Official Patchstack partner
Stop WordPress hacks early
- Checks every plugin, theme and WordPress core version on your site
- Automatic vPatching with 12,000+ mitigation rules
- Protection up to 48 hours before public disclosure
Starting at AED 12.50/month per website
Cancel anytime, with no contracts and zero hidden fees
Patchstack manages vulnerability reporting for over 1,000 WordPress plugin vendors, including
WP Rocket
YITH
One plan covers everything
One transparent price per WordPress website, in AED or USD, with no teaser rates that quietly triple at renewal.
WordPress security in one plan
Detection, virtual patching and hardening together in one per-site license.
Automatic vPatching
Targeted mitigation rules are deployed automatically to block attempts to exploit vulnerable plugins and themes. They do not change your plugin or theme code, so nothing breaks.
48 hour head start
As the world’s #1 WordPress vulnerability intelligence provider, Patchstack can protect your site up to 48 hours before a vulnerability is publicly disclosed.
Vulnerability detection
Patchstack matches the plugins, themes and WordPress version on your site against its vulnerability database, so you know when something needs attention.
Advanced hardening
An advanced hardening module blocks common WordPress attack patterns, such as attempts to upload PHP files or give a user administrator rights.
Community IP blocklist
Requests from IP addresses known for attacks are blocked, using threat data gathered across the entire Patchstack network.
Security overview
See your protection status, any vulnerabilities found and the threats blocked from your AEserver client area, with one click into the full Patchstack portal.
Protected in minutes, threats mitigated automatically
Order it from your client portal. On AEserver hosting the plugin is installed for you, and Patchstack handles the rest.
Order from your portal
Add Patchstack Protection in your AEserver client area. If your site is hosted with us, the plugin is installed and activated automatically. Hosted elsewhere? You install it yourself in a few minutes.
Your software is checked
The plugins, themes and WordPress version on your site are matched against Patchstack’s vulnerability database, and checked again whenever they change.
Threats are mitigated for you
When a vulnerability affects your site, a vPatch is applied automatically where one is needed, blocking exploit attempts without changing your code. You update on your own schedule.
WordPress runs the web, and attackers know it
Most hacked sites were never targeted personally. Bots scan the whole internet for one known vulnerability, and if your site has it, they will find it.
of all websites run on WordPress
new WordPress vulnerabilities were found in 2025, up 42% on 2024
of new WordPress vulnerabilities in 2025 were in plugins and themes
Up to 48 hours of protection before a vulnerability goes public
Sources: Patchstack, State of WordPress Security in 2026. W3Techs, October 2026.
The cheapest hack is the one that never happens
Many security tools look for malware after an infection. Patchstack blocks the exploit attempt itself, stopping the infection before it starts.
Typical security plugin
Detects and repairs after the fact
- Finds malware after your site is already infected
- Cleanups take days and can cost thousands of dirhams
- Generic firewall rules run on every request, whether they apply or not
- Vulnerabilities with no official fix stay exposed
- You patch manually and hope nothing breaks
Patchstack Protection
Prevents exploitation in the first place
- Blocks exploit attempts before an infection can happen
- vPatches deploy automatically, often at the moment of disclosure
- Rules target only software you actually run, with minimal overhead
- Protects you even when the developer never releases a fix
- Update on your schedule, protected in the meantime
Frequently asked questions
I already have SSL and backups. Do I need this?
Yes. SSL encrypts traffic and backups help you recover, but neither stops a vulnerable plugin from being exploited. 99% of WordPress vulnerabilities originate in plugins and themes, and Patchstack closes the holes attackers actually use.
Will it slow down my website?
No. Patchstack only applies rules for vulnerabilities in software you actually run, rather than generic filters on every request. Patchstack’s own tests show it adds just a few milliseconds to server response time.
What if my site is hosted elsewhere?
You can still protect it. Order Patchstack Protection from your AEserver client portal, then use Download Plugin in your client area and install the plugin on your WordPress site yourself. It takes a few minutes, and our support team can help if you need it. If your site is hosted with AEserver, there is nothing to install: the plugin is installed and activated for you automatically.
How is this different from a malware scanner?
Malware scanners look for infections after they happen, and cleanup is slow and expensive. Patchstack is preventive: it blocks attempts to exploit vulnerabilities so malware does not get in. It does not scan for or remove existing malware, so you can run both side by side.
What happens when a new vulnerability is found?
Patchstack checks it against the plugins, themes and WordPress version on your site. If you are affected, a vPatch is applied automatically where one is needed, sometimes up to 48 hours before the vulnerability is made public. You can then update on your own schedule.
Does the price go up at renewal?
No. You pay one transparent price per WordPress website, in AED or USD, with no teaser rates that quietly triple at renewal.
Can I cancel anytime?
Yes. It is a per-site license billed monthly or yearly from your client portal, with no contracts and no hidden fees. All prices exclude 5% VAT.
