Changeset 3356031
- Timestamp:
- 09/04/2025 12:02:52 PM (6 months ago)
- Location:
- patchstack
- Files:
-
- 4 added
- 7 deleted
- 6 edited
-
assets/screenshot-1.jpg (deleted)
-
assets/screenshot-1.png (added)
-
assets/screenshot-2.jpg (deleted)
-
assets/screenshot-2.png (added)
-
assets/screenshot-3.jpg (deleted)
-
assets/screenshot-3.png (added)
-
assets/screenshot-4.jpg (deleted)
-
assets/screenshot-4.png (added)
-
assets/screenshot-5.jpg (deleted)
-
trunk/includes/admin/options.php (modified) (2 diffs)
-
trunk/includes/hardening.php (modified) (2 diffs)
-
trunk/includes/login.php (modified) (2 diffs)
-
trunk/includes/views/pages/settings.php (modified) (1 diff)
-
trunk/lib/GeoLite2-Country.mmdb (deleted)
-
trunk/lib/geoip2-php (deleted)
-
trunk/patchstack.php (modified) (2 diffs)
-
trunk/readme.txt (modified) (1 diff)
Legend:
- Unmodified
- Added
- Removed
-
patchstack/trunk/includes/admin/options.php
r3255403 r3356031 82 82 'patchstack_add_security_headers' => ['default' => 1, 'autoload' => 'yes'], 83 83 'patchstack_ip_block_list' => ['default' => '', 'autoload' => 'yes'], 84 'patchstack_geo_block_enabled' => ['default' => 0, 'autoload' => 'yes'],85 'patchstack_geo_block_inverse' => ['default' => 0, 'autoload' => 'yes'],86 'patchstack_geo_block_countries' => ['default' => [], 'autoload' => 'yes'],87 84 88 85 // Login and firewall brute force options. … … 94 91 'patchstack_autoblock_minutes' => ['default' => 1, 'autoload' => 'yes'], 95 92 'patchstack_autoblock_blocktime' => ['default' => 1, 'autoload' => 'yes'], 96 'patchstack_login_time_block' => ['default' => 0, 'autoload' => 'no'],97 'patchstack_login_time_start' => ['default' => '00:00', 'autoload' => 'no'],98 'patchstack_login_time_end' => ['default' => '23:59', 'autoload' => 'no'],99 93 'patchstack_login_2fa' => ['default' => 0, 'autoload' => 'yes'], 100 94 'patchstack_login_whitelist' => ['default' => '', 'autoload' => 'no'], -
patchstack/trunk/includes/hardening.php
r3255403 r3356031 35 35 // Set security headers 36 36 add_filter( 'wp_headers', [ $this, 'set_security_headers' ], 10, 1 ); 37 38 // When country blocking is set.39 if ( $this->get_option( 'patchstack_geo_block_enabled', false ) && ! empty( $this->get_option( 'patchstack_geo_block_countries', [] ) ) ) {40 add_action( 'init', array( $this, 'geo_block_check' ), ~PHP_INT_MAX );41 }42 37 43 38 // Apply comment captcha? … … 136 131 // Resend the sofware data to the API. 137 132 do_action( 'patchstack_send_software_data' ); 138 }139 140 /**141 * Determine the country of the user and if we should block the user.142 *143 * @return void144 */145 public function geo_block_check() {146 $countries = $this->get_option( 'patchstack_geo_block_countries', [] );147 $ip = $this->get_ip();148 149 // Don't block Patchstack.150 if ( ( isset( $_POST['patchstack_secret'] ) && $this->plugin->listener->verifyToken( $_POST['patchstack_secret'] ) ) || isset( $_POST['patchstack_ott_action'] )) {151 152 // OTT action.153 if ( isset( $_POST['patchstack_ott_action'] ) ) {154 $ott = get_option( 'patchstack_ott_action', '' );155 if ( ! empty( $ott ) && hash_equals( $ott, $_POST['patchstack_ott_action'] ) ) {156 return;157 }158 } else {159 return;160 }161 }162 163 // Load the required libraries.164 try {165 require_once __DIR__ . '/../lib/geoip2-php/autoload.php';166 $reader = new GeoIp2\Database\Reader( __DIR__ . '/../lib/GeoLite2-Country.mmdb' );167 $record = $reader->country( $ip );168 169 // Determine if we want to do an inverse check or not.170 $match = in_array( $record->country->isoCode, $countries );171 $match = $this->get_option( 'patchstack_geo_block_inverse', false ) ? ! $match : $match;172 173 // Check if there's a match.174 if ( $match ) {175 $this->plugin->firewall_base->display_error_page( 23 );176 }177 } catch ( \Exception $e ) {178 }179 133 } 180 134 -
patchstack/trunk/includes/login.php
