What Pro adds
Deep scan providers.
Stored scan history and risk trend visibility.
Change tracking between stored runs.
Scheduled fast scans and scheduled deep scans.
Scheduled emailed reports.
Managed hardening for directory listing and baseline security headers on supported servers.
What stays in Free
Current-state Server Protection telemetry for Fail2Ban and cPHulk when a supported reporter is connected.
Manual scan workflow, Recommended Actions, grouped hardening, hidden login, admin rename, and quarantine workflows.
What does not change
Pro builds on the same core scanner, hardening concepts, and manual triage flow as Free.
Pro is the natural place for retained history, trends, and alerting. It does not change the core principle that WordPress should not directly control root-managed server security tools.