Question 1

Can I get Patchstack elsewhere with a discount?

Accepted Answer

Patchstack partners with many hosting companies that offer vulnerability alerts and real-time protection. Please contact your hosting company's support to see if they offer Patchstack protection and if that option is more affordable for you.

Question 2

What is the difference between a WAF and RapidMitigate?

Accepted Answer

WAF stands for Web Application Firewall, which is a firewall that inspects web traffic and blocks malicious requests. WAFs typically run on the web server software itself, and have limited knowledge of the websites they are protecting. WAFs tend to include and run all firewall rules against all requests, even if it does not apply to the underlying software. RapidMitigate works a lot like a WAF: blocking known malicious requests but runs within the website itself. RapidMitigate goes a step further, and can take into context information that only the website (such as WordPress) itself is aware of, like user authorization, software versions, etc… Mitigation rules tend to be more efficient, and cause less resource usage in the website compared to a WAF because the only rules that are enabled are the ones applicable for each website.

Question 3

Why would a hacker target my websites?

Accepted Answer

Attackers automatically target all websites to build large bot nets to perform more complex attacks against lucrative targets. Even a basic website gives attackers one more node for future attacks. We believe better web security is a community effort.

Question 4

What if my website has already been hacked?

Accepted Answer

Since Patchstack is focused on prevention in the first place, it does not scan your files like a malware scanner and won't help you in finding existing malware on your website. We recommend reaching out to your hosting provider or a professional.

Question 5

Does Patchstack work with WooCommerce?

Accepted Answer

Yes, Patchstack also prevents malicious actors exploiting known vulnerabilities in WooCommerce and plugins for WooCommerce.

Question 6

I already use other security tools. Do I need Patchstack?

Accepted Answer

Regular firewalls aren't effective against vulnerability exploits, because such attacks rely on logic mistakes in your plugins and themes. Patchstack's real-time protection fills in gaps that other tools miss, so you get specialized protection at the most commonly compromised level. Reduce the high costs of downtime and hack cleanups. Stay proactive and protect your sites with Patchstack!

Question 7

What about backups and uptime monitoring?

Accepted Answer

We encourage pairing Patchstack with other security tools, such as WPVivid or UpdraftPlus for backups and WPUmbrella or ManageWP for uptime monitoring. You may also check with your hosting service provider whether they offer pluginless server-side backups.

Question 8

Will Patchstack slow down my websites?

Accepted Answer

Patchstack runs several tasks on each page load but based on tests from us and from our customers we have seen that Patchstack does not affect your website's performance in any significant or noticeable way. In fact, a test done by one of our users indicated that Patchstack is up to 10x lighter than competing security services.

Question 9

Why protect against vulnerabilities and how is it different than scanning for malware?

Accepted Answer

Malware is most commonly injected by exploiting security vulnerabilities. Patchstack detects those vulnerabilities and automatically applies highly targeted mitigation rules that provide highly targeted, lightweight and effective way to hold off attacks to prevent any malware to get inside. Malware scanners on the other hand scan for already injected malware which means the website has already been compromised and infected which also requires a thorough clean-up. While having regular malware scans is important to cover your back, it's always better to prevent malware infections in the first place.

Question 10

Will Patchstack plugin help my site pass PCI-DSS, SOC2, ISO 127001 or other security checks?

Accepted Answer

The Patchstack plugin can help, but patching is up to you. The plugin will inform you if your website(s) are running any known insecure components and allow you to be sure your sites are running secure versions before your test or auditing date.

Vulnerability management for WordPress agencies

Security shouldn't be an afterthought, it's a selling point

Minimize the exposure window and avoid downtime

Comply with emerging industry standards

A recurring revenue opportunity

Patchstack neutralizes vulnerabilities before they can be exploited

New proactive approach

Old reactive approach

Security finally meets simplicity

Protection modules make WordPress security easy

RapidMitigate

Hardening

IP Blocklist

Build your own workflow using API

Don't just take our word for it

Developer

What the FAQ