=== 404ops Security Suite ===
Contributors: spwhite
Tags: security, monitoring, activity-log
Requires at least: 7.0
Tested up to: 7.1
Requires PHP: 8.0
Stable tag: 0.1.2
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

View local security configuration and saved observations from five independent 404ops plugins.

== Description ==

404ops Security Suite presents nine local checklist observations from Site Options, Upload Settings, SSL Monitor and Activity Log. Network Scanner availability appears separately.

Each check shows Positive, Negative or Unknown. Missing or unsupported components and unusable observations remain Unknown. Saved certificate and completed activity-chain observations must be no more than 24 hours old. These observations describe configuration and local evidence; they do not certify that a site is secure.

Opening the dashboard does not run scans, repair settings or make external requests. Upload anomaly screening detects suspicious uploads; it does not quarantine them. An intact local activity chain does not prove that its event contents are trustworthy.

The five components remain separate plugins with their own installation, updates and licences. Security Suite neither grants Pro rights nor replaces their settings screens.

== External services ==

Security Suite's checklist, administrator page and status interfaces read local settings and saved observations. They do not send checklist data to an external service. The companion does not register an AI action or an AI connection form; its bundled AI-client code is not exposed as a configured Suite feature.

The separate component plugins may contact services when their own optional features are configured and invoked. Their settings, disclosures and provider terms apply independently. Opening the Suite dashboard starts no scan or external request.

== Installation ==

1. Install the 404ops Security Suite ZIP through Plugins > Add New > Upload Plugin, then activate it.
2. Open 404ops > 404ops Security Suite with an administrator account that has the manage_options capability.
3. Install and activate the separate Free components through the same WordPress upload flow: Site Options, Upload Settings, SSL Monitor, Activity Log and Network Scanner.
4. Configure each component and run any required checks from that component's own settings page. Return to Security Suite to read the available observations.

The companion can run alone; its checklist remains Unknown until compatible components and usable observations are available. Each plugin continues to update separately.

== Frequently Asked Questions ==

= Does this plugin make external requests? =

The checklist reads local provider data and saved observations. Opening it initiates no external request or background scan. The separate components may contact services when their own configured features run; consult their documentation.

= Where is my data stored? =

Security Suite does not create tables or save checklist snapshots. It reads local settings and observations maintained by the separate components. It does not display event bodies, network targets or licence keys.

= Who can read the checklist? =

The admin screen, GET-only REST endpoint and local WP-CLI status command require manage_options. For WP-CLI, select an authorized user with --user. There is no write endpoint or repair command.

= Does Positive mean my site is secure? =

Positive reflects only the named configuration or saved observation. Review Negative entries in their component settings and investigate Unknown entries before drawing conclusions. Network availability is excluded from the nine checklist observations.

== Screenshots ==

1. Local checklist with the separate components installed in a QA site. The rows show configuration and saved observations, not a security certification.
2. Standalone dashboard when compatible components are unavailable: nine Unknown entries and a separate availability section.

== Changelog ==

= 0.1.2 =
* Clarify local-only status reads and the separate components' external-service responsibilities.
* Replace listing placeholders with branded artwork and genuine retained dashboard screenshots.

= 0.1.1 =
* Harden AI connection form nonce handling through the shared client patch.

= 0.1.0 =
* Local checklist with visible unknown observations, separate availability, and admitted read-only admin, REST and CLI access.

== Upgrade Notice ==

= 0.1.0 =
Initial companion version. Each component remains independently installed and updated.
