Manage Your Patchstack Through MainWP

This month, not only are we celebrating 12 years of MainWP, but we’re also celebrating yet another partnership. This time, it’s Patchstack.

You may already be familiar with Patchstack, but if not, they focus on vulnerability mitigation for WordPress websites. They are the largest WordPress vulnerability discloser and work with over 1,100 plugins as security partners.

What that means in practical terms is simple. Patchstack helps protect your sites by mitigating vulnerabilities before they’re actively exploited.

The Webinar

Last week, I hosted a webinar with Mart Virkus, Head of Marketing at Patchstack, and a few things stood out right away.

• No website is too small for a hacker. Hackers target plugins, not websites, striking hundreds of thousands at once in mass-scale attacks
• Tradition security fails because:
  • Vulnerability exploits are extremely specific and hard to identify
  • WAF rules are either too generic or cause too many false positives
  • Too many rules impact performance of the website
  • Some virtual patch solutions are invasive and can alter website code
• This stat stuck with me: last year, it took an average of five hours for a newly found vulnerability to get mass-exploited
• In 2025, 46% of vulnerabilities were not fixed by the developer by the time of disclosure

Mart also pointed out that Patchstack is seen as a system, not a tool. With its RapidMitigate feature, they use data to help protect users before vulnerabilities go public. The Patchstack plugin gives real-time visibility into connected websites, and rules are deployed only when and where needed without changing code, meaning that it’s implementation is very light-weight and will not impact performance. Typically, through their network of ethical hackers and data collection, they are able to mitigate vulnerabilities 48 hours prior to disclosure.

We also got into a discussion as to why you would want to use a tool like Patchstack on top of the firewall that your host might provide as well as how it differs from other security plugins.

There was a lot more we discussed. We get into the MainWP integration and the partnership we’ve forged. We also get a bit into the pricing and how our pricing is different and why. I’d highly recommend that if you have not watched the interview, you head on over and check it out.

The MainWP Patchstack Integration Add-on

With the MainWP Patchstack integration, all of that data becomes visible directly inside your MainWP Dashboard.

Instead of logging into another platform, you can see vulnerabilities across your sites in one place, where you’re already managing everything else.

Setup is straightforward. Install the Patchstack plugin across your child sites and connect using your API key once. MainWP handles the rest.

From there, you get an at-a-glance view of vulnerabilities across your network, including site-level breakdowns and visual summaries.

You can also review CVSS scores and take action directly from within MainWP, without jumping between tools.

Pricing

The MainWP Patchstack integration add-on is free and available with both the Essentials and Pro bundles. You will need a Patchstack license to use the service.

Right now, Patchstack is offering MainWP users a 20% discount for the first six months on their 25-site Developer plan. That brings the cost down from $79.00 per month to $63.20, or about $2.53 per site for full protection and reporting.

A question that came up during the webinar, and one I’ve heard from users as well, is why this discount doesn’t go as deep as some SaaS offerings.

The key difference is in what’s actually included.

Many SaaS and hosting providers offering Patchstack at a lower cost are only including the RapidMitigate layer. That’s a big part of the value, but it doesn’t include the reporting and broader visibility you get through the full Patchstack platform.

With MainWP, you’re getting the complete Patchstack experience, surfaced inside the dashboard you’re already using. That means more visibility, better reporting, and more value you can pass on to your clients.

It also changes the math.

Because MainWP is self-hosted, once you reach around 23 sites, your total monthly cost starts to align with, and then beat, typical per-site SaaS pricing models. If you’re using the Essentials bundle, that shift happens even earlier.

Here’s how it breaks down with a MainWP Pro bundle with no discounts applied for either MainWP or Patchstack:

And if you were to only be using the MainWP Essentials Bundle, you start seeing the savings over SaaS almost right away:

At the end of the day, everyone’s workflow is different. What matters is having the right tools in place to support how you manage your sites and your clients.

For us, this integration has been a long time coming. It’s another step toward bringing more of what you need into one place.

And that’s really the goal.

Useful Links:

Patchstack Home Page

MainWP & Patchstack Webinar

MainWP Patchstack Integration Promo

MainWP Patchstack Integration Walkthrough

Patchstack Developer Plan 20% Discount

State of WordPress Security in 2026 White Paper

Patchstack Case Studies

The Myth of Secure Hosting – Only 26% of Vulnerability Attacks Blocked by Hosts