Patchstack Developer is a paid WordPress security plan. It checks installed WordPress core, add-ons, and themes against a vulnerability database. When it detects a specific vulnerability in a add-on or theme, it can automatically deploy a targeted virtual patch, or vPatch, for that website. The firewall rule blocks exploit attempts without changing the vulnerable component’s code.

Detection and protection

Vulnerability detection for core, extensions, and themes is also available in the Personal (Free) plan. Developer adds automatic protection through vPatches for plugins and themes, with access to more than 12,000 individual protection rules.

The Patchstack App gives connected websites a central security overview. Developer includes logs and analytics, email and Slack alerts, snapshot PDF reports, and weekly or monthly PDF reports with scheduling.

Hardening and site controls

• Advanced hardening settings and WordPress-specific hardening rules
• Remote hardening settings, including .htaccess, login protection, and reCAPTCHA
• Two-factor authentication and CAPTCHA
• Community IP blocklist for known malicious IP addresses
• Advanced security settings
• Unlimited custom firewall rules and alert triggers
• Unlimited Patchstack App API usage

These controls let agencies, hosting companies, WooCommerce site owners, and other WordPress teams review vulnerabilities and configure protection for their websites. The plugin is designed for site owners who may not have advanced technical experience.

Setup and multisite use

Install the Patchstack plugin, register in the Patchstack App, add your site, and paste its API key into the plugin. Then review findings and configure alerts, reports, hardening, and custom rules in line with the site’s needs. Patchstack supports WordPress multisite: activate it per site, then add each subsite separately to the account. Each subsite uses one site slot.