=== SecureWP ===
Contributors: securewpteam
Tags: security, firewall, malware scanner, hardening, vulnerability
Requires at least: 6.0
Tested up to: 6.7
Requires PHP: 8.1
Stable tag: 1.0.6
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Professional Security, Advanced Firewall, and Deep Malware Scanning for WordPress.

== Description ==

SecureWP is a comprehensive WordPress security plugin that protects your site with an advanced firewall, deep malware scanning, vulnerability monitoring, and security hardening.

**Core Features:**

* **Deep Malware Scanner** — File integrity checking, content scanning, cloud-powered analysis with signature-based detection
* **Web Application Firewall** — Real-time request filtering, SQL injection and XSS protection, IP blocking, custom rules engine
* **Security Hardening** — One-click WordPress hardening tweaks, login protection, HTTP header security, file permission checks
* **Vulnerability Monitoring** — Tracks known vulnerabilities in plugins, themes, and WordPress core with severity ratings
* **Audit Log** — Tracks logins, plugin changes, theme switches, user management, and sensitive option changes
* **Email Notifications** — Configurable alerts for scan results, malware detection, firewall blocks, and login lockouts
* **Cloudflare Integration** — Connect your Cloudflare account for enhanced IP blocking

**Security Architecture:**

* Cryptographic key management with HKDF key derivation
* HMAC-SHA256 signature verification for cloud communications
* Nonce-based replay protection on all API endpoints
* Capability checks and CSRF protection on every admin action

== Installation ==

1. Upload the `securewp` folder to the `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Navigate to the SecureWP menu in your admin sidebar
4. Follow the setup wizard to configure your security preferences

== Frequently Asked Questions ==

= What PHP version is required? =

SecureWP requires PHP 8.1 or higher.

= Will this slow down my site? =

No. The firewall runs with minimal overhead. Scans are processed asynchronously with adaptive batch sizing to respect server resources.

= Does it work with other security plugins? =

SecureWP can coexist with other security plugins, but running multiple firewalls simultaneously is not recommended. Disable other WAF features if using SecureWP firewall.

= How does the cloud scanner work? =

Files are hashed locally and checked against a cloud database of known-good and known-malicious signatures. Only unknown files are uploaded for deep analysis. All communication is cryptographically signed.

== Changelog ==

= 1.5.0 =
* Deep malware scanner with cloud-powered analysis
* Web application firewall with custom rules engine
* Security hardening module with one-click tweaks
* Vulnerability monitoring for plugins, themes, and core
* Audit log with comprehensive event tracking
* Email notification system with configurable alerts
* Cloudflare integration for enhanced IP blocking
* Consolidated settings page with tabbed interface

== Upgrade Notice ==

= 1.5.0 =
Major release with full security suite including scanner, firewall, hardening, and vulnerability monitoring.
