Security & Backup
The Security and backup group has 22 tools (high risk). It combines read-only security diagnostics with a small number of protective actions and a real backup mechanism around plugin and theme updates.
Security Diagnostics
Read-only checks the AI can run and summarize in plain language:
| Tool | Checks |
|---|---|
wp_security_scan | Overall security posture |
wp_verify_core_checksums | WordPress core files against official checksums |
wp_check_file_permissions | Risky file and folder permissions |
wp_check_wp_config_exposure, wp_check_readme_exposure, wp_check_admin_ajax_exposure | Publicly exposed files and endpoints |
wp_get_security_headers_report | HTTP security headers |
wp_check_database_prefix | Default database table prefix |
wp_check_firewall_plugin, wp_list_security_plugins | Installed firewall and security plugins |
wp_get_login_attempt_summary, wp_list_failed_login_attempts | Brute-force activity |
wp_privacy_compliance_check | Privacy-policy and related basics |
Protective Actions
wp_block_ip_address,wp_unblock_ip_address,wp_list_blocked_ips- manage an IP blocklistwp_list_user_sessions,wp_revoke_user_sessions- see and end logged-in sessions
Backup and Rollback
When the AI updates a plugin or theme with wp_update_plugin or wp_update_theme, Ops Pro first takes a real zip backup of exactly that plugin or theme folder. If the update breaks something, roll it back.
Update
The AI calls wp_update_plugin or wp_update_theme. A zip backup of the target folder is saved first.
Review
wp_list_update_backups lists available backups.
Roll back
wp_rollback_update restores the folder from its backup.
Related tools: wp_check_backup_plugin detects UpdraftPlus, BackWPup, WPvivid, Duplicator, or Jetpack Backup, and wp_schedule_backup_reminder sets a reminder to take a full backup.
The update backup covers the plugin or theme folder only. It is not a full site or database backup. Keep a separate full backup before large changes.
Staging Comparison
wp_compare_with_staging reports how this site differs from another Ops Pro site (plugin versions, theme, WordPress version, published content counts). Nothing moves between the two sites; it only reads and compares. Configure the shared key in Settings.