r3262905 r3356031 33 33 add_action( 'login_init', [ $this, 'add_captcha' ] ); 34 34 add_action( 'login_init', [ $this, 'check_ipban' ] ); 35 add_action( 'login_init', [ $this, 'check_logonhours' ] );36 35 add_action( 'login_head', [ $this, 'add_captcha' ] ); 37 36 add_action( 'login_enqueue_scripts', [ $this, 'login_enqueue_scripts' ], 1 ); … … 284 283 if ( $num >= $this->get_option( 'patchstack_anti_bruteforce_attempts', 10 ) ) { 285 284 $this->plugin->firewall_base->display_error_page( 24 ); 286 }287 }288 289 /**290 * If logon hours are set, check the current time and allow or disallow the user291 * to login depending on the settings.292 *293 * @return void294 */295 public function check_logonhours() {296 if ( ! $this->get_option( 'patchstack_login_time_block', 0 ) || is_user_logged_in() || $this->get_option( 'patchstack_login_time_start', '00:00' ) == $this->get_option( 'patchstack_login_time_end', '23:59' ) ) {297 return;298 }299 $block = true;300 301 // Current time.302 $hour = current_time( 'G' );303 $min = current_time( 'i' );304 $stamp_current = current_time( 'U' );305 306 // Get time start.307 $start = explode( ':', str_replace( '00', '0', $this->get_option( 'patchstack_login_time_start', '00:00' ) ) );308 if ( count( $start ) != 2 ) {309 return;310 }311 $stamp_start = strtotime( current_time( 'Y-m-d' ) . ' ' . $this->get_option( 'patchstack_login_time_start', '00:00' ) . ':00' );312 $start[0] = (int) $start[0];313 $start[1] = (int) $start[1];314 315 // Get time end.316 $end = explode( ':', str_replace( '00', '0', $this->get_option( 'patchstack_login_time_end', '23:59' ) ) );317 if ( count( $end ) != 2 ) {318 return;319 }320 $stamp_end = strtotime( current_time( 'Y-m-d' ) . ' ' . $this->get_option( 'patchstack_login_time_end', '00:00' ) . ':00' );321 $end[0] = (int) $end[0];322 $end[1] = (int) $end[1];323 324 // If begin time is earlier than end time.325 if ( $start[0] <= $end[0] && $stamp_current >= $stamp_start && $stamp_current <= $stamp_end ) {326 $block = false;327 }328 329 // If begin time is later than end time.330 if ( $start[0] > $end[0] && ( $hour >= $start[0] || $hour <= $end[0] ) ) {331 $block = false;332 333 if ( ( $hour == $start[0] && $min < $start[1] ) || ( $hour == $end[0] && $min > $end[1] ) ) {334 $block = true;335 }336 }337 338 // Block the user?339 if ( $block ) {340 wp_die( esc_attr__( 'Access to the login page has been restricted due to set logon hours.', 'patchstack' ), esc_attr__( 'Login Disallowed', 'patchstack' ) );341 285 } 342 286 } -
patchstack/trunk/includes/views/pages/settings.php
r3114829 r3356031 33 33 </div> 34 34 </div> 35 36 <script>37 tippy('[data-tippy-content]', {38 arrow: false,39 });40 </script> -
patchstack/trunk/patchstack.php
r3262905 r3356031 5 5 * Author URI: https://patchstack.com/?utm_medium=wp&utm_source=dashboard&utm_campaign=patchstack%20plugin 6 6 * Description: Patchstack identifies security vulnerabilities in WordPress plugins, themes, and core. 7 * Version: 2.3. 27 * Version: 2.3.3 8 8 * Author: Patchstack 9 9 * License: GPLv3 … … 60 60 * @var string 61 61 */ 62 const VERSION = '2.3. 2';62 const VERSION = '2.3.3'; 63 63 64 64 /** -
patchstack/trunk/readme.txt
r3263366 r3356031 5 5 License URI: https://www.gnu.org/licenses/gpl-3.0.html 6 6 Requires at least: 4.4 7 Tested up to: 6. 78 Stable tag: 2.3. 27 Tested up to: 6.8 8 Stable tag: 2.3.3 9 9 Requires PHP: 5.6 10 10 11 Patchstack automatically identifies &mitigates security vulnerabilities in WordPress plugins, themes, and core.11 Patchstack automatically identifies and mitigates security vulnerabilities in WordPress plugins, themes, and core. 12 12 13 13 == Description == 14 14 15 Patchstack is a powerful tool that helps to identify security vulnerabilities within all your websites' plugins, themes, and WordPress core. 16 Patchstack is powered by the WordPress ecosystem's most active community of ethical hackers. 17 Patchstack is trusted by the leading WordPress experts such as: Pagely, Cloudways, GridPane, Plesk, and others! 