Patchstack – WordPress & Plugins Security vs CIDRAM

CIDRAM (Classless Inter-Domain Routing Access Manager) is a PHP script designed to protect websites by blocking requests originating from IP addresses regarded as being sources of undesirable traffic, including (but not limited to) traffic from non-human access endpoints, cloud services, spambots, scrapers, etc. It does this by calculating the possible CIDRs of the IP addresses supplied from inbound requests and then attempting to match these possible CIDRs against its signature files (these signature files contain lists of CIDRs of IP addresses regarded as being sources of undesirable traffic); If matches are found, the requests are blocked. Requirements PHP >= 7.2.0 PCRE Updating Note: CIDRAM does not interact in any way with your database, and stores its own configuration settings, customisations, and related materials as flatfiles within its own directory. If you’ve not changed any of the default configuration settings and if you’re not using any customisations for this plugin, updating normally via the plugins dashboard, without need for any additional steps, should be sufficient and shouldn’t cause any problems. However, if you’ve modified the configuration settings for CIDRAM, or if you’ve made any customisations, I would recommend making backups of all of these prior to updating, due to that updating will overwrite all settings and customisations (after updating, you can then restore your customisations from your backups). Alternatively, if you update via the CIDRAM front-end updates page, all settings and customisations should be preserved.

Patchstack is a powerful tool that helps identify security vulnerabilities within your websites’ plugins, themes, and WordPress core. It is powered by the WordPress ecosystem’s most active community of ethical hackers. Patchstack is trusted by leading WordPress experts such as Pagely, Cloudways, GridPane, Plesk, and others! Patchstack is a security plugin for WordPress that finds WP core, plugin and theme vulnerabilities in your websites. The free version includes up to 48-hour early warning for new vulnerabilities found by our security research community. It also allows you to automatically update vulnerable software, manage updates remotely, and get snapshot reports on your sites’ security status. The paid version includes automatic vulnerability protection. Patchstack deploys highly targeted rules on a per-site basis, only when a specific vulnerability is detected on a site. This prevents vulnerable components from being exploited without modifying website code, or impacting site performance or functionality. Patchstack’s paid version includes access to 12,000+ individual protection rules (vPatches). Patchstack paid version also includes other preventive security features, such as 2 factor authentication, WordPress specific hardening rules, a Community IP blocklist for malicious IP addresses, advanced security settings, and custom protection rules. Post-hack cleanups vs attack prevention in WordPress security Unlike the standard approach to WordPress security (malware scanning and infection cleanups), Patchstack is focused on preventing infections in the first place. Thanks to its big WordPress security research community and partnerships with nearly one thousand plugin vendors and developers, Patchstack is regularly among the first to identify new vulnerabilities. Who is Patchstack’s WordPress security plugin for? Patchstack’s vulnerability management works extremely well for: Agencies with WordPress care/maintenance plans for their customers’ websites WooCommerce websites to protect their revenue and customers from attacks Hosting companies that want to deliver highly targeted vulnerability protection easily and at scale Website owners You don’t have to be highly technical to use it. Install the plugin, connect it with the Patchstack App, and stay safe! What features are included in the Patchstack Personal (Free) plan? Patchstack’s Personal plan is a free security service for WordPress that lets you find and manage vulnerabilities in your websites. It includes access to a central security dashboard via the Patchstack web App for more visibility and control over your sites’ security: Be the first to know about new vulnerabilities. Receive notifications if any installed plugins or themes have security issues. Detect the latest security vulnerabilities in WordPress plugins. Detect the latest security vulnerabilities in WordPress themes. Detect the latest security vulnerabilities in WordPress core. Receive real-time alerts via email if any security vulnerabilities are found. Manage core, plugin and theme updates from a single dashboard. [Optional] Enable automatic updates for vulnerable plugins only. Generate snapshot reports about the security status of your website. What features do Patchstack paid subscriptions have? Patchstack’s paid subscriptions include automatic protection for WordPress vulnerabilities, as well as other protection modules. Virtual patching to prevent vulnerable components from being exploited Advanced hardening module for added WordPress security Remote hardening settings (including .httacess, login protection and reCAPTCHA) Community IP Blocklist of known attacker IP addresses All of these features are included in the Developer and Enterprise plans. Additionally, Developer and Enterprise plan users have access to custom protection rule creation, periodical security reports and report scheduling. Personal (Free) plan users can enable these features on a per-site basis for $5 / site per month. Important Resources Patchstack website Help Center Changelog Patchstack Vulnerability Database See what our customers say about our paid plans: “An excellent and valuable service that’s backed by a company that contributes a significant number of resources and money directly back to the WordPress ecosystem.” – John Blackbourn “Patchstack is like CrowdStrike, but for websites!” – Ryan McCue, HumanMade “The service here is superb! And they are always right on it with the best solution to solve the problem or question at hand. The tool itself speaks for itself. I am very satisfied with this project and the service they offer.” – Daniel Canup “This is a security plugin everyone needs to install. The Patchstack team are incredible at what they do. We have been using them for years and have not been disappointed!” – @craniumstudio “We’ve been with Patchstack for a LONG time (even before they were Patchstack). It has always done its job seamlessly and without fail. Ongoing innovation and updates to the Patchstack product mean this plugin is a winner. 5 stars all the way.” – @guapx (*Comparisons are made by evaluating paid versions.) Sucuri vs. Patchstack Wordfence vs. Patchstack Malcare vs. Patchstack Sitelock vs. Patchstack