SeenSecure Help

Backups & Rollback Setup

Manage complete backups and protect your configuration changes with automatic rollback.

📊 Backup Summary & Configuration

The Backups panel gives you an overview of the backup system status. From here you can create manual backups, configure automation, and review recent activity.

Status Dashboard

System Status

Operational

Total Backups

7
of 7 max

Last Backup

2026-07-19
14:32:05 — Completed

Next Scheduled

2026-07-21
03:00:00

Quick Actions

Email Notifications
Progress 0%
💡 Info: The system stores a maximum of 7 backups. The oldest one is automatically deleted when a new one is created and the limit is reached.

⚙️ Auto-Backup Configuration

Enable Auto-Backup

Enabled

Frequency

Daily (recommended), Weekly, or Monthly

Backup Time

03:00 AM (server time) — Recommended outside peak hours

Notifications

Receive email on backup completion

📋 Activity Log (last 7 days)

Date Event Size Result
2026-07-19 14:32 Daily auto-backup 124 MB Completed
2026-07-18 14:32 Daily auto-backup 121 MB Completed
2026-07-17 15:10 Manual backup 128 MB Completed
2026-07-14 14:32 Daily auto-backup 119 MB Completed
2026-07-13 14:32 Daily auto-backup 120 MB Deleted (limit)
⚡ Recommendation: Keep auto-backups enabled with daily frequency. The system automatically deletes the oldest backups when the 7-backup limit is reached.

⏰ Scheduling Reliability (WP-Cron)

SeenSecure runs the scheduled backup using WordPress's internal cron (WP-Cron), which only fires when there's traffic on your site (front-end or wp-admin) — it's not a real operating-system cron, it's a mechanism that "piggybacks" on visits. If there's no traffic (e.g. overnight, or a staging site), the backup can be delayed or fail to run at the scheduled time.

That's why SeenSecure exposes a dedicated secret URL (found under Backups → scheduling section, inside your admin panel) that works as a remote trigger: every time it's called, it starts a backup RIGHT NOW — like pressing "Manual backup" from the panel, but triggered by your cron — using the backup type and folder selection you already have configured (to back up less or more, check/uncheck folders in your settings; that selection applies to every backup). Unlike calling the generic wp-cron.php (which runs everything WordPress has pending, not just your backup), this URL only starts the backup. Your own cron decides the real frequency — not the internal frequency/time schedule, which is only used for the WP-Cron and browser check.

🛡️ No duplicate backups: if your cron calls the URL while a backup is already running, SeenSecure won't start a second one — it simply advances the one already in progress, so two calls never step on each other.
🔒 This URL is secret: it includes a per-site unique token. Anyone who knows it could force backups on demand, as many times as they wanted. Don't share it or publish it.
✅ No whitelisting needed: this URL is already exempt from geo-blocking and rate limiting for any service calling it with the correct token, regardless of the country it comes from. You don't need to add any IP to any whitelist.

✅ Option 1: Real hosting cron

Most hosting panels (cPanel, Plesk, Hostinger's hPanel...) include a "Cron Jobs" or "Scheduled Tasks" section. Create one that runs exactly this line (copy your real secret URL from Backups → scheduling) at the frequency you want backups to run — each call starts a new backup, it's not just a check:

wget -q -O - https://tudominio.com/?ssc_backup_cron=TU_TOKEN_SECRETO >/dev/null 2>&1

This is a real operating-system cron — it does not depend on visits, on having a browser open, or on your PC being on.

✅ Option 2: External ping service

If you don't have access to your hosting's cron section, use a free service like cron-job.org or similar to call exactly your secret URL (yourdomain.com/?ssc_backup_cron=YOUR_SECRET_TOKEN) at the frequency you want backups to run.

⚠️ Ask your hosting provider: some hosts disable WP-Cron by default at the server level. If that's your case, you need one of the two options above no matter what — there's no alternative from within WordPress itself.
💡 SeenSecure already helps on its own: besides WP-Cron, the plugin checks the schedule on every site visit and, while you have any wp-admin screen open in your browser, it runs an extra check every minute (the same mechanism used by the File Integrity monitor), also advancing any already-running backup batch by batch. This reduces the problem a lot, but if literally nobody visits the site or opens wp-admin for hours, only a real cron (options above) can guarantee it 100%.
ℹ️ What each response means: calling the URL shows a plain-text message. backup started (...) means a new backup just started; backup already running (...), advancing means one was already in progress and this call advanced it a batch further; backup batch processed is the internal message the plugin itself uses between batches of a backup (you don't need to call this yourself). Set your external cron's frequency with this in mind: every call that finds no backup running starts a brand-new one.

🛡️ The same for the Plugins/Vulnerabilities scanner

The automatic updates scan (under Security Scanner → Plugins and Vulnerabilities → Schedule) uses exactly the same mechanism as backups: real WP-Cron every minute, browser polling while you have the admin open, and its own secret URL (different from the backup one) for an external cron, also exempt from geo-blocking and rate limiting. Everything explained above about WP-Cron reliability, how to set up your hosting's cron or an external service, and what each response means, applies the same way here — only the URL differs (find it on that same Schedule screen), and instead of starting a backup, it checks and runs the scheduled scan if it's due.

💾 Stored Backups

Complete list of all backups stored in the system. Each backup includes: WordPress core, plugins, themes, uploads, and all database tables.

