardening rules, a community IP blocklist for known malicious addresses, and advanced security settings. Remote hardening settings include .htaccess, login protection, and reCAPTCHA controls. Custom protection rules let teams adapt firewall behavior to site requirements.

• Unlimited custom firewall rules
• Unlimited custom alert triggers
• Email and Slack alerts
• Logs and analytics
• Snapshot PDF security reports
• Weekly or monthly PDF reports with scheduling
• Unlimited Patchstack App API usage

Monitor websites and review reports

Agencies can use the dashboard to oversee customer websites covered by care or maintenance plans. WooCommerce site owners can review vulnerabilities as part of protecting their stores, while hosting companies can manage protection across sites. The dashboard, alerts, and reports also give individual site owners a way to follow security findings without advanced technical knowledge.

Install and connect Patchstack

Install and activate the Patchstack extension in WordPress. Register in the Patchstack App, add your site, and paste the API key into the plugin to connect it. Then review the security overview and configure alerts, reports, hardening settings, and custom rules for the site. Use the App to review vulnerabilities, logs, analytics, and reports across connected sites.