patchstack.com

HTML metadata

Title

Fastest protection for WordPress security vulnerabilities - Patchstack

Description

Keep your WordPress sites safe from vulnerable plugins & themes. Protect sites with virtual patching.

Language

en

Generator

Astro v6.3.1

Canonical

https://patchstack.com/

Feeds

Patchstack Blog RSS

Open Graph

url: https://patchstack.com/
title: Fastest protection for WordPress security vulnerabilities - Patchstack
site name: Patchstack
description: Keep your WordPress sites safe from vulnerable plugins & themes. Protect sites with virtual patching.

Technology

CDN: Amazon CloudFront
Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.googletagmanager.com×2
cdn-cookieyes.com×1

Social

Contact

Address: Tallinn, EE

Registration

Registrar

Amazon Registrar, Inc.

Created

2016-10-20

Expires

2026-10-20 153 days left

Updated

2026-05-14

Name servers

ns-1132.awsdns-13.org
ns-154.awsdns-19.com
ns-2040.awsdns-63.co.uk
ns-799.awsdns-35.net

DNS records live

NS

ns-1132.awsdns-13.org
ns-154.awsdns-19.com
ns-2040.awsdns-63.co.uk
ns-799.awsdns-35.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 9 TXT records

google-site-verification=EUHJIOL0FDdVtcpY92rKZaoq8IEPafmsafa5oBnrzHs
google-site-verification=JEwJxRIz_-IH_xDLNgYXG4z9WcTOmBSxTVNVEZpAzJk
google-site-verification=XZJmI0iZk-pzNyUEVcIH1juBN4oqVVUewQqWZVM4Tq8
google-site-verification=zp9AowZ640rDoyaVuHOa67ZqMPCcvUErUv1wWbPifvk
openai-domain-verification=dv-D9FMdwKC3W6HZfKZyB6RkvZU
anthropic-domain-verification-g164f7=iVaIfthuJInc4Rx17ATwDyiMh
apple-domain-verification=ejrSpQoPjh14HLd3
atlassian-domain-verification=pXzFlDW25ahDtZkNQdhTKmQCJJJ9lMUsz0enevEQMXWfMRfV9trmVyBHiBAER6WV
facebook-domain-verification=h2nloyw5ae9d7tn478yep9g6wr422w

Email authentication partial

SPF

v=spf1 include:mail.zendesk.com include:spf.tapfiliate.com include:_spf.mlsend.com include:_spf.google.com include:amazonses.com include:mailgun.org include:48293854.spf07.hubspotemail.net a:directo.gate.ee -all

strict (-all)

DMARC

v=DMARC1;p=none;rua=mailto:dmarc@patchstack.com;pct=100;ri=21600;fo=1

policy: none (monitoring only)

DKIM

default: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCa8l+nu4w5ljf+X90mjzyybRYUmZTawzIq1HB36c57veP26PiYQOn84zVSo7YaO2VZB0DJca6GvKYeY7aI5kFIV7p7mo/…
google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbM9jScsTtSA/6zvakjGi1aJeMEPnTX9mSSFaHu8HhWhlpZxyHUepDNSJW1R9BqKl8FACj3mhZHQnA…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-13 to 2026-12-12

Expires in 206 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://patchstack.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' http://js.hsforms.net https://js.hsforms.net https://www.google.com/recaptcha/ https://google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://recaptcha.net https://www.googletagmanager.com https://www.google-analytics.com https://cdn-cookieyes.com https://widget.intercom.io https://js.intercomcdn.com https://groot.mailerlite.com https://assets.mailerlite.com https://assets.mlcdn.com https://www.workable.com https://cdn.jsdelivr.net https://snap.licdn.com https://static.hotjar.com https://script.hotjar.com https://cdn.dreamdata.cloud https://connect.facebook.net https://cdn.drda.io https://pagead2.googlesyndication.com https://cdn.patchstack.com; style-src 'self' 'unsafe-inline' https://assets.mailerlite.com; img-src 'self' data: https:; font-src 'self' https://patchstack.com https://js.intercomcdn.com https://fonts.intercomcdn.com; connect-src 'self' https://api.hsforms.com https://forms.hsforms.com https://js.hsforms.net
strict-transport-security: max-age=31536000; includeSubDomains