Steel Security Pro Automation Guide

Automation ensures security monitoring continues even when administrators are not actively reviewing dashboards. Steel Security Pro allows scheduled scans and background processing. Scheduled scansWorker-based scanningAutomation controlsConfigurable scan depth These...

Troubleshooting Automation and Cron

Automation features rely on scheduled tasks. If scans do not run as expected, possible causes include disabled WordPress cron, server cron misconfiguration, blocked outbound requests, or worker process lockups. Reviewing server cron configuration, worker status, and...

Troubleshooting Header / Server Checks

Server responses may differ depending on how a site is accessed. Results may vary between the root domain, subdomains, /wp-admin, and CDN endpoints. Proxy or caching layers can also modify HTTP headers. Understanding these differences helps explain scan results and...

Privacy and Data Handling in Steel Security

Steel Security is designed to minimize data collection. Security scans analyze the local WordPress environment and do not collect unnecessary personal data. External communication is limited to license verification and update services. This approach prioritizes...

Directory Listing Protection

Directory listing occurs when a web server displays the contents of a folder. This can expose plugin structures, temporary files, backups, and hidden scripts. Attackers can use these listings to map your environment. Steel Security recommends disabling directory...

Security Headers Hardening

HTTP security headers help browsers enforce security protections. Examples include X-Frame-Options, Content-Security-Policy, X-Content-Type-Options, and Referrer-Policy. These headers mitigate common attacks including clickjacking, cross-site scripting, and...