Getting started
Dashboard and security score
The Dashboard gives your site a security score out of 100, shows what is happening right now, and tells you which single change would raise the score most.
What it does
The score adds up fourteen checks worth 100 points, such as whether every administrator uses two-factor sign-in, whether a malware scan ran in the last week, and whether user enumeration is blocked. A score of 80 or more is grade A, 60 or more is B, 40 or more is C, and anything lower is D.
Below the score you see live counts: addresses locked out right now, active bans, sign-in attempts in the last 24 hours and when the security keys were last changed.
Why it matters
Security has many parts and it is easy to forget one. The score turns them into one number you can check in a few seconds, and Fix next takes you straight to the setting that is missing the most points.
Use it
- Open Stack Guard. The Dashboard is the first screen.
- Click View Breakdown to see each check, its points and a link to the tab that controls it.
- Click Fix next to go to the check worth the most points that is not done yet.
- Come back after each change: the score updates on the next page load.
Quick actions
Malware Scan starts a scan without leaving the Dashboard.
Force Logout signs every user out of every device. You are asked twice, and the second question lets you stay signed in yourself. Use it after a suspected break-in.
Clear Attempts forgets every recorded failed sign-in and lifts all lockouts, for example after a colleague locked themselves out.
Security Report shows a summary of the score, sign-ins over the last 7 days, malware, bans and two-factor use, with a button to copy it for an email or a ticket.
Which plan includes it
The score and the live counts are in every plan. Three checks (file monitoring, disabling application passwords and the cross-origin headers) are part of Pro: on Free they show a PRO mark, earn no points and link to the plans, so a Free site can reach 83, which is still grade A. Quick actions are part of Pro and need full access to Stack Guard.
How it works, for developers
- The nine checks and their points: two-factor for all administrators (15, or 8 if only some), security key
AUTH_KEYset and long enough (5), file monitoring on with a baseline (15, or 8 without one), no open malware findings (15, or 8 if none are critical or high), custom login address (10), a minimum password length (10), the breached password check (10), security headers (10), and a malware scan in the last 7 days (10, or 5 within 14 days). - The score is worked out on each page load from saved settings and records by
SMG_Admin::get_security_score(). Nothing is stored for it. - Force Logout ends every session in WordPress's session store, is limited to 5 uses in 5 minutes and is written to the activity log. Clear Attempts empties the
smg_login_attemptstable. - The Security Report is built in the browser from the same figures; no file is created or sent anywhere.
Quick answers about dashboard and security score
What does Dashboard and security score do in Stack Guard?
The score adds up fourteen checks worth 100 points, such as whether every administrator uses two-factor sign-in, whether a malware scan ran in the last week, and whether user enumeration is blocked. A score of 80 or more is grade A, 60 or more is B, 40 or more is C, and anything lower is D. Below the score you see live counts: addresses locked out right now, active bans, sign-in attempts in the last 24 hours and when the security keys were last changed.
Why use dashboard and security score on a WordPress site?
Security has many parts and it is easy to forget one. The score turns them into one number you can check in a few seconds, and Fix next takes you straight to the setting that is missing the most points.
How do I set up dashboard and security score?
1. Open Stack Guard. The Dashboard is the first screen. 2. Click View Breakdown to see each check, its points and a link to the tab that controls it. 3. Click Fix next to go to the check worth the most points that is not done yet. 4. Come back after each change: the score updates on the next page load.
Which Stack Guard plan includes dashboard and security score?
The score and the live counts are in every plan. Three checks (file monitoring, disabling application passwords and the cross-origin headers) are part of Pro: on Free they show a PRO mark, earn no points and link to the plans, so a Free site can reach 83, which is still grade A. Quick actions are part of Pro and need full access to Stack Guard.
Not running Stack Guard yet? It is free.
Download Free