Patchstack is changing their service to focus more on prevention. Beginning May 1st they plan to: 1) Discontinue the Incident Response service. 2) Change the settings controls so they will be read only on the site via the plugin, and you will change them on the central Patchstack dashboard. 3) Discontinue the Site Scanning feature that checks your sites and gave hardening suggestions.

Patchstack has released a new report on the state of WordPress security. There is a lot of interest and the report is a bit different that previous ones in that it talks about some of the exploits as examples in different categories.

Patchstack created a page summarizing WordPress vulnerability statistics.

I was looking at Jerry Gamblin’s compiled stats about vulnerability reporting in 2023 across all software (the report is not WP specific). It was interesting to note that PatchStack was the top reporting agency. Congrats to Oliver Sild and his team.

Congrats to Patchstack – now a member of the Open Source Security Foundation.

Patchstack released a major update today with performance enhancements, better hardening, simplified rules module, and more.

Patchstack has a new feature, Patchstack Priority. What I gather from the announcement is that it is another rating system in addition to the CVSS score. The Patchstack Priority is meant to indicate how likely the immediate threat is and how quickly you should respond.

I always update vulnerable plugins immediately, so I’m not sure how helpful this will be for me, though it is good to know if there are active exploits.

Patchstack announces new plans and pricing. They have reimagined their offering and introduced a new Developer plan. They also are adding new reports.