15 Patchstack is a powerful tool that helps identify security vulnerabilities within your websites' plugins, themes, and WordPress core. It is powered by the WordPress ecosystem’s most active community of ethical hackers. Patchstack is trusted by leading WordPress experts such as Pagely, Cloudways, GridPane, Plesk, and others! 18 16 19 https://www.youtube.com/watch?v= LL3Yy15rJ3g17 https://www.youtube.com/watch?v=z2nuYpg26Vc 20 18 21 ### Why do I need Patchstack Community (*Free) version?* 22 * Be the first to know about new vulnerabilities! 23 * Save time by monitoring all your websites from a single dashboard. 19 Patchstack is a security plugin for WordPress that finds WP core, plugin and theme vulnerabilities in your websites. 20 21 The free version includes up to 48-hour early warning for new vulnerabilities found by our security research community. It also allows you to automatically update vulnerable software, manage updates remotely, and get snapshot reports on your sites’ security status. 22 23 The paid version includes automatic vulnerability protection. Patchstack deploys highly targeted rules on a per-site basis, only when a specific vulnerability is detected on a site. 24 25 This prevents vulnerable components from being exploited without modifying website code, or impacting site performance or functionality. Patchstack’s paid version includes access to 12,000+ individual protection rules (vPatches). 26 27 Patchstack paid version also includes other preventive security features, such as 2 factor authentication, WordPress specific hardening rules, a Community IP blocklist for malicious IP addresses, advanced security settings, and custom protection rules. 28 29 ### Post-hack cleanups vs attack prevention in WordPress security 30 Unlike the standard approach to WordPress security (malware scanning and infection cleanups), Patchstack is focused on preventing infections in the first place. 31 32 Thanks to its big WordPress security research community and partnerships with nearly one thousand plugin vendors and developers, Patchstack is regularly among the first to identify new vulnerabilities. 33 34 ### Who is Patchstack's WordPress security plugin for? 35 Patchstack’s vulnerability management works extremely well for: 36 37 * Agencies with WordPress care/maintenance plans for their customers’ websites 38 * WooCommerce websites to protect their revenue and customers from attacks 39 * Hosting companies that want to deliver highly targeted vulnerability protection easily and at scale 40 Website owners 41 42 You don’t have to be highly technical to use it. Install the plugin, connect it with the Patchstack App, and stay safe! 43 44 ### What features are included in the Patchstack Personal (Free) plan? 45 Patchstack’s Personal plan is a free security service for WordPress that lets you find and manage vulnerabilities in your websites. It includes access to a central security dashboard via the Patchstack web App for more visibility and control over your sites’ security: 46 47 * Be the first to know about new vulnerabilities. 24 48 * Receive notifications if any installed plugins or themes have security issues. 25 * Get simple actionable suggestions to secure your websites.26 * Spend fewer resources fixing WordPress security issues (avoid expensive clean-ups).27 * Worry less about your website's security and focus on your work.28 29 ### What does Patchstack Community (*Free) version include?*30 **Detect security issues before hackers take over your website:**31 32 49 * Detect the latest security vulnerabilities in WordPress plugins. 33 50 * Detect the latest security vulnerabilities in WordPress themes. 34 51 * Detect the latest security vulnerabilities in WordPress core. 35 52 * Receive real-time alerts via email if any security vulnerabilities are found. 36 * Have a central security dashboard for up to 10 (upgradable to 50) websites (via the Patchstack App). 53 * Manage core, plugin and theme updates from a single dashboard. 54 * [Optional] Enable automatic updates for vulnerable plugins only. 55 * Generate snapshot reports about the security status of your website. 