Learn what Steel Security can change directly, what stays advisory-only, and how rollback works.
Hardening
Learn what Steel Security can change directly, what stays advisory-only, and how rollback works.
Hardening Overview
The Hardening page documents and controls preventive changes using the same logic that feeds related scanner findings.
Rename the Default `admin` Username
If an administrator account still uses the default `admin` login, Steel can offer a safer in-plugin rename workflow.
Hide the Default Login URL
Steel can move public login traffic away from `wp-login.php` to a custom path while preserving normal WordPress internals.
Block PHP Execution in Uploads
Uploads directories should not normally execute PHP. Steel can manage this on supported server stacks and explain the manual path for others.