77
Patchstack – WordPress & Plugins Security
It patches holes while you sleep without slowing down your site.
GrowingReview burst
77/100
Users value the lightweight performance and virtual patching. Some reviews seem thin but the core utility is real.
Active installs
~45,000
our estimate · wp.org shows 40k+
Rating
4.9★
61 ratings
Trend · vs a year ago
+93%
Growing fast
222 → 429 installs/day
Warnings
- Reviews concentrated in a single month — usually a marketing push or paid wave.
What to watch out for
- MAJOR54% of reviews in one month (2024-10-12)
Downloads over time
real new installs per day · release spikes shown separately from the trend2025-04-302025-08-082025-11-162026-02-232026-06-03
organicrelease spikerelease tailorganic trend · 14d rolling median
Growing fast · +93% in the last year
222/day a year ago→429/day today
Reviews
what people actually sayPatchstack is a well-regarded WordPress security plugin with a loyal, long-term user base that praises its lightweight performance and virtual patching, though its Activity dashboard has been noted as confusing and lacking detail.
What people like
- +Praised for not slowing down sites, in contrast to heavier alternatives like Wordfence×3
- +Virtual patching provides protection for vulnerable plugins without requiring immediate updates×2
- +Support team is responsive and effective, including seamless escalation from AI to human agents×5
- +Easy to set up and configure, including on multisite environments×3
- +Dashboard is helpful for identifying and prioritizing security issues×2
- +Pricing is considered reasonable and developer/agency-friendly
- +Long-term users report sustained satisfaction and no security incidents over multiple years×3
Common complaints
- −The Activity dashboard in the Patchstack UI is described as confusing and lacking information
- −Admin role permissions for features like reCAPTCHA are limited, with no option to delegate to other admin roles
- −CVE publication without timely communication left at least one plugin developer unable to respond for weeks
Review trustMostly organic
- 4.83★Verified rating — holds steady vs the raw 4.90★
- 12%One-shot reviewers — most reviewers are active community members
- past spikeReview timing — up to 54% of all reviews landed in a single month
Reviews per month · 5★ vs lower
2023-07-202025-01-102026-06-04
5★ reviews1–4★ reviews
All-time ratings · 61 total
Latest reviews · 61 analyzed
- 2025-10-23★★★★★Helpful Outreach from TriageIdeal Postcodes
- 2025-07-15★★★★★Smart extra layer of protection for WordPressrobertozoll
- 2025-02-14★★★★★Best supportPlayzare
- 2025-01-30★★★★★Plugin and support is awesome!Sculley
- 2025-01-30★★★★★Excellent serviceJohn Blackbourn
- 2024-10-09★★★★★A must have for every WP site ownerdddzh1-shot
- 2024-10-09★★★★★cool toolthomasoman1001
- 2024-10-09★★★★★An absolute must have!thegildedprinter1-shot
- 2024-10-09★★★★★The first plugin I install 😎Fpmx
- 2024-10-09★★★★★Excelente y no puede faltarejpo1-shot
Releases
recent versions from WordPress.org SVNAlternatives to Patchstack
Top Security plugins, ranked by score.For developers & the curious
the raw signals behind the grade — none of this is on the friendly summary aboveDownload signals
Baselines are computed on organic days only — release spikes and their tails are excluded, so they're not inflated by the auto-update wave.
413
Baseline · median of last 7 organic days
454
Prior 7-day baseline
269
Floor · 25th percentile over 14 days
400
Latest day · 2026-06-03(organic)
-9.0%
Week-over-week organic trend
Review signals
Concentration and drive-by metrics drive the review-burst and fake-review flags. 30–40% solo reviewers is normal; we only flag the extremes.
54%
Max month share · biggest single 30-day window
3.18
Distribution CV · <0.6 even, >1.5 bursty
95%
5★ share in analyzed sample
12%
Solo reviewers · only this one wp.org activity
—
Volume velocity · last 6mo vs prior 6mo
4.85 → 4.83★
Sample avg · raw → solo-filtered