56 57 ### What features do Patchstack paid subscriptions have? 58 Patchstack’s paid subscriptions include automatic protection for WordPress vulnerabilities, as well as other protection modules. 59 60 * Virtual patching to prevent vulnerable components from being exploited 61 * Advanced hardening module for added WordPress security 62 * Remote hardening settings (including .httacess, login protection and reCAPTCHA) 63 * Community IP Blocklist of known attacker IP addresses 64 All of these features are included in the Developer and Enterprise plans. 65 Additionally, Developer and Enterprise plan users have access to custom protection rule creation, periodical security reports and report scheduling. 66 67 Personal (Free) plan users can enable these features on a per-site basis for $5 / site per month. 37 68 38 69 **Important Resources** 39 70 40 * [Support](https://docs.patchstack.com) 41 * [Changelog](https://docs.patchstack.com/changelog/plugin-changelog/) 42 * [Facebook Community](https://www.facebook.com/groups/patchstackcommunity) 43 * [Vulnerability news blog post](https://patchstack.com/articles/wordpress-vulnerability) 44 * [Patchstack vulnerability database](https://patchstack.com/database) 71 * [Patchstack website](https://patchstack.com) 72 * [Help Center](https://docs.patchstack.com) 73 * [Changelog](https://docs.patchstack.com/patchstack-plugin/changelog/) 74 * [Patchstack Vulnerability Database](https://patchstack.com/database) 45 75 46 76 **See what our customers say about our paid plans:** 47 77 48 * "Patchstack is awesome. All of my sites are protected by Patchstack and none have ever been hacked. High recommended." - Jose Gil (August 2021) 49 * "The only WAF I trust. They are way ahead of the curve providing firewall security for WordPress websites." - Mark Werle (August 2021) 50 * "Love the product! Best decision I made regarding security on my websites!" - Ben Poston (August 2021) 51 * "The service here is superb! And they always are right on it with the best solution to solve the problem or question at hand. The tool itself is, well, it speaks for itself. I am very satisfied with this project and the service they offer." - Daniel Canup (March 2021) 78 * "An excellent and valuable service that’s backed by a company that contributes a significant number of resources and money directly back to the WordPress ecosystem." – John Blackbourn 79 * "Patchstack is like CrowdStrike, but for websites!" – Ryan McCue, HumanMade 80 * "The service here is superb! And they are always right on it with the best solution to solve the problem or question at hand. The tool itself speaks for itself. I am very satisfied with this project and the service they offer." – Daniel Canup 81 * "This is a security plugin everyone needs to install. The Patchstack team are incredible at what they do. We have been using them for years and have not been disappointed!" – @craniumstudio 82 * "We’ve been with Patchstack for a LONG time (even before they were Patchstack). It has always done its job seamlessly and without fail. Ongoing innovation and updates to the Patchstack product mean this plugin is a winner. 5 stars all the way." – @guapx 52 83 53 (*Comparisons are done by comparing paid versions)84 (*Comparisons are made by evaluating paid versions.) 54 85 55 Sucuri vs. Patchstack [https://patchstack.com/sucuri-alternative/](https://patchstack.com/sucuri-alternative/) 56 Wordfence vs. Patchstack [https://patchstack.com/wordfence-alternative/](https://patchstack.com/wordfence-alternative/) 57 Malcare vs. Patchstack [https://patchstack.com/malcare-alternative/](https://patchstack.com/malcare-alternative/) 58 Sitelock vs. Patchstack [https://patchstack.com/sitelock-alternative/](https://patchstack.com/sitelock-alternative/)86 [Sucuri vs. Patchstack](https://patchstack.com/sucuri-alternative/) 87 [Wordfence vs. Patchstack](https://patchstack.com/wordfence-alternative/) 88 [Malcare vs. Patchstack](https://patchstack.com/malcare-alternative/) 