Last updated: 9th July 2026 for CC Security Essentials version 1.0

Introduction

The Security Overview provides a high-level summary of your website’s current security posture.

Rather than presenting a long list of technical settings, it brings together the most important information in one place, helping you understand how well your website is currently protected and where improvements may be beneficial.

For many users, the Security Overview will become the starting point whenever they review their website’s security.

What You’ll Find on This Page

The exact information shown depends on the features you’ve enabled and whether CC Security Essentials Pro is installed, but the Overview typically includes:

your overall Protection Score
the status of key security features
recommended improvements
verification results where available
links to configure individual protections

The page is designed to help you understand your website’s current position without requiring detailed technical knowledge.

Understanding the Protection Score

The Protection Score provides a simple indication of how many important security recommendations have been applied.

It is intended as a guide rather than a definitive measure of your website’s security.

A lower score doesn’t necessarily mean your website is insecure, and a higher score doesn’t guarantee complete protection. Every website has different requirements, and some recommendations may not be appropriate for every installation.

Instead, the score should be viewed as a helpful indicator that encourages regular review and improvement.

Recommendations

One of the most useful parts of the Security Overview is the recommendations section.

Recommendations highlight security improvements that may be appropriate for your website.

Each recommendation is accompanied by an explanation that helps you understand:

what the recommendation does
why it matters
where you can configure it

Rather than encouraging every option to be enabled automatically, CC Security Essentials aims to provide enough information for you to make an informed decision.

Reviewing Individual Protections

The Overview also summarises the status of the plugin’s major protection features.

Depending on your configuration, you may see the current status of features such as:

XML-RPC Protection
REST API Protection
Comment Protection

Each section links directly to the relevant settings page, making it easy to investigate or change your configuration.

Security Health

The Security Overview works alongside Security Health.

While the Overview provides a concise summary, Security Health performs a more detailed review of your website’s configuration and highlights areas that may deserve further attention.

If you’re unsure why a recommendation appears in the Overview, Security Health usually provides additional context.

Verification

Where supported, the Overview also incorporates the results of built-in verification tests.

Verification is one of the distinguishing features of CC Security Essentials.

Instead of simply assuming that a protection is active, the plugin attempts to confirm that your website is behaving as expected.

Successful verification provides greater confidence that your chosen security settings are operating correctly.

When CC Security Essentials Pro Is Installed

Installing CC Security Essentials Pro extends the Security Overview with additional information.

Depending on the features you’ve enabled, the Overview may also include the status of:

Login Protection
Password Policies
Password Age Monitoring
REST Rules
Security Events

These additional sections integrate naturally into the existing Overview, providing a more comprehensive picture of your website’s security without changing the overall layout or workflow.

The core Overview remains available whether or not the Pro extension is installed.

Reviewing Your Website Regularly

Security isn’t a one-time task.

As your website evolves, you may:

install new plugins
change themes
add new users
introduce new functionality

Each of these changes can affect your website’s security.

We recommend reviewing the Security Overview periodically so that you remain aware of any new recommendations or changes to your website’s protection.

Frequently Asked Questions

Why isn’t my Protection Score 100%?

Not every recommendation is appropriate for every website.

For example, your website may intentionally allow public comments or require REST API access for applications that integrate with WordPress.

The goal is not necessarily to achieve a perfect score but to make informed decisions that suit your website’s requirements.

Should I enable every recommendation?

Not always.

Every recommendation includes guidance explaining when it is appropriate.

Take time to understand each recommendation before making changes.

Does the Protection Score guarantee my website is secure?

No.

Website security depends on many factors, including:

keeping WordPress updated
maintaining plugins and themes
using strong passwords
following good security practices

The Protection Score is designed to summarise the protections provided by CC Security Essentials rather than measure every aspect of website security.

What if something changes after I update WordPress?

It’s good practice to revisit the Security Overview after significant updates.

Although WordPress updates are generally compatible with CC Security Essentials, reviewing your website afterwards helps confirm that your chosen protections are still configured as expected.

Continue with: