Changelog

Latest: Ropeline 0.3.3 and Ropeline Pro 0.1.6. Follow new releases with the RSS feed.

How updates reach your store

Signed. Every Ropeline Pro release is signed with a key that never leaves the computer we release from. Before installing, Pro checks the signature and the download's fingerprint, so nobody else can push code to your store, even someone who broke into our website.
In stages. A new release can go to a share of stores first, then to everyone. If anything looks wrong, we pause it, and stores that haven't installed it yet won't.
Security fixes install by themselves. Pro installs them on its own, usually within a day, the way WordPress handles its own security releases. You can turn that off in Ropeline > Settings > Updates. Other updates wait for you to click Update, unless you've turned on WordPress auto-updates.
Never backwards. An update only ever installs a newer version.
Tested first. Each release passes our full test suite, including a fresh install and an update on PHP 7.4 and PHP 8.4.
The free plugin will update through WordPress.org once it's listed there. Until then, new versions are here and at getropeline.com/download.

Found a security problem in Ropeline? Email hello@getropeline.com.

Pro now only runs with license answers signed by Ropeline, checks its own files every month against the signed release (one-click reinstall), and blocks coupon and gift-card guessing at checkout.

Smaller and simpler: login lockouts and botnet protection. Leaked-password checks and hidden usernames are now part of Ropeline Pro.

Store plans now come in sizes (Store, Store Plus, Store Max), and Pro tells you when your store outgrows its plan. Leaked-password checks and hidden usernames are now part of Pro. Until a key is added, Pro shows a Start my free trial button, and updates need an active plan.

Card testers who retry on the classic checkout page are now paused after 5 declined cards, the same as on the checkout block. Tested on 14 common store setups: page builders, security and cache plugins, custom checkouts and more.

Works on WordPress multisite networks, keeps an exact count when bots send many requests at the same moment, and shows its notices only on the Dashboard, Plugins, your profile and Ropeline's own pages.

Updates now roll out in stages and can be paused if anything looks wrong. Security fixes install automatically (you can turn that off in Settings > Updates). And Pro shows what's new after each update.

Automatic updates: Ropeline Pro now updates from WordPress's Updates screen, and only installs releases signed by Ropeline.

New: a "Start blocking now" button ends learning mode in one click.
New: on WooCommerce stores, Ropeline warns you when a burst of failed payments looks like card testing, and links to what to do.

New: the online dashboard at getropeline.com/dashboard. Turn it on in Settings to see every site on your key on one screen.
A card-testing attack now switches attack mode on even during the first week's learning mode.

First release: checkout protection against card testing with attack mode, signup and form spam protection, verified AI shoppers, the card skimmer watch, weekly reports and the Ropeline Network.

First public release: login protection with escalating lockouts, leaked-password checks, hidden usernames and the optional "prove you're human" check.