89 [Sitelock vs. Patchstack](https://patchstack.com/sitelock-alternative/) 59 90 60 91 == Installation == 61 92 62 Simply install the Patchstack plugin by searching for "Patchstack" on the plugin management page of WordPress or install the plugin manually by following the steps:93 Simply install the Patchstack plugin by searching for "Patchstack" on the plugin management page of WordPress, or install it manually by following these steps: 63 94 64 95 1. Download the plugin from the WordPress.org Patchstack plugin download page. 65 2. Unzip the .zipfile.96 2. Unzip the `.zip` file. 66 97 3. Upload the entire `patchstack` directory to the `/wp-content/plugins/` directory. 67 4. Activate Patchstack through the 'Plugins' menu in WordPress and enter your API key.98 4. Activate Patchstack through the "Plugins" menu in WordPress. 68 99 69 100 == Frequently Asked Questions == 70 101 71 102 = What makes plugin vulnerabilities so dangerous? = 72 A worrisome website hacking statistic is that well over 90% of WordPress vulnerabilities are related to plugins or themes. One report found that as much as 98% of WordPress vulnerabilities are due to plugins while another study reported that 95% of vulnerabilities were because of plugins and themes.73 To be secure, you should always keep WordPress plugins, themes, and core updated and monitored. Ensure you are always aware of the plugins you’re using on your websites and always remove the ones you are not using.74 When it comes to WordPress security plugins, we first recommend you get a better understanding of the WordPress security ecosystem and how they work.75 Find one that can offer [vPatching](https://patchstack.com/articles/virtual-patching) ([check out Patchstack's features](https://patchstack.com/pricing)).103 A worrisome website hacking statistic is that well over 90% of WordPress vulnerabilities are related to plugins or themes. One report found that up to 98% of WordPress vulnerabilities are due to plugins, while another study reported that 95% were caused by plugins and themes. 104 To stay secure, always keep your WordPress plugins, themes, and core updated and monitored. Be aware of which plugins you’re using and remove any that are no longer needed. 105 When choosing a WordPress security plugin, it's important to understand how the WordPress security ecosystem works. 106 Look for a tool that offers [vPatching](https://patchstack.com/articles/virtual-patching) (see [Patchstack’s features](https://patchstack.com/pricing)). 76 107 77 = How does Patchstack Community (free) version protect sites from vulnerabilities? =78 Patchstack Community (free) version will let you know if you have any vulnerabilities present in the plugins, themes, or WordPress core version that are installed on your site.79 By staying informed and receiving alerts about vulnerabilities, you can reduce the resources spent on fixing WordPress security issues, avoiding expensive clean-ups in the long run.108 = How does the Patchstack Personal (Free) plan protect sites from vulnerabilities? = 109 The Patchstack Personal (Free) plan alerts you if vulnerabilities are present in the plugins, themes, or WordPress core installed on your site. 110 By staying informed, you can reduce the time and resources spent fixing WordPress security issues and avoid costly clean-ups. 80 111 81 = What features does Patchstack Community (free) version include? =82 With Patchstack you will be able to **eliminate security issues before hackers take over your website. You can detect the latest security vulnerabilities in WordPress plugins, themes, and core. You will receive real-time alerts to email or Slack if any security vulnerabilities are found and have a central security overview for up to 10 websites in the Patchstack App. 83 Optionally you can also enable vPatch protection against vulnerabilities for $5/month for individual sites. You can also increase your free plan site limit to 50 sites with a volume-upgrade add-on.112 = What features does the Patchstack Personal (Free) plan include? = 113 You can detect security vulnerabilities in your WordPress plugins, themes, and core. You’ll receive email notifications if vulnerabilities are found, and access a central security overview for up to 3 websites using the Patchstack App. 114 You can optionally enable vPatching for individual sites for $5/month. 