Automattic Acquires WPScan, May Be Rolled Into Jetpack in the Future
Automattic has acquired WPScan, a ten-year-old service that provides a database for WordPress core, plugin, and theme vulnerabilities. The company has sponsored WPScan for a number of years and has already been white labeling its use in Jetpack Scan. Pricing for WPScan is based on API requests per day, with a free version limited to 25. Monthly pricing is tiered based on requests and additional features. The pricing matrix estimates that WordPress websites have 22 plugins installed, on average, and each one makes an API request, as well as one each for the core version and themes. “Our goal for this acquisition is to make malware data and APIs more open source,” Jetpack marketing representative Rob Pugh said. “We want to ensure that WPScan continues to be a high-quality security resource for the entire WordPress community. To that effect, we’ll be exploring ways to make the API completely free for non-commercial sites.” Some users may be wondering whether the WPScan plugin offers more than what is built into Jetpack Scan. The two provide complementary features and can be used at the same time. “[WPScan] does do some different checks that Jetpack Scan doesn’t do such as weak passwords and https,” Pugh…
…Full post on WP Tavern
Read Full
