Site Lockdown Security is free on WordPress.org
Local Security Signals
What it means: Risk Review focuses on conditions inside the WordPress environment, not just malware findings.
How to use it: Run it after setup, cleanup, and major maintenance to catch things that still need attention.
Risk Review Guide
Risk ReviewExplained
Risk Review surfaces local security concerns that can weaken a WordPress site even when malware is not present. It gives support teams a focused hardening checklist for settings, exposure points, permissions, and site conditions that should be corrected or intentionally accepted.
Local Risks
Review risks found on the site itself.Hardening
Find settings that weaken protection.Exposure
Spot conditions that increase attack surface.Decisions
Fix, ignore, or document each item.Reduce exposure after cleanup and setup
Risk Review is a practical hardening review. It helps teams identify local conditions that make a site easier to abuse, harder to support, or less ready for stronger protection.
Actionable Hardening
What it means: Results point to risks that can often be corrected with configuration, cleanup, permission, or software changes.
How to use it: Fix what can be safely corrected and document items that require a business or compatibility exception.
Accepted Risk
What it means: Some sites intentionally keep unusual settings, but those decisions should be visible.
How to use it: Use ignore or documentation only when the risk is understood and accepted.
Handoff Confidence
What it means: A clear risk review helps explain what was fixed and what still needs owner approval.
How to use it: Use it before handoff so the client or next technician knows what remains.
Important: Risk Review is about reducing exposure, not only removing infections.