84 115 85 = What features does Patchstack Developer (paid) version include? = 86 With Patchstack Developer version you can identify plugin vulnerabilities, receive automatic vPatches to these vulnerabilities, and get detailed reports on your security status. You also get access to additional hardening options, like advanced custom rules and the Community IP blocklist. 116 = What features does the Patchstack Developer (Paid) plan include? = 117 With the Patchstack Developer plan, you can protect your sites against known plugin and theme vulnerabilities through automatic virtual patches — non-intrusive firewall rules that block exploit attempts. 118 You also gain access to advanced hardening options, 2FA, CAPTCHA, security reports, and various alert types. 87 119 88 = Included features are: =120 = Included features: = 89 121 * Plugin vulnerability detection (also included in free) 90 122 * Theme vulnerability detection (also included in free) 91 123 * WordPress core vulnerability detection (also included in free) 124 * Logs and analytics (also included in free) 125 * Snapshot PDF security reports (also included in free) 126 * Email alerts (also included in free) 92 127 * vPatches for WordPress plugins 93 128 * vPatches for WordPress themes 94 * 0-day protection (OWASP top 10)95 129 * Unlimited custom firewall rules 96 * Logs and analytics97 130 * Unlimited custom alert triggers 98 * Weekly /monthly PDF reports99 * Alerts to Slack100 * Alerts to email (also included in free)131 * Weekly/monthly PDF reports 132 * Slack alerts 133 * Unlimited [Patchstack App API usage](https://docs.patchstack.com/api-solutions/app-api/patchstack-app-api/) 101 134 102 = What checks does Patchstack Community (free) version perform on your website? =103 We do not perform any external checks on your website. We do however match the plugins, themes, and WordPress core you have installed on your website with our vulnerability database to determine if there is a known vulnerability.135 = What checks does the Patchstack Personal (Free) plan perform? = 136 No external checks are performed. The plugin matches the installed plugins, themes, and WordPress core on your site with our [vulnerability database](https://patchstack.com/database/) to identify vulnerable versions. 104 137 105 = How will I be alerted if I have a vulnerability on my site? =106 With the P atchstack Community (free) version, you can set up alerts using email (Slack notifications are available in the Developer plan).138 = How will I be alerted about a new vulnerability? = 139 With the Personal (Free) plan, you’ll receive alerts via email. Slack alerts are available in the paid Developer plan. 107 140 108 = Does Patchstack conflict with any other security plugins? = 109 We have not had issues with Patchstack conflicting with other security services, but we do recommend using as few different tools on your WordPress site as possible. Avoid enabling similar features if using another security plugin to prevent potential site-breaking issues. If you have any issues with other security tools, please contact our support so we could investigate the issue. 141 = Does Patchstack conflict with other security plugins? = 142 We have not encountered any conflicts. However, we recommend using as few security plugins as possible and avoiding overlapping features to prevent potential issues. 143 If you encounter problems, contact our support team for assistance. 110 144 111 = Are any logs stored in my database? = 112 We do not store any logs in your database or your filesystem on the Community (free) version of Patchstack. 