Pharos Shows Its Working

Field notes

The plugin separates assessment, hardening, and remediation from firewalling and malware scanning, explicitly declining to claim protections it does not provide. Its stated checks include WordPress.org checksum comparisons, published advisories, and 15 configuration tests; the page also says runtime protections leave wp-config.php and server configuration untouched. A future server-run tier is described as planned, partly to avoid WP-Cron delays on quiet sites.