Date Type Size Status Actions
2026-07-19 14:32 Automatic 124 MB Completed
2026-07-18 14:32 Automatic 121 MB Completed
2026-07-17 15:10 Manual 128 MB Completed
2026-07-17 03:00 Automatic 120 MB Completed
2026-07-16 03:00 Automatic 122 MB Completed
2026-07-15 03:00 Automatic 119 MB Completed
2026-07-14 03:00 Automatic 118 MB Pending deletion
📦 Backup contents: Each backup includes WordPress core, all installed plugins and themes (active or not), the uploads folder, the rest of your installation's files, and all database tables.

🚀 New Backup Features

The following features have been added to provide greater flexibility in managing your backups.

⚡ Streaming Backup (On-the-Fly)

Allows you to download the backup directly without storing it on the server. The .ssc file is generated and streamed to the browser in real time, saving disk space and processing time. Ideal for quick one-off backups.

  • No server disk space used
  • Downloads directly to the browser
  • Same contents as a full backup

📥 Import .ssc Backup

Allows you to upload an .ssc file from your computer into the system. The imported backup appears in the backup list with the type Imported and can be downloaded or restored like any other backup.

  • Only .ssc files are accepted
  • The backup is stored on the server for later use
  • Appears with the 📥 Imported label in the table

🔍 Selective Restore

Allows you to choose which items to restore from a backup instead of restoring everything. You can select folders, individual files, database tables, or restore everything. A directory tree with checkboxes appears for precise selection.

  • Interactive directory tree with checkboxes
  • Independent file and database selection
  • Must select at least one file or the database
💡 Where to find them: These features are available on the Backups page of the plugin. Look for the "New Features" section on each tab for more details.

⏪ Rollback Setup PRO

Rollback Setup is a PRO feature that creates a complete snapshot of ALL plugin settings before making changes. If something goes wrong or you do not confirm within the time limit, the configuration is automatically reverted to the previous state.

🔒 PRO Feature: This feature is only available in the PRO version of SeenSecure. Upgrade your license to get automatic rollback protection.

📸 How it works — Configuration Snapshot

  1. Start rollback: A complete snapshot of all plugin options is created in the database.
  2. Duration selection: You choose between 5 minutes and 4 hours as the test window.
  3. Monitored changes: All changes made during the period are logged in a live changes panel.
  4. Confirm or revert: At the end, you can Confirm changes to keep them or let the system auto-revert.

⏱️ Duration Selector

5 minutes

For quick single-change tests

10 minutes

A middle ground between a quick test and a moderate change

15 minutes

Enough time for moderate changes

30 minutes

Ideal for multiple configuration changes

1 hour

For complex changes that require verification

2 hours

For complete security audits

3 hours

For extensive reviews before confirming critical changes

4 hours

Maximum allowed — critical or massive changes

🎮 Available Actions

⏪ Restore now

Forces immediate revert of all changes made since the snapshot was created. All options return to their original values.

✅ Confirm changes

Cancels the scheduled rollback and keeps the current state. Changes become permanent and the snapshot is deleted.

🔄 Auto revert

If not confirmed before time expires, the system automatically reverts all changes to the saved snapshot.

📋 Live Changes Panel

During an active rollback, any setting you change in the plugin (not just the firewall — any SeenSecure protection) is logged in the "Detected changes" panel. Each line shows the modified option together with its value when the snapshot started and its current value.

Option Change
ssc_firewall_mode Monitoring modeProtection mode
ssc_protection_rate_limiting DisabledEnabled
ssc_protection_anti_injection DisabledEnabled

🔄 Floating Rollback Panel

When a rollback is active, a floating panel appears in the bottom-right corner of all WordPress admin pages. It shows the remaining time and allows quick access to confirmation or revert actions.

⏳ Active Rollback

📅 Time remaining: 12:34 — Auto-reverts if not confirmed

⚠️ Important: There can only be one active rollback at a time. The revert is complete: individual changes cannot be reverted, only the full set of options.

🔧 Troubleshooting

I don't see the floating panel even though I started a Rollback

The panel shows on every admin page while the rollback stays active, so if you don't see it, first check whether the timer already expired (the maximum window is 4 hours) — in that case the configuration has already reverted automatically and there's nothing pending to confirm.

I want to start a new Rollback but it won't let me

Only one rollback can be active at a time. Confirm or revert the one in progress from the floating panel before starting a new one.

I need to undo just ONE setting, not the whole configuration

Rollback Setup reverts the full set of options exactly as they were when the snapshot started, not individual changes. If you just want to undo one specific setting, change it back manually on its own screen instead of using "Restore now".

An imported backup isn't showing up in the list

Confirm the file has a .ssc extension — it's the only format accepted for import. If the file is correct and it still doesn't show up, check the Activity Log for the last 7 days to see if the import recorded an error.

Frequently Asked Questions

What happens if I don't confirm the changes before time runs out? Everything reverts automatically to the state before the snapshot — you don't need to do anything for the safety revert to happen.

Can I restore only part of a backup instead of everything? Yes, with Selective Restore: you pick specific folders, individual files, or database tables from a directory tree, instead of restoring the whole backup.

Does Streaming Backup use space on my server? No: it's generated and sent straight to your browser without being saved on the server, unlike a normal scheduled backup.

Are Rollback Setup and Scheduled Backups the same thing? No: Rollback Setup only reverts the plugin's configuration (its settings), and is automatic with a time window. Backups are full copies of the site (files + database) that you restore manually whenever you need to.