Md Jahid Shah

<p>BBH Security Insight runs a lightweight, read-only security audit on your WordPress installation and generates a professional Security Risk Report with color-coded risk levels (Critical, Warning, Safe), an overall security score (0–100), and detailed remediation recommendations.</p>
<p>This plugin is <strong>completely read-only</strong> — it never modifies files, never changes settings, and never sends data to external servers. It simply inspects your WordPress configuration and reports findings.</p>
<h4>Audit Checks Include</h4>
<ul>
<li><strong>WordPress Version Exposure</strong> — Detects if your WordPress version is exposed via readme.html or generator tags.</li>
<li><strong>Database Table Prefix</strong> — Checks if you are using the default <code>wp_</code> prefix.</li>
<li><strong>XML-RPC Status</strong> — Reports whether XML-RPC is enabled or disabled.</li>
<li><strong>DISALLOW_FILE_EDIT</strong> — Verifies if the built-in file editor is disabled.</li>
<li><strong>WP_DEBUG Status</strong> — Checks whether debug mode is active on production.</li>
<li><strong>Directory Browsing</strong> — Checks whether directory listing appears to be disabled.</li>
<li><strong>readme.html Exposure</strong> — Checks for the presence of the readme file.</li>
<li><strong>install.php Exposure</strong> — Checks if the installation script is accessible.</li>
<li><strong>wp-config.php Permissions</strong> — Verifies file permissions on this critical file.</li>
<li><strong>wp-content Permissions</strong> — Checks directory permissions on your content directory.</li>
<li><strong>User Enumeration Exposure</strong> — Checks for common user enumeration exposure patterns.</li>
<li><strong>Security Headers</strong> — Scans for CSP, HSTS, X-Frame-Options, Referrer-Policy, Permissions-Policy, and X-Content-Type-Options.</li>
<li><strong>Uploads PHP Execution</strong> — Checks if PHP execution is blocked in the uploads directory.</li>
<li><strong>Admin Username</strong> — Detects if an administrator uses the default “admin” username.</li>
<li><strong>Malware Heuristics</strong> — Performs lightweight checks for suspicious code patterns in active plugin and theme PHP files.</li>
</ul>
<h4>Features</h4>
<ul>
<li>One-click “Run Security Audit” button on the admin dashboard.</li>
<li>Professional, color-coded Security Risk Report with score (0–100).</li>
<li>Human-readable explanations and remediation recommendations for every check.</li>
<li>Dismissible admin reminder notice.</li>
<li>Fully internationalized — ready for translation.</li>
<li>Secure AJAX with nonce verification and capability checks.</li>
<li>WordPress Coding Standards compliant.</li>
<li>No external dependencies — no Composer, no third-party APIs.</li>
<li>Read-only — never makes changes to your site.</li>
</ul>
<h4>Additional Resources</h4>
<p>Looking for additional WordPress security guidance? Visit <a href="https://jahidshah.com" rel="nofollow ugc">jahidshah.com</a> for documentation, security resources, and professional assistance.</p>
<h3>Support & Contact</h3>
<p>Need help or want to report an issue? Visit our support page or open a support ticket on the WordPress plugin repository.</p>
<ul>
<li>Website: https://jahidshah.com/</li>
<li>Support: https://wordpress.org/support/plugin/bbh-security-insight/</li>
</ul>
<h3>Other Plugins</h3>
<ul>
<li><a href="https://wordpress.org/plugins/bbh-custom-schema/" rel="ugc">BBH Custom Schema</a> – Add custom JSON-LD schema to your website</li>
<li><a href="https://wordpress.org/plugins/bbh-seo-toolkit/" rel="ugc">BBH SEO Toolkit</a> – Advanced SEO & Structured Data Engine</li>
<li><a href="https://wordpress.org/plugins/aj-faq-block/" rel="ugc">AJ FAQ Block</a> – Display FAQs with a beautiful block</li>
<li><a href="https://wordpress.org/plugins/aj-card-element/" rel="ugc">AJ Card Element</a> – Display content in beautiful cards</li>
<li><a href="https://wordpress.org/plugins/aj-square-testimonial-slider/" rel="ugc">AJ Square Testimonial Slider</a> – Showcase testimonials in a slider</li>
<li><a href="https://wordpress.org/plugins/aj-category-posts/" rel="ugc">AJ Category Posts</a> – Display posts by category</li>
<li><a href="https://wordpress.org/plugins/ajx-filter-for-woo/" rel="ugc">AJx Filter for WooCommerce</a> – Advanced product filtering for WooCommerce</li>
</ul>


BBH Security Insight

Lightweight, read-only WordPress security audits with risk scoring, security checks, and actionable recommendations.

