RSFirewall! vs Patchstack – WordPress & Plugins Security

Patchstack is a powerful tool that helps identify security vulnerabilities within your websites’ plugins, themes, and WordPress core. It is powered by the WordPress ecosystem’s most active community of ethical hackers. Patchstack is trusted by leading WordPress experts such as Pagely, Cloudways, GridPane, Plesk, and others! Patchstack is a security plugin for WordPress that finds WP core, plugin and theme vulnerabilities in your websites. The free version includes up to 48-hour early warning for new vulnerabilities found by our security research community. It also allows you to automatically update vulnerable software, manage updates remotely, and get snapshot reports on your sites’ security status. The paid version includes automatic vulnerability protection. Patchstack deploys highly targeted rules on a per-site basis, only when a specific vulnerability is detected on a site. This prevents vulnerable components from being exploited without modifying website code, or impacting site performance or functionality. Patchstack’s paid version includes access to 12,000+ individual protection rules (vPatches). Patchstack paid version also includes other preventive security features, such as 2 factor authentication, WordPress specific hardening rules, a Community IP blocklist for malicious IP addresses, advanced security settings, and custom protection rules. Post-hack cleanups vs attack prevention in WordPress security Unlike the standard approach to WordPress security (malware scanning and infection cleanups), Patchstack is focused on preventing infections in the first place. Thanks to its big WordPress security research community and partnerships with nearly one thousand plugin vendors and developers, Patchstack is regularly among the first to identify new vulnerabilities. Who is Patchstack’s WordPress security plugin for? Patchstack’s vulnerability management works extremely well for: Agencies with WordPress care/maintenance plans for their customers’ websites WooCommerce websites to protect their revenue and customers from attacks Hosting companies that want to deliver highly targeted vulnerability protection easily and at scale Website owners You don’t have to be highly technical to use it. Install the plugin, connect it with the Patchstack App, and stay safe! What features are included in the Patchstack Personal (Free) plan? Patchstack’s Personal plan is a free security service for WordPress that lets you find and manage vulnerabilities in your websites. It includes access to a central security dashboard via the Patchstack web App for more visibility and control over your sites’ security: Be the first to know about new vulnerabilities. Receive notifications if any installed plugins or themes have security issues. Detect the latest security vulnerabilities in WordPress plugins. Detect the latest security vulnerabilities in WordPress themes. Detect the latest security vulnerabilities in WordPress core. Receive real-time alerts via email if any security vulnerabilities are found. Manage core, plugin and theme updates from a single dashboard. [Optional] Enable automatic updates for vulnerable plugins only. Generate snapshot reports about the security status of your website. What features do Patchstack paid subscriptions have? Patchstack’s paid subscriptions include automatic protection for WordPress vulnerabilities, as well as other protection modules. Virtual patching to prevent vulnerable components from being exploited Advanced hardening module for added WordPress security Remote hardening settings (including .httacess, login protection and reCAPTCHA) Community IP Blocklist of known attacker IP addresses All of these features are included in the Developer and Enterprise plans. Additionally, Developer and Enterprise plan users have access to custom protection rule creation, periodical security reports and report scheduling. Personal (Free) plan users can enable these features on a per-site basis for $5 / site per month. Important Resources Patchstack website Help Center Changelog Patchstack Vulnerability Database See what our customers say about our paid plans: “An excellent and valuable service that’s backed by a company that contributes a significant number of resources and money directly back to the WordPress ecosystem.” – John Blackbourn “Patchstack is like CrowdStrike, but for websites!” – Ryan McCue, HumanMade “The service here is superb! And they are always right on it with the best solution to solve the problem or question at hand. The tool itself speaks for itself. I am very satisfied with this project and the service they offer.” – Daniel Canup “This is a security plugin everyone needs to install. The Patchstack team are incredible at what they do. We have been using them for years and have not been disappointed!” – @craniumstudio “We’ve been with Patchstack for a LONG time (even before they were Patchstack). It has always done its job seamlessly and without fail. Ongoing innovation and updates to the Patchstack product mean this plugin is a winner. 5 stars all the way.” – @guapx (*Comparisons are made by evaluating paid versions.) Sucuri vs. Patchstack Wordfence vs. Patchstack Malcare vs. Patchstack Sitelock vs. Patchstack

The RSFirewall! WordPress plugin is the optimal solution for securing your website, helping you stay one step ahead of malicious users that wish to harm your website. The plugin is backed by a team of professionals with a long history in website security that are up to date with the latest known vulnerabilities and security updates. RSFIREWALL FREE VERSION FEATURES: Free WordPress Firewall for your website Active protections against local file and remote file inclusion attacks SQL injection protections ReCAPTCHA for registration, login and commenting forms Filter uploaded files for possible malware and improper extensions Active monitoring WordPress core files integrity Active monitoring for your own files XML-RPC blocking REST API blocking with proper exceptions that you can define Protect the wp-admin/ slug with an extra password Change the wp-admin/ slug into a custom one Disallow direct access to PHP files in (wp-content, wp-content/uploads, wp-includes) with proper exceptions that you can define Receive email notifications on detected threats Automatically block repeated offenders IP addresses Perform a System check (WordPress and server configuration checks) Disable the creation of new Administrator accounts RSFIREWALL PAID VERSION FEATURES: Two Factor Authentication Country blocking Convert email addresses to images Protect forms from abusive IPs File integrity check Convert email addresses from plain text to images More control over the system check Whitelist blocked PHP files Protect admin users from changes 3rd Party services RSFirewall! will compare the MD5 hash of files with the original ones from the WordPress installation package. If differences are found (ie files have been modified) RSFirewall! upon request can download the original files from the GitHub synchronised repository of WordPress: https://github.com/WordPress/WordPress/ All connections are made with wp_remote_get and the following information will be sent along with the request: – WordPress version – WordPress user agent along with your WordPress website address – Your server’s IP address