- Reduces common WordPress attack surface (headers, hardening, login protection)
- Adds observability (activity logging + login attempts + file integrity baselines)
- Adds incident-oriented tooling (malware workflows like incremental scan / incidents / profiles / scheduler tabs in UI)
- Provides safer DB admin utilities (notably DB prefix management with a “don’t forget the internal keys” phase)
