Patchstack Developer

Patchstack Developer combines WordPress vulnerability detection with automatic protection for known extension and theme issues. The extension compares the versions of WordPress core, add-ons, and themes installed on a website against a vulnerability database. A finding identifies a known issue in installed software; the plugin does not perform external security checks.

Detection and protection

Detection covers WordPress core, extensions, and themes. When Patchstack identifies a specific vulnerability in a plugin or theme, Developer can deploy a targeted virtual patch, or vPatch, for that site. The firewall rule blocks exploit attempts without changing the vulnerable component’s code. The paid plan includes access to more than 12,000 protection rules. Detection of core vulnerabilities does not mean vPatches are available for core; the listed vPatches cover plugins and themes.

Vulnerability detection, email alerts, snapshot reports, and remote update management are also available through the Personal (Free) plan. Developer adds automatic vPatches and preventive controls for websites that need more ways to manage security.

Hardening and custom rules

• Advanced hardening settings and WordPress-specific hardening rules
• Remote hardening settings, including .htaccess, login protection, and reCAPTCHA
• Two-factor authentication and CAPTCHA
• Community IP blocklist for known malicious IP addresses
• Unlimited custom firewall rules and alert triggers

These settings let site owners tailor protection to their environment. Paid request filtering runs on page loads; the supplied product information reports minimal performance impact.

Alerts and oversight

The Patchstack App gives connected websites a central security overview. Developer includes logs and analytics, email and Slack alerts, snapshot PDF reports, unlimited App API usage, and weekly or monthly PDF reports with scheduling. Teams can review detected vulnerabilities and site activity, then use custom rules and alert triggers for site-specific events.

Agencies can oversee customer sites covered by WordPress care plans, while hosting companies can manage vulnerability protection across sites. WooCommerce site owners can use detection and targeted protection as part of their security process. The App also gives individual site owners a place to review alerts and reports.

Connect a site

Install the Patchstack plugin, register in the Patchstack App, add the site, and paste its API key into the plugin. Once connected, review the security overview and configure alerts, reports, hardening settings, and custom protection rules for the site.