What happens when you generate a report

When you generate a report from the AI Security Advisor, the plugin sends a privacy-safe summary of your site’s security data to the selected AI provider (WordPress AI Connectors or WP Security Ninja AI). No domains, URLs, IPs, usernames, or emails are sent. The report is then stored locally on your site and shown on the Security Advisor page.

How to generate a report

1. Go to Security Ninja → Security Advisor.
2. In the Full security report card, click Generate report.
3. Wait while the plugin shows staged feedback (e.g. “Preparing security data”, “Sending to AI”, “Waiting for response”). The report appears below when ready.

What data is sent to the AI

Only the following is sent; no personally identifiable information is included:

• Security score (0–100) and counts of passing, warning, and failing tests.
• Test results: test IDs and status only (e.g. pass / fail / warning). No test descriptions or file paths.
• Feature flags: whether the firewall, login protection, and two-factor authentication are enabled (on/off only).
• Aggregated event counts for the last 7 days: blocked logins, XML-RPC blocks, firewall events, failed logins. Optionally a short attack-activity summary (e.g. trend: up/down/stable and a one-sentence reason).
• Plan tier (free or pro) and report language (locale code) so the report can be generated in your chosen language.

What is not sent: domains, site URLs, IP addresses, usernames, email addresses, file paths, or any other personal or identifying data. No PII is collected or shared.

Where the report is stored

• Each generated report is saved locally in your WordPress database in the wf_sn_ai_reports table.
• The latest report is shown in the Full security report section. Up to the last 10 reports are listed under Previous reports; you can expand any item to view the full text.
• Reports remain on your server; only the privacy-safe input data (above) is sent to the AI provider for that single request.

Report structure

The AI returns a structured report with:

• Executive summary — overall security posture and attack-volume insight (e.g. up/down/stable in the last 7 days).
• Overview — short summary of security score and test results.
• Top improvements — prioritized, actionable recommendations (and optional links to KB articles).
• Activity (last 7 days) — interpretation of blocked/failed events and what to do next.

Written by Lars Koudal