113 114 = Does the Community (free) version plugin include a firewall? = 115 Patchstack free version does not include a firewall, the free version is there to let you know if you have any vulnerabilities present on your website. 145 = Does the Personal (Free) plan include a firewall? = 146 No, the free version does not include a firewall. It focuses on vulnerability detection and notifications. 116 147 117 148 = Will Patchstack slow down my website? = 118 The free version of Patchstack does not run anything aside from scheduled tasks on your website, so there will be no noticeable difference. The paid version does run several tasks on each page load but based on tests from us and from our customers we have seen that Patchstack does not affect your website's performance in any significant or noticeable way. 149 The free version only runs scheduled tasks, with no noticeable impact on your site speed or server load. 150 The paid version runs tasks on each page load to filter traffic, but our tests and customer feedback confirm minimal performance impact. 119 151 120 = Does Patchstack work on a multisite environment? = 121 Once you install the plugin on a multisite installation, you will see a page where you can activate Patchstack on the sites that are available on the multisite installation. 122 Each site will be added to the Patchstack app individually and will take up a slot on your account. 152 = Does Patchstack work on multisite? = 153 Yes. After installation, you can activate Patchstack per site within the network. Each subsite must be added individually to your Patchstack account and will take one site slot. 123 154 124 155 = Where can I learn more about Patchstack? = 125 You can learn more about Patchstack at the Patchstack website and blog. 126 See more here: [https://patchstack.com/](https://patchstack.com/) 156 Visit our [website](https://patchstack.com) and [blog](https://patchstack.com/blog/) for more information. 127 157 128 = What support options are available with Patchstack? = 129 Patchstack offers chat support at [patchstack.com](https://patchstack.com) in addition to support articles available on the support page. To contact chat support, open [patchstack.com](https://patchstack.com) and find the green chat bubble at the bottom right corner of your screen (note that some adblockers and privacy extensions can block this, so you might have to whitelist the Patchstack site). 158 = What support options are available? = 159 Patchstack provides chat support via [patchstack.com](https://patchstack.com) and documentation through our [Help Center](https://docs.patchstack.com). 160 To access chat support, click the green chat bubble in the bottom right corner (note: some ad blockers may hide this). 130 161 131 = How long does the Patchstack setup take? = 132 Setting up Patchstack takes no more than a few minutes. 162 = How long does it take to set up Patchstack? = 163 Setup takes just a few minutes. Install the plugin, register at [Patchstack App](https://app.patchstack.com/register), add your site, and paste the API key into the plugin. 164 See our [Getting Started guide](https://docs.patchstack.com/getting-started/start-using-patchstack/) for help. 133 165 134 = How do I upgrade from a Community (free) version to the Developer version? =135 You can upgrade from free to a paid version on your dashboard at the Patchstack App. Just log in at [app.patchstack.com/login](http://app.patchstack.com/login) or directly go to [app.patchstack.com/setup](http://app.patchstack.com/setup) to set up a plan.166 = How do I upgrade from the Personal (Free) plan to the Developer plan? = 167 Upgrade through your dashboard at the [Patchstack App](https://app.patchstack.com/login) or directly at [app.patchstack.com/setup](https://app.patchstack.com/setup). 136 168 137 169 = Do I need to pay for support? = 138 No, support from the Patchstack team is free. However, for free version users, replies may take up to 1-2 business days. Patchstack paid version users will receive an answer from the support within 24 hours.170 No, support is free. However, free plan users may receive replies within 1 business day, while paid users typically get responses in under 30 minutes. 