Incident → Receipt — the full triage flow
When PowerSEC raises an incident, you can go from alert to closed receipt without leaving the platform. Here is the canonical flow. 1. Receive the alert 2. Open the incident — see the evidence The incident page shows the matched signatures, the file paths, the snippet that…
Performance impact of PowerSEC
PowerSEC is designed to be lightweight. Here's what to expect for performance impact and how to tune if needed. Typical impact For a site with average traffic (1000 visits/day): | Metric | Impact | |--------|--------| | Page load time | +5-20ms (well under perceptible) | | CPU…
False positives in malware scans
Sometimes the scanner flags a legitimate file as suspicious or malicious. Here's how to handle it. What "false positive" means A false positive is a legitimate file that triggers heuristic detection because it has patterns commonly associated with malware: - Heavy obfuscation…
Site not syncing — what to check
If your site shows "Last sync: 24 hours ago" or "Connection lost" in the dashboard, work through this checklist. 1. Check the plugin is active WP admin → Plugins → confirm PowerSEC is Active. If it's been deactivated, reactivate it. Sync resumes within 5 minutes. 2. Check the…
Plugin installation troubleshooting
If the PowerSEC plugin won't install or activate, this guide walks through common causes. "The link you followed has expired" Your server's PHP uploadmaxfilesize or postmaxsize is smaller than the plugin ZIP. Fix: 1. SSH into your server 2. Edit php.ini (location varies; php…
Fetch open incidents across all sites
Useful for building a custom dashboard or piping incidents into your SIEM/Slack. Each incident includes the rule that fired, the affected site/files, the AI-suggested remediation, and a deep-link URL.