Patchstack protects sites against known vulnerabilities in plugins and themes, including the ones that have no patch yet. It deploys narrow, targeted mitigation rules rather than a broad firewall, so legitimate traffic is left alone.
- Prevents up to 74% more vulnerabilities from being exploited than leading web application firewalls
- Around a third of vulnerabilities in the WordPress ecosystem never receive a patch at all, and these are covered
- Over 12,000 targeted mitigation rules, the largest set on the market
- Mitigation available up to 48 hours ahead of public disclosure, as the leading handler of vulnerability intelligence
- No code changes, no false positives and no tooling conflicts, so sites do not break
- Helps meet PCI-DSS 4.0 requirements, with SOC 2 and ISO 27001 certification behind it
Patchstack also runs the managed vulnerability disclosure programme that every product shipping code on Pressing Forward is required to have, so vendors listing with us will already know the name.