Patchstack
Vulnerability Management · Application Security
1open role
$3.9Mrevenue · 2025 · Estonian Tax and Customs Board
1backers · Specialist VC
$2.1Mgrants · 1 grant · CORDIS
Overview
Patchstack is a web application security platform that protects WordPress sites and JavaScript apps against vulnerable plugins, themes and npm packages, including through virtual patching. It provides protection against new security vulnerabilities and threats at scale and hires growth and revenue leaders. The company is headquartered in Pärnu, Estonia.
Funding and backers
Team
6
Estonian Tax Board · Sep 2026 · +50% in a year
Hiring now
1
+1 posted in 30 days
Grants
$2.1M
1 grant · CORDIS
Revenue
$3.9M
2025 · Estonian Tax and Customs Board
Backers
1
Specialist VC
Momentum
28/100
hiring for its size, in the news
Last sign of life
this month
a posting or a news item
The story so fareach stage dated by its source: the company's releases, the press, registers, filings
Jul 12, 2025
On the Hacker News front page Malware found in official gravityforms plugin indicating supply chain breach · 235 points
Jun 1, 2022
Won a grant $2.1M · CORDIS
2018
Founded
Tractionpublic signals, read monthly
Web presence
top 0.29%
of 133.2M domains by links, Common Crawl
Hacker News stories
21
best: 235 points
Funding rounds
| Round | Date | Amount | Investors | Source |
|---|---|---|---|---|
| Grant | Jun 2022 | $2.1M | — | CORDIS |
Registers and programsofficial lists and records that name the company
| Legal entity | Patchstack OÜ | its site |
| Registered | 13 Sep 2017 |
Backed byfrom the funds' portfolios and accelerator catalogs
Investors in similar startupsfunds that back the companies most like this one
Similar startupsby what they do, their industry and backers
Depi finds the vulnerabilities worth fixing across your dependencies, packages, and CI/CD pipelines, and the maintainers behind them.
VRx by Vicarius offers real-time and automated patching, patchless protection, and script-based remediation across apps, OS, and…
PortSwigger offers tools for web application security, testing, & scanning. Choose from a range of security tools, & identify the very…
Merito delivers DevSecOps consulting, application security, quality engineering, SAP testing and upgrades, training, and managed services…
Corgea uses large language models to find and automatically fix security vulnerabilities in application code. Founded in 2023 in San…
AI-native AppSec, run by its own autonomous security engineer. Vulnerabilities found, proven on the running app, and fixed. Security for…
Jobs
$83k – $111k per year · Equity · Remote (United Kingdom, Estonia, Portugal, Croatia, Greece, European time zones hours) · Full-Time
JavaScript
PHP
WordPress
AI/ML
Claude Code
Apply
Salary insights
Compensation ranges based on this company's open jobs
Median
$111k
Typical range
$111k
Open positions
1
1
Jobs
Senior
100%
| Level | Jobs | Median | Typical range |
|---|---|---|---|
| Senior | 1 | $111k | $111k |
Highest paying role
Senior Product Manager
$111k
Normalized to USD per year
Growth
Hiring Momentum
21/100
Hiring freeze
Open positions
1
0 opened / 0 closed in 30 days
Median time-to-fill
180 days
faster than 6% of the market
ATS activity
Every ~8 hours
11/11/2026
Hiring Dynamics
0%
Hiring Focus
The percentage next to each role is its share of the company's job openings over the last 90 days; the arrow shows the shift versus the previous period.
Product
100% ▲
Financials
Est. Annual Revenue
$3.9M
2025
Total raised
$2.1M
Latest round
Grant
Funding rounds
1
Revenue
+73% YoY
Estimate
Modelled from public signals, not audited accounts - read it as an order of magnitude.
| Year | Estimate | Low | High |
|---|---|---|---|
| 2022 | $579k | $579k | $579k |
| 2023 | $1.1M | $1.1M | $1.1M |
| 2024 | $2.3M | $2.3M | $2.3M |
| 2025 | $3.9M | $3.9M | $3.9M |
Funding rounds
| Round | Announced | Amount | |
|---|---|---|---|
| Grant | 2022 | $2.1M | Details |
Tech stack
Technologies named in job postings at Patchstack over the last 12 months, by layer, with the share of postings for each.
Technologies in use
4
Postings analysed
1
Stack modernity
69/100
Languages
JavaScript
PHP
Developer tools
Claude Code
WordPress
Sign in to see how your skills match this stack
Sign In
Connections
List
Graph
Found in company registers, site code, DNS and hiring. Each connection shows how sure we are and the evidence, with its source and date.
Shared investors
Specialist VCVia a fund
Click a company to open it. Dashed lines are likely connections. The second step of the network is part of the Pro plan.
Owner
Same company
Same group
Likely
News
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server.
Read more
Report
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
Elementor Pro CVE-2026-32475 lets unauthenticated attackers bypass file checks and upload PHP for remote code execution.
Read more
Report
WordPress Security Release 7.0.3 Fixes High Severity XSS Vulnerability
WordPress security update fixes 12 vulnerabilities. Security researcher says: "nastiest one is a login screen XSS."
Read more
Report
A critical vulnerability in WordPress has led to a wave of hacker attacks
Hackers are attacking millions of WordPress sites by exploiting recently patched vulnerabilities in versions 6.9.0-7.0.1.
Read more
Report
AI-driven cyber threats now compress response times and demand board-level oversight
Artificial intelligence is accelerating cyberattack speeds and blurring organisational responsibilities, making cybersecurity a critical issue for companies of all sizes, says Oliver Sild of Patchstack.AI is compressing...
Read more
Report
Why Every Business Is Now a Cybersecurity Target - Interview with Oliver Sild
Learn why every business faces cyber threats and how stronger cybersecurity improves resilience in this interview with Oliver Sild.
Read more
Report
Millions of Websites at Risk With Hackers Exploiting WordPress Bugs
Hackers are actively breaking into websites running vulnerable versions of WordPress, according to warnings from several cybersecurity firms. WordPress
Read more
Report
Millions of WordPress Sites Under Attack as Hackers Exploit Critical Bugs for Full Website Takeover
Hackers are exploiting critical WordPress flaws to hijack websites worldwide, with millions of sites at risk from the dangerous WP2Shell remote takeover attack.
Read more
Report
New WP2Shell Attack Lets Hackers Take Over Vulnerable WordPress Websites
Researchers warn that the new WP2Shell attack lets hackers take over vulnerable WordPress websites through security weaknesses.
Read more
Report
Show more news
Offices
Where the company hires and what each office is for
Cities
1
Hiring now
0
Countries
1
Pärnu
Estonia
HQ
1-10 est. staff