Accurate guidance for Steel Security Free and Steel Security Pro

Documentation that helps administrators act with confidence

Practical, product-accurate guidance for Steel Security Free and Steel Security Pro.

Steel Security 1.1.0 Pro 1.0.1
6 sections 24 articles

Clear docs for setup, scanning, hardening, and recovery

This site is meant to be the practical reference for what Steel Security does today, not a marketing layer over the product. The content here is based on the current Free and Pro code, the release audit, and the shipped admin experience.

Getting started Search the docs

Getting Started

Install Steel Security, run the first manual scan, and use the dashboard and Recommended Actions before making changes.

5 articles

Scanning

Understand scan behavior, finding severity, stale or failed scans, and how quarantine works.

5 articles

Hardening

Learn what Steel Security can change directly, what stays advisory-only, and how rollback works.

4 articles

Server Protection

Interpret Fail2Ban and cPHulk current-state telemetry, reporter health, and safe detection states without giving WordPress server-level control.

3 articles

Steel Security Pro

Review Pro licensing, deep scans, stored history, scheduling, reports, and the higher-level operational workflows built on top of Free.

4 articles

Troubleshooting

Recover from login issues, skipped checks, license problems, and server-protection uncertainty.

3 articles

Start here

Running Your First Scan The first scan establishes the baseline that Steel Security uses for findings, risk score, and later comparison features.
Understanding Findings Findings are grouped by severity and category so administrators can focus on the most meaningful issues first.
Hardening Overview The Hardening page documents and controls preventive changes using the same logic that feeds related scanner findings.
Understanding Server Protection Server Protection reports safe detection signals and, when available, current-state telemetry for host-level tools without asking WordPress to manage them directly.
Steel Security Pro Overview Steel Security Pro extends the Free plugin with deeper visibility over time, automation, reporting, and higher-level operational workflows.
Hidden Login Recovery If you enabled a custom login path and later lose track of it, recover carefully rather than guessing or weakening the site with a predictable default.

Common recovery topics

Scan Failed A failed scan means the latest attempt did not finish successfully. It does not necessarily mean that every prior result is gone.
Hidden Login Recovery If you enabled a custom login path and later lose track of it, recover carefully rather than guessing or weakening the site with a predictable default.
Steel Security Pro License Problems Most license problems fall into a small set of states: invalid token format, inactive or expired license, seat limit reached, or temporary verification failure.

Planned follow-up topics

These are worth documenting next, but they are being held back until they can be written properly.

  • Understanding Risk Score
  • Understanding Hardening Posture
  • Passed checks and skipped checks reference
  • REST user endpoint examples and recovery patterns
  • Directory listing and security headers managed hardening in Pro
  • Fail2Ban reporter installation walkthrough