H3SEC Guard – Security Hardening

H3SEC Guard is built for site owners who want practical security controls without enabling a heavy, opaque security suite.

com

Main capabilities:

• Hardening controls (XML-RPC, file editor, author enumeration, security headers)

• Login protection (attempt limit + temporary IP lockout + optional admin whitelist)

• Activity logging for critical site changes

• Core integrity scan using official WordPress checksums

• Lightweight suspicious PHP scanner with context-aware severity

• Finding-level hashes (MD5/SHA256), full path visibility, and recommendations

• Risk panel (low / medium / high / critical score)

• On-screen findings tables (not only downloads) for suspicious files, core mismatches, and permissions

• Response mode actions (close sessions, force password reset, maintenance, forensic export)

• Default blocking for known malicious probe paths with temporary IP lockout

• Conservative trusted-proxy and IPv4/IPv6 CIDR resolution, including optional Cloudflare forwarding

• Monitor, balanced, and strict public POST inspection with route exclusions and bounded body size

• Read-only server configuration inspection, with explicit atomic creation only for missing Apache/LiteSpeed files

• Safe robots.txt inspection and explicit creation without modifying existing files

• Quick/deep scan modes, bounded findings, exclusions, symlink avoidance, and checksum-unavailable reporting

• Weekly mitigation report with detailed activity counters

• Tracking for attempts with non-existent usernames

• Paginated activity log with expandable event context

• Configurable log retention with automatic daily cleanup

• Local security assistant with explainable next-step guidance

• Branded HTML weekly reports and security alerts

• No hidden telemetry or mandatory third-party APIs

H3SEC Guard is designed as an explainable security plugin. Each control explains:

• what it does,

• what risk it reduces,

• what it may break,

• how to revert it.