Safety without a paywall
Security warnings are included in the free plan as well as in paid plans. You will never have to upgrade to hear about a risk that affects you.
OUR SECURITY PLEDGE
Security watchtower
Know when your store needs a security update.
Security watchtower keeps an eye on the software your store runs on and tells you, in plain language, when a known vulnerability affects your version. It is included in every plan, free included, because protecting a store should not depend on its budget.
- Included in the free plan. No security add-on.
Key features
Watching for you
Public vulnerability records, publisher disclosures and package feeds, checked several times an hour.
Matched to what you run
Only vulnerabilities that affect your recorded, verified versions turn into warnings.
Checked by a person
Every warning is reviewed and approved by a person before it reaches you.
01 · WHAT IS CHANGING
Vulnerabilities are being found faster than ever.
AI now helps researchers uncover weaknesses in software that has been tested for years. That is good news: every flaw that is found can be fixed. It also means more fixes, published more often, for the platforms and plugins stores rely on.
As discovery speeds up, the window between a published fix and an attack gets shorter. The stores that stay safe are the ones that hear about the right update early and act on it. Without a security team, a timely heads-up tells you what needs attention. With one, it still saves the hours that matter most.
Read Mozilla’s account of AI-assisted security research02 · OUR PROMISE
We don’t want to charge for safety.
Behind every store are people: the owner who built it, the team who runs it and the customers who trust it with their details. When we can see a risk coming, we feel a responsibility to say so. That is why Security watchtower is part of WISEPIM for everyone, on every plan, and why it watches the whole stack your store runs on, not only our own software.
Not only for WISEPIM
Your store runs on platforms, plugins, hosting and databases that we do not make. We watch the supported ones too, because that is where most risk comes from.
We come to you
You should not have to search vulnerability databases yourself. When something affects your store, a reviewed warning arrives in your inbox and in WISEPIM.
03 · HOW IT WORKS
From a public report to a clear heads-up.
Follow one warning from the moment a vulnerability is published to the moment your team knows what to do.
A warning, explained
Start with trusted public sources
Publisher disclosures, public vulnerability records and package feeds reveal risks across supported store technology, including platforms and plugins outside WISEPIM.
The wider ecosystem
WooCommerce
Shopify
MagentoSoftware publishers
Cataloged technologies
Package feeds
Configured coverage catalog. Source availability varies.
Security watchtower
Two checks before any warning is sent
Verified affected version
Human review and approval
Security message
Illustrative warningReviewed by a person
An update needs your attention.
A known vulnerability affects a verified version in your store. Here is what it means and what to do next.
- Affected version
- Verified against your inventory
- Next step
- Review the recommended update
Your team stays in control
The same care. Every plan. Including free.
An explanation of the process, not a live alert feed.
04 · IN YOUR ACCOUNT
Your store’s technology, in one place
Choose your platform, plugins, PHP version and database from 184 technologies. Logos, versions and how you verified them sit side by side, so you can see at a glance what still needs checking.
Matched to your versions
Known vulnerabilities, sorted by what they mean for you
Each vulnerability shows whether your version is affected, still needs checking or is already being exploited. Nothing is sent to you until a person has reviewed it.
05 · WHAT WE WATCH
Your whole ecommerce stack, not only WISEPIM
We follow public vulnerability records, publisher disclosures and package feeds for the platforms, plugins, languages and databases stores run on. What we can match depends on the sources available and the technology recorded in your account.
A vulnerability database the watchtower keeps up to date
Behind every warning is a database of more than 55,000 known vulnerabilities in ecommerce platforms, plugins, themes and the software underneath, going back to 1996. The watchtower maintains it on its own: it adds new reports as they appear, updates records when publishers change them, marks the ones attackers are actively using and explains each one in plain language.
- Known vulnerabilities
- 55,000+
- Technologies we match
- 184
- History going back to
- 1996
- New reports checked
- Every 15 min
Magento / Adobe CommerceWooCommerceWordPressShopwarePrestaShopOpenCartPHPMySQLMariaDBAkeneoPimcoreSyliusMedusaDjangoNode.jsPostgreSQLRedisOpenSearchn8n
Honest about what it does
Security emails are on by default for every WISEPIM user, and you can turn them off at any time. A warning is only sent when a verified version is affected and a person has approved it.
If we do not know your version, we will not pretend to. Security watchtower is an early-warning service, not a penetration test and not a guarantee that a store is secure.
FAQs
What our promise means for your team
Still have questions?
Can't find the answer you're looking for? Please get in touch with our team.
Contact SupportA safer ecosystem starts with looking out for each other.
Bring your store’s technology into view and give your team a head start on every important update. Security watchtower is free on every plan, because safety should be within everyone’s reach.