=== Vyntic Guard ===
Tags: security, brute force, login security, malware scanner, activity log
Requires at least: 6.4
Requires PHP: 8.0
Tested up to: 7.1
Stable tag: 1.7.1
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

WordPress security with brute-force protection, IP blocking, activity logs, hardening, security checks, and malware scanning.

== Description ==

Vyntic Guard Free focuses on security controls that can run locally on your WordPress installation without requiring an account or license key.

= Free features =

* Security dashboard with configuration score
* Brute-force protection with progressive lockouts
* Blocked IP manager with manual unblock controls
* Activity logging and configurable retention
* WordPress hardening and fingerprint-reduction controls
* Custom public login URL
* Security configuration check
* Malware scanner with review, encrypted quarantine, recovery-copy download, and permanent delete actions
* AJAX settings saves and global success/error notifications
* Fixed desktop plugin sidebar and tablet/mobile off-canvas navigation

= Vyntic Guard Pro =

Vyntic Guard Pro is an optional add-on distributed separately. It adds:

* Two-factor authentication
* Authenticator App (TOTP) with local QR enrollment
* Email, SMS, and WhatsApp OTP
* Passkey verification
* CAPTCHA and Google reCAPTCHA integration
* SMTP and Twilio provider configuration
* Stealth Engine for public WordPress path virtualization
* Drag-and-drop Login and 2FA Verification Page Builder

Learn more about Pro at https://vynatics.corsysltd.com/vyntic-guard

== Installation ==

1. Upload the `vyntic-guard` folder to `/wp-content/plugins/`, or install the ZIP through Plugins > Add New > Upload Plugin.
2. Activate Vyntic Guard.
3. Open Vyntic Guard in wp-admin.
4. Review Login Protection and Security Tweaks before changing authentication URLs on a production site.
5. Run the Security Check and Malware Scanner as needed.

== Frequently Asked Questions ==

= Does the free plugin require a license key? =

No. Vyntic Guard Free does not require a license key or account.

= Does changing the login URL rename WordPress core files? =

No. It exposes a custom login route and changes WordPress-generated login links while leaving WordPress core files in place.

= Does the malware scanner automatically delete files? =

No. Findings are presented for administrator review. Destructive actions require explicit administrator action.

= Are Pro features included but disabled in the free ZIP? =

No. Premium implementation code is distributed separately in the Vyntic Guard Pro add-on.

== External services ==

The malware scanner can request official WordPress core checksums from `api.wordpress.org` when performing core-file integrity checks. The request contains the installed WordPress version and locale required by the WordPress checksum API. No Vyntic account is required for this request.

The Security Check can request the site's own public home page to inspect visible WordPress fingerprints. This request targets the site itself.

== Privacy ==

Vyntic Guard Free does not require a Vyntic account and does not send site security logs to Vyntic servers. Activity logs and blocked-IP data are stored in the site's WordPress database.

== Changelog ==

= 1.7.1 =
* Rebuilt the Vyntic Guard admin experience around the Security Command Center UI references.
* Refined the header, navigation, overview, login protection, security check, malware scan, cards, tables, responsive layout, and Pro upgrade surfaces.
* Added copy-login-URL interaction and printable security report export.
* Reset WordPress wp-toolbar padding on Vyntic Guard screens.
* Sidebar upgrade card scrolls with the navigation instead of remaining pinned.
* Fixed the Login Protection Protection Summary layout with isolated icon, label, value, and meta selectors; full-width responsive alignment is preserved.
* Moved quarantine storage into a plugin-specific WordPress uploads directory and encrypted quarantined payloads at rest.
* Removed server-side arbitrary-path restore and added nonce-protected recovery-copy downloads.
* Reworked brute-force tracking to bounded storage and removed attacker-controlled per-IP/per-username transients.
* Sanitized settings before extension hooks receive them and moved admin menu CSS into the enqueued stylesheet.
* Expanded unique prefixes for PHP classes and admin/AJAX actions.

= 1.7.0 =
* Renamed the plugin to Vyntic Guard and changed the WordPress.org slug/text domain to `vyntic-guard`.
* Split premium features into the separately distributed Vyntic Guard Pro add-on.
* Added a Free vs Pro comparison table and Upgrade to Pro button.
* Kept brute-force protection, hardening, activity logging, custom login URLs, security checks, and malware scanning in Free.
* Added extension hooks used by the Pro add-on without bundling premium implementation code in the Free package.
* Kept the custom login URL disabled by default on new installs; administrators can enable it explicitly from Login Protection.