SecuSeek

<p><strong>SecuSeek – Web Security Scanner & Vulnerability Assessment</strong> brings comprehensive security scanning and vulnerability management directly into your WordPress admin dashboard. Monitor, analyze, and manage security findings from multiple scans in a centralized, user-friendly interface.</p>
<h4>🔍 Comprehensive Security Scanning</h4>
<p>SecuSeek performs extensive security scans and aggregates all findings in one place. View vulnerabilities across your entire web infrastructure with detailed information about each security issue.</p>
<h4>✨ Key Features</h4>
<ul>
<li><strong>Real-time Findings Dashboard</strong> – Monitor all security vulnerabilities with live updates</li>
<li><strong>Multi-Severity Classification</strong> – Findings categorized by Critical, High, Medium, and Low severity levels</li>
<li><strong>Advanced Filtering System</strong> – Filter by category, severity, confidence level, status, domain, and custom groups</li>
<li><strong>Detailed Vulnerability Information</strong> – Complete details including CVE/CWE identifiers, confidence scores, and evidence</li>
<li><strong>Actionable Remediation Steps</strong> – Get specific guidance on how to fix each vulnerability</li>
<li><strong>Reference Links</strong> – Direct links to official security advisories and documentation</li>
<li><strong>Export Capabilities</strong> – Export findings for reports and documentation</li>
</ul>
<h4>📊 What You Get With Each Finding</h4>
<ul>
<li><strong>Overview</strong> – Clear explanation of the vulnerability</li>
<li><strong>Detailed Information</strong> – CVE/CWE codes, confidence level, category, affected assets</li>
<li><strong>Detection Details</strong> – When and where the vulnerability was detected</li>
<li><strong>Recommended Actions</strong> – Immediate steps to take</li>
<li><strong>Remediation Steps</strong> – Detailed instructions to fix the issue</li>
<li><strong>External References</strong> – Links to security advisories and technical documentation</li>
</ul>
<h4>🎯 How It Works</h4>
<ol>
<li>Install and activate the SecuSeek plugin</li>
<li>Enter your SecuSeek API key from your account</li>
<li>SecuSeek automatically performs security scans on your configured domains</li>
<li>View all findings organized by severity in your WordPress dashboard</li>
<li>Filter and analyze vulnerabilities</li>
<li>Follow remediation steps to fix security issues</li>
<li>Export reports for documentation or compliance purposes</li>
</ol>
<h4>🛡️ Who Should Use This?</h4>
<ul>
<li><strong>Website Administrators</strong> – Monitor security across all your WordPress sites</li>
<li><strong>Security Professionals</strong> – Conduct regular security audits and vulnerability assessments</li>
<li><strong>Development Teams</strong> – Track and fix security issues during development</li>
<li><strong>Business Owners</strong> – Stay informed about your website’s security status</li>
<li><strong>Anyone using SecuSeek</strong> – Seamlessly integrate scan results into WordPress admin</li>
</ul>
<h4>🔗 External Services</h4>
<p>This plugin connects to SecuSeek’s external API to fetch and display security scan results – for complete details about data handling, privacy practices, and service transparency, visit <a href="https://secuseek.com/" rel="nofollow ugc">https://secuseek.com/</a>.</p>
<h4>💻 Modern Technology Stack</h4>
<p>Built with modern web technologies for a fast, responsive experience:<br />
* Alpine.js for reactive UI components<br />
* Font Awesome for clean iconography<br />
* WordPress HTTP API for secure external requests<br />
* WordPress Cron for scheduled scans</p>
<p>All source code is human-readable and available in the plugin directory.</p>
<h3>Terms and Privacy</h3>
<ul>
<li>Terms of Service: <code>https://secuseek.com/terms-and-conditions/</code></li>
<li>Privacy Policy: <code>https://secuseek.com/privacy-policy/</code></li>
</ul>


SecuSeek – Web Security Scanner & Vulnerability Assessment

Professional web security scanning and vulnerability assessment plugin. Comprehensive security analysis, real-time threat detection, and detailed secu …

BBH Security Insight vs SecuSeek – Web Security Scanner & Vulnerability Assessment