Ask Bedrock on the customer dashboard reads lockouts, scans, and rule blocks after the plugin checks in. It explains what happened and recommends actions you confirm. It does not stop all hacks.

Allowlisted apply actions: tighten login, require admin two-factor (Pro and Shield Care), raise key virtual-patch rules to block (Pro and Care), and guided lockdown on or off. Deep links open Alerts, cleanup, or a Care handoff export. The handoff is a timeline plus alerts with no Site keys. A person still does cleanup.

Ask Bedrock never runs shell or WP-CLI, never invents patches, never edits PHP, and never changes billing. Virtual-patch rule changes stay on Pro. Basic vs Pro.

Open Ask Bedrock or Was I hacked?.