139 171 140 172 = What information does Patchstack collect? = 141 We take your privacy very seriously. After activating Patchstack, it will store some information such as the software installed on your site. Please see our Terms & Conditions, Privacy Policy, and DPA for more information. 173 We take privacy seriously. We sync and store data such as your domains, installed software, and activity logs. 174 For details, see our [Terms & Conditions](https://patchstack.com/terms-and-conditions/), [Privacy Policy](https://patchstack.com/privacy-policy/), and [DPA](https://patchstack.com/data-processing-agreement-dpa/). 142 175 143 = Where can I find PatchstackTerms & Conditions, Privacy Policy, and DPA? =144 Terms & Conditions: [https://patchstack.com/terms-and-conditions/](https://patchstack.com/terms-and-conditions/) 145 Privacy Policy: [https://patchstack.com/privacy-policy/](https://patchstack.com/privacy-policy/) 146 Data Processing Agreement (DPA): [https://patchstack.com/data-processing-agreement-dpa/](https://patchstack.com/data-processing-agreement-dpa/)176 = Where can I find the Terms & Conditions, Privacy Policy, and DPA? = 177 * Terms & Conditions: [patchstack.com/terms-and-conditions](https://patchstack.com/terms-and-conditions/) 178 * Privacy Policy: [patchstack.com/privacy-policy](https://patchstack.com/privacy-policy/) 179 * DPA: [patchstack.com/data-processing-agreement-dpa](https://patchstack.com/data-processing-agreement-dpa/) 147 180 148 = How can I join the Patchstack Facebook community? = 149 You can join the Patchstack Facebook community here: [https://www.facebook.com/groups/patchstackcommunity](https://www.facebook.com/groups/patchstackcommunity) 150 151 = What steps should I take to have my WordPress plugin undergo a security audit with Patchstack? = 152 See more about Patchstack security audits here: [https://patchstack.com/auditing/](https://patchstack.com/auditing/). You can also submit your plugin or theme to the [Patchstack mVDP (Managed Vulnerability Disclosure Program)](https://patchstack.com/for-plugins/). 181 = How can I get a WordPress plugin security audit from Patchstack? = 182 We offer an AI-powered code review tool for plugin audits. Start by joining our [mVDP program](https://patchstack.com/for-plugins). 183 You can also request a manual audit here: [patchstack.com/auditing](https://patchstack.com/auditing/). 153 184 154 185 = Where do I report security bugs? = 155 You can report any security bugs found in the source code of this plugin through the [Patchstack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/patchstack). The Patchstack team will assist youwith verification and CVE assignment.186 Report security bugs through the [Patchstack Vulnerability Disclosure Program](https://patchstack.com/database/vdp/patchstack). Our team will assist with verification and CVE assignment. 156 187 157 188 == Screenshots == 158 189 159 1. Patchstack App Dashboard 160 2. Patchstack App Alerts Overview 161 3. Patchstack App Site Hardening 162 4. Patchstack App Firewall Overview 163 5. Patchstack App Components Overview 190 1. Patchstack security - be the first to receive notifications of new plugin vulnerabilities 191 2. Patchstack security - automatic protection against ongoing attacks 192 3. Patchstack security - level up your WordPress hardening and tweak the security rules 193 4. Patchstack security - security analytics, detailed periodic reports and activity monitoring 164 194 165 195 == Changelog == 166 196 167 To view the changelog of the Patchstack plugin, please go to [here](https://docs.patchstack.com/changelog/plugin-changelog/).197 To view the plugin changelog, go [here](https://docs.patchstack.com/patchstack-plugin/changelog/).
Note: See TracChangeset
for help on using the changeset viewer.