Understanding Findings

Findings are grouped by severity and category so administrators can focus on the most meaningful issues first.

Scanning Free / Pro Updated August 9, 2026

Critical findings

Critical findings usually indicate exposed artifacts, highly sensitive disclosure, or a dangerous configuration that should be handled quickly.

Warnings

Warnings identify meaningful hardening gaps or moderate exposure that should be scheduled promptly but may not represent an immediate emergency.

Passed checks

Passed checks confirm that Steel did not detect a problem for that specific control or finding path.

Skipped checks

Skipped checks usually mean a check could not be completed safely in the current environment or is not applicable.

What Steel Security checks

Examples include default `admin` detection, XML-RPC availability, public user registration risk, author and REST enumeration exposure, public readme/license files, `.env` files, SQL dumps, backup archives, and uploads PHP execution status.

Continue reading

Artifact and Backup Discovery Steel Security looks for publicly reachable files and archives that often exist by accident rather than by design.

Quarantine, Restore, and Permanent Delete Quarantine is an operator-reviewed safety workflow for file findings. It is intentionally more conservative than automatic deletion.

Hardening Overview The Hardening page documents and controls preventive changes using the same logic that feeds related scanner findings.