Posture
Security posture checks
Check exposed settings, XML-RPC, REST user enumeration, file editing, uploads risk, cron risk, and other local exposure.
Arximus Local Foundation
Arximus Local Foundation provides local security posture checks, hardening controls, generic attack blocking, login throttling, local logs, integrity basics, backup readiness, and a secure connection path to Arximus Cloud.
Local baseline
Arximus Local Foundation is the public WordPress.org plugin layer. It is not a cheap product tier. It is the local baseline and integration agent required for serious WordPress security and recovery.
It gives customers useful local visibility and protection while keeping the proprietary managed intelligence in Arximus Cloud.
Cloud-ready agent
The local agent applies signed policy, enforces decisions, records events, runs backup and restore tasks, verifies manifests, and keeps emergency protections available during cloud disruption.
The cloud sends structured signed data. The plugin does not execute remote code.
Local Foundation capabilities
The local layer is designed for trust, compliance, emergency control, and WordPress-aware enforcement.
Posture
Check exposed settings, XML-RPC, REST user enumeration, file editing, uploads risk, cron risk, and other local exposure.
Hardening
Apply clear, reversible hardening actions with local audit history.
Firewall
Block obvious malicious probes, sensitive file access attempts, traversal patterns, and suspicious WordPress requests.
Login
Reduce brute-force pressure with local rate limits, lockouts, and emergency unlock options.
Logs
Record local firewall, login, hardening, integrity, and backup readiness events.
Connect
Enroll the site into Arximus Cloud through signed identity, policy, and entitlement flow.
Local outcome
The plugin is designed to be readable, useful, secure, and WordPress.org-compatible.
Readable
Executable plugin code lives in the plugin package, not hidden on Arximus servers.
Safe
Cached policy and local protections help the site remain stable during cloud failure.
Private
Security telemetry is sent only after connection and according to documented settings.
Controlled
Customers can disconnect, export data, erase local data, and review what the plugin stores.
Trust layer
Arximus Cloud coordinates intelligence, but the local plugin gives WordPress-aware enforcement and recovery execution.
Next step
We can discuss local controls, cloud connection, WordPress.org compatibility, and emergency behavior.