Patchstack Developer is a paid WordPress security plan. The extension matches installed WordPress core, plugins, and themes against a vulnerability database; it does not perform external checks. The connected Patchstack App includes a central view of findings and connected sites.
Detection and plan coverage
Vulnerability detection covers WordPress core, add-ons, and themes. The Personal (Free) plan also includes detection, email alerts, remote update management, snapshot reports, and a dashboard for up to three websites. It can provide up to 48 hours of early warning about newly identified vulnerabilities, and automatic updates for vulnerable plugins are optional. The free plan does not include a firewall; Developer includes automatic virtual protection.
Targeted virtual patches
When Patchstack detects a specific vulnerability in a plugin or theme, the paid plan can deploy a targeted virtual patch, or vPatch, for that site. These firewall rules block exploit attempts without changing site code. The paid version includes access to more than 12,000 protection rules. vPatches cover plugins and themes; vulnerability detection also covers WordPress core. Keep vulnerable software updated while the vPatch blocks exploit attempts.
Hardening, alerts, and reports
Developer and Enterprise include advanced hardening options, WordPress-specific and remote hardening settings, two-factor authentication, CAPTCHA, a Community IP Blocklist, and advanced security settings. Remote settings include .htaccess, login protection, and reCAPTCHA.
- Unlimited custom firewall rules and alert triggers
- Email and Slack alerts
- Logs and analytics
- Snapshot PDF reports and weekly or monthly security reports with scheduling
- Unlimited Patchstack App API usage
Connect and monitor websites
Install the Patchstack plugin, register in the Patchstack App, add the site, and paste the API key into the plugin. Then review detected vulnerabilities and configure alerts, reports, hardening, and custom rules for the site. The App provides a central view for agencies monitoring client sites, hosting companies managing sites, WooCommerce operators, and individual site owners.
