Scan vs Hardening: Two Different Security Layers
Steel Security separates security into two distinct concepts: scanning and hardening. Understanding the difference makes the plugin easier to use and the results easier to trust.
What a Security Scan Does
A scan is read-only analysis. Steel Security inspects your WordPress installation and hosting environment for issues such as outdated software, vulnerable components, unsafe permissions, exposed files, or missing protections.
Scans do not change your site. They help you understand what is risky.
What Hardening Does
Hardening is where protective changes are applied. These are deliberate configuration improvements that reduce common attack paths.
- Blocking PHP execution in uploads
- Disabling directory listing
- Adding security headers
- Protecting sensitive files
Why Steel Security Keeps Them Separate
Many tools blur the line between reporting and modifying. Steel Security does not. Scanning stays safe and non-intrusive. Hardening stays intentional and reversible. That separation gives administrators more confidence and better control.
Why We Recommend Both
Scanning tells you what is wrong. Hardening reduces the chance that a weakness turns into a compromise. Together, they create a more resilient WordPress security process.