# Debug Mode Enabled

## What This Means

This finding indicates that WordPress debug mode is enabled on your site.

Debug mode is intended for development and troubleshooting, not for production use.

---

## Why It Matters

When debug mode is enabled, your site may display:

- error messages  
- warnings and notices  
- file paths  
- system details  

This information can be used by attackers to:

- understand your site structure  
- identify vulnerabilities  
- gain insight into your environment  

---

## How Steel Security Detects This

Steel Security checks whether WordPress debug settings are enabled.

This includes:

- debug output being displayed  
- debug logging configuration  

If debug mode is active in a way that exposes information, it is flagged.

---

## How to Fix It

To resolve this issue:

- disable debug mode in your WordPress configuration  
- ensure errors are not displayed publicly  
- use logging instead of on-screen output for troubleshooting  

You may also use Steel Security hardening controls related to debug settings.

---

## What to Expect After Fixing

After disabling debug mode:

- error messages will no longer be visible to visitors  
- sensitive system details will be hidden  
- your site will appear more stable and secure  

---

## How to Verify

To verify the fix:

1. reload your site and observe for visible errors  
2. confirm that warnings and notices are not displayed  
3. optionally review logs for captured errors  

---

## Common Causes

- debug mode left enabled after development  
- troubleshooting changes not reverted  
- misconfigured environment settings  

---

## Best Practices

- disable debug mode in production environments  
- use error logs for troubleshooting instead of display  
- separate development and production configurations  
- review debug settings regularly  

---

## Related

- [Disable Debug Mode](https://docs.steelsecurity.com/books/hardening-reference/page/disable-debug-mode)
- [Limit Exposure of System Info](https://docs.steelsecurity.com/books/hardening-reference/page/limit-exposure-of-system-info)
- [Hide Version Information](https://docs.steelsecurity.com/books/hardening-reference/page/hide-version-information)