Today, we are super excited to launch the new version of the Patchstack mVDP platform, which now comes with an AI-based code review tool, team management features and a discussion board that helps plugin developers improve their code faster. With more and more software being generated by AI, we are witnessing a significant increase in […]
No one can do it alone and that’s nowhere quite as obvious as it is in open-source software. With different dependencies and whole ecosystems needing to work in perfect sync in order to stay secure, protecting supply chains is vital. In addition to our other initiatives, we’ve also participated in the Cloudfest 2025 Hackathon with […]
We are excited to announce that the entire Patchstack App is now accessible completely as an API and as of today – all Patchstack Developer accounts can use the API without any extra charge. With more than 100 endpoints to interact with, the possibilities are truly endless. This is an important step for us which […]
Our mission to provide the fastest mitigation to security vulnerabilities is core to our long-term vision of becoming a global cyber-security leader with the biggest impact on open-source security. Today, we are excited to finally reveal the next chapter of our journey. We truly believe that the only way to reach a dream so ambitious […]
We’re excited to announce the official launch of Patchstack Academy – your go-to platform for learning about ethical hacking and securing your code Why Patchstack Academy? When searching for WordPress security online, most results focus on securing websites or recommending plugins (like Patchstack!). However, resources for aspiring ethical hackers and developers seeking to enhance […]
Patchstack has been pioneering the WordPress bug bounty hunting scene for many years now. 6 years ago, we came up with an idea on how to make open-source bug bounty hunting cover even the smallest projects (regardless of whether they make money or not). This project was later renamed to Patchstack Red Team and then […]
Open Source Security Foundation (OpenSSF) continues to advance the cause of software security with a steadfast commitment to fostering collaboration within the open-source community. In a recent press release dated December 3, 2023, OpenSSF announced the addition of new members and the pivotal role they will play in guiding software security principles. Earlier this year, […]
Today, we’re excited to announce the next generation of Patchstack firewall engine. The new engine is engineered to provide the most efficient application layer protection possible, with even greater vulnerability coverage and industry-leading performance. Over 50% of all known WordPress-related (core, plugins, themes, etc.) security vulnerabilities in 2023 have been originally reported by Patchstack Alliance […]
Over the past 6 months, we’ve been building, testing and fine-tuning a new vulnerability scoring system called Patchstack Priority to provide a more accurate representation of the seriousness of security vulnerabilities. The goal? Help WordPress developers reduce alert fatigue and know what to patch first. We have carefully assigned the Patchstack Priority scores to all […]
We’re happy to announce a new strategic partnership with Cloudways. This week, Cloudways launched their vulnerability scanner powered by Patchstack’s database, giving their customers visibility into potential security issues with their WordPress core, plugin, and theme versions. In short, this means that more people will know whether they have hidden security risks on their websites. […]