內容簡介
Rooted Dev Studio Security Toolkit 提供一個透明的基準，幫助保護 WordPress 網站，避免模糊的評分或破壞性的自動修復。此外掛專注於安全性，確保網站運行的穩定與安全。
【主要功能】
• 可配置的失敗登入限制及臨時鎖定
• 管理員可檢視與清除鎖定記錄
• 時間基礎的雙重身份驗證
• 本地安全時間線記錄重要事件
• 安全配置檢查 HTTPS 和更新
• 重要變更的電子郵件通知
外掛標籤
開發者團隊
② 後台搜尋「Rooted Dev Studio Security Toolkit」→ 直接安裝（推薦）
原文外掛簡介
Rooted Dev Studio Security Toolkit provides a transparent baseline for protecting a WordPress website without hiding important behavior behind vague scores or destructive automatic fixes.
Features include:
Configurable failed-login limiting with short, per-login-and-IP temporary lockouts.
Administrator controls for reviewing and clearing active Rooted Dev Studio Security Toolkit lockouts.
Time-based two-factor authentication with single-use recovery codes.
A local Security Timeline for important authentication, administration, hardening, and file events.
Hashed origin records without storing raw IP addresses in security events.
Baseline browser security headers.
Reversible theme and plugin editor protection.
Optional XML-RPC authentication restriction.
Optional public REST user endpoint restriction.
Security configuration checks for HTTPS, updates, debug display, administrator access, WordPress salts, and PHP.
Read-only file fingerprinting with expected and unexplained change review.
A bounded, manual suspicious-code scan for selected high-risk PHP patterns.
Email alerts for important software and administrator changes and repeated-login lockouts.
Local retention controls and automatic cleanup.
Rooted Dev Studio Security Toolkit does not transmit site data to Rooted Dev Studio or any third party. It does not execute, edit, quarantine, restore, or delete scanned files. A clean scan is not a guarantee that a website is free of malicious code. Rooted Dev Studio Security Toolkit does not replace secure hosting, backups, software updates, or professional incident response.
