Description: Stores the API key used for vulnerability lookups when Patchstack is selected (Pro). How it works: hardening_vuln_patchstack_key is used to authenticate vulnerability data requests. How to access / configure: WP Admin → AegisShield → Hardening → Vulnerabilities tab. Enter Patchstack API key. Save and run a check. Recommended setting: Use a dedicated key and rotate it if compromised.

Vulnerability Scan Source

Description: Selects which vulnerability intelligence source is used for checks (Pro). How it works: hardening_vuln_source determines how vulnerability data is fetched/compared against installed plugins/themes. How to access / configure: WP Admin → AegisShield → Hardening → Vulnerabilities tab. Choose the source. Save and run a vulnerability check. Recommended setting: Use the most reputable data source available in your setup; run checks after updates.

Description: Controls how aggressively role-risk analysis evaluates and flags capabilities. How it works: hardening_role_risk_mode selects the analysis profile used to compute role risk and recommendations. How to access / configure: WP Admin → AegisShield → Hardening → Roles tab. Select risk mode. Save and rerun the analysis. Recommended setting: Use a stricter mode on production sites with multiple admins.

Description: Analyzes role capabilities and highlights risky permissions (Pro). How it works: The role-risk tab evaluates capability sets, flags elevated permissions, and stores results in hardening_role_risk_results. How to access / configure: WP Admin → AegisShield → Hardening → Roles tab. Run role risk analysis. Review results and adjust roles if needed. Recommended setting: Minimize administrator accounts; ensure editors/authors don’t have dangerous capabilities.

Hardening Changes Logged

Description: Records hardening setting changes in the Activity Log (Pro). How it works: When hardening settings are saved, AegisShield emits audit events so you can track who changed protections and when. How to access / configure: WP Admin → AegisShield → Activity Log. Filter for Hardening events. Review changes after maintenance windows. Recommended setting: Enable Activity Log retention sufficient to audit hardening changes (30–90 days).

Description: Requires at least one symbol in passwords (when enforcement is enabled). How it works: password_require_symbol adds a symbol check to password validation. How to access / configure: WP Admin → AegisShield → Hardening → Password Policy. Enable symbol requirement. Save changes. Recommended setting: Enable for admins; consider optional for lower roles to reduce support burden.

Description: Requires at least one numeric character in passwords (when enforcement is enabled). How it works: password_require_number adds a numeric check to password validation. How to access / configure: WP Admin → AegisShield → Hardening → Password Policy. Enable number requirement. Save changes. Recommended setting: Enable; but prioritize length over complex rules if users struggle.

Require Lowercase Characters

Description: Requires at least one lowercase letter in passwords (when enforcement is enabled). How it works: password_require_lowercase adds a lowercase check to password validation. How to access / configure: WP Admin → AegisShield → Hardening → Password Policy. Enable lowercase requirement. Save changes. Recommended setting: Enable for admin/editor roles.

Require Uppercase Characters

Description: Requires at least one uppercase letter in passwords (when enforcement is enabled). How it works: password_require_uppercase adds an uppercase check to the password validation routine. How to access / configure: WP Admin → AegisShield → Hardening → Password Policy. Enable uppercase requirement. Save changes. Recommended setting: Enable for admin/editor roles.

Password Minimum Length

Description: Sets the minimum required password length when strong password enforcement is enabled. How it works: password_min_length is checked during password set/reset and weak passwords are rejected. How to access / configure: WP Admin → AegisShield → Hardening → Password Policy. Set minimum length. Save changes. Recommended setting: Use 12+ for admins; 10+ for lower roles if needed.

FAQs – Page 5 – Aegisify, Inc. – Free WordPress Security Audit and Scans.

Categories: AegisShield
Patchstack API Key
read more
Categories: AegisShield
Vulnerability Scan Source
read more
Categories: AegisShield
Role Risk Mode
read more
Categories: AegisShield
Role Risk Analyzer
read more
Categories: AegisShield
Hardening Changes Logged
read more
Categories: AegisShield
Require Symbols
read more
Categories: AegisShield
Require Numbers
read more
Categories: AegisShield
Require Lowercase Characters
read more
Categories: AegisShield
Require Uppercase Characters
read more
Categories: AegisShield
Password Minimum Length
read more

News & Events

Patchstack API Key

Vulnerability Scan Source

Role Risk Mode

Role Risk Analyzer

Hardening Changes Logged

Require Symbols

Require Numbers

Require Lowercase Characters

Require Uppercase Characters

Password Minimum Length

keep updated & don’t miss anything!