Patchstack – WordPress & Plugins Security
by Patchstack · Security
Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core.
90 health vs 64 average across 997 Security plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Well optimized
Biggest win: Support resolution
To rank higher: Mark more forum threads resolved — the resolved ratio feeds the ranking.
Get the full rank-higher report →Daily downloads
Since 2022-10-05 · 1,421 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
53.5K
now · peak 53.3K
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Rating trend
Star average over time · dips mark rough releases
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Actively maintainedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
4
releases in the last 12 months
4mo ago
latest release · v2.3.6
47
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin · 96% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “50K+”. Our estimate pins where the real number sits.
Refined from the date this plugin crossed into its current band.
At the current install trend, crossing 60K+ in roughly 129 days.
Install history · since 2022-03-18 · 1,423 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.
Details
Recent reviews
All reviews on wp.org ↗- ★★★★★ Ideal Postcodes10mo ago
Originally this was a 1 star review but triage team turned it around. Patchstack published CVE-2025-57923 and did not respond for a couple weeks while we actively tried to respond to a purported vulnerability. However the Head of Threat Intelligence at Patchstack reached out to us directly. We were able to communicate directly, understand the underlying concerns and he helped us resolve this issue within hours. Very helpful. Triage team obviously doing their best. Much credit to them. This topic was modified 8 months, 4 weeks ago by Ideal Postcodes. This topic was modified 8 months, 4 weeks ago by Ideal Postcodes. Reason: Patchstack have since reached out to quickly resolve this issue This topic was modified 8 months, 4 weeks ago by Steven Stern (sterndata).
Read on wp.org ↗ - ★★★★★ robertozoll1.2y ago
Patchstack has been a great tool for keeping my WordPress sites secure. I really like the early vulnerability alerts and the virtual patching feature—it gives me peace of mind knowing that known issues are blocked even before plugins are officially updated. It’s lightweight, doesn’t slow down the site, and the dashboard makes it easy to monitor multiple installations. That said, it’s not a complete security suite—so I still use it alongside a firewall. But as a vulnerability monitor and patching layer, it works very well. Highly recommended.
Read on wp.org ↗ - ★★★★★ Playzare1.5y ago
Was talking to their AI support and it automatically switched to human who solved my issue by herself. Never saw this ! perfect support, perfect tool for security combined with CF
Read on wp.org ↗ - ★★★★★ Sculley1.6y ago
Patchstack is a must have for security. Their support is awesome too!
Read on wp.org ↗ - ★★★★★ John Blackbourn1.6y ago
An excellent and valuable service that’s backed by a company that contributes a significant amount of resources and money directly back to the WordPress ecosystem.
Read on wp.org ↗ - ★★★★★ Jeff Mankini1.9y ago
I’ve been using Patchstack for a while now, and the service has been absolutely outstanding. I recently had the chance to meet the team at WCUS Portland, and they were just as impressive. It’s clear they are genuinely passionate not only about their product but also about the community they serve. I’m really looking forward to seeing how Patchstack continues to evolve into something even more remarkable.
Read on wp.org ↗ - ★★★★★ diffler1.9y ago
Patchstack gives me 100% peace of mind. With virtual patches I don’t need to worry about plugin vulnerabilities of unupdated sites. Patchstack feels light. I previously used WordFence, which really bogged down my sites. I have switched to paid version of Patchstack because it’s a small price to pay for not having to worry about anything.
Read on wp.org ↗ - ★★★★★ AnnaVanessa1.9y ago
best security solution on the market with an amazing team. Our Crocoblock team is proud to use it and to be sure our plugins are secure! This topic was modified 1 year, 10 months ago by AnnaVanessa. This topic was modified 1 year, 10 months ago by AnnaVanessa.
Read on wp.org ↗
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Languages
via translate.wordpress.orgTranslated into 7 languages, 2 at 90% or more
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-07-10 40K+ → 50K+ up after 126 days in tier
- 2026-03-06 30K+ → 40K+ up after 251 days in tier
- 2025-06-28 20K+ → 30K+ up after 2 days in tier
- 2025-06-26 30K+ → 20K+ down after 1 days in tier
- 2025-06-25 20K+ → 30K+ up after 488 days in tier
- 2024-02-23 10K+ → 20K+ up after 413 days in tier
- 2023-01-06 9K+ → 10K+ up after 42 days in tier
- 2022-11-25 8K+ → 9K+ up
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
IP Geo Block 8K+ installs · 4.1★ · 3 shared tags D -
Security Ninja – WordPress Security & Firewall 7K+ installs · 4.6★ · 3 shared tags A -
Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 2 shared tags A
-
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 2 shared tags A -
Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention 1M+ installs · 4.8★ · 2 shared tags A -
Security Optimizer – The All-In-One Protection Plugin 1M+ installs · 4.5★ · 2 shared tags A
Embed this report card
Drop a live Pulse card for Patchstack – WordPress & Plugins Security into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/patchstack" width="480" height="300" style="border:0" loading="lazy" title="Patchstack – WordPress & Plugins Security — Plugin Pulse"></iframe> Patchstack – WordPress & Plugins Security: 50K+ active installs, 4.9★ (61 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/patchstack