---
title: "Get Security Settings Ability: Read All Security Feature States in WordPress"
url: https://nexterwp.com/docs/nexter-get-security-settings/
date: 2026-05-29
modified: 2026-05-29
author: "sandip patel"
description: "The nexter/get-security-settings ability reads the current state of all Nexter Extension security features, returning enabled status and configuration for each."
word_count: 222
---

# Get Security Settings Ability: Read All Security Feature States in WordPress

## Key Takeaways

- nexter/get-security-settings reads the current configuration of all Nexter Extension security features and returns five states: advance-security, limit-login-attempt, captcha-security, custom-login, and svg-upload.
- nexter/get-security-settings is read-only and takes no input parameters, so it never changes any settings.
- Nexter Extension (Free) ships with this ability, and each feature includes an enabled flag plus a values object with settings such as header hardening, directory protection, max attempts, lockout duration, provider and keys, custom login URL slug, and SVG file upload permission.

The **nexter/get-security-settings** ability reads the current configuration of all Nexter Extension security features. It returns the enabled state and settings for advance security, login attempt limiting, CAPTCHA, custom login URL, and SVG upload controls. Use this ability to inspect security posture before making changes.

## Key Takeaways

This ability takes no input parameters.

It returns five security features: advance-security, limit-login-attempt, captcha-security, custom-login, and svg-upload.

Each feature includes an enabled flag and a values object with its specific settings.

This ability is read-only. It never changes any settings.

Use nexter/update-security-settings to modify individual security features.

## Required Setup

This ability ships with Nexter Extension (Free). If you do not have it installed, follow the guide on how to install and activate Nexter Extension first.

## What It Returns

The ability returns a **features** object with one key per security feature. Each entry contains **enabled** (boolean) and **values** (object). The five features are: **advance-security** (header hardening, directory protection), **limit-login-attempt** (max attempts, lockout duration), **captcha-security** (provider and keys), **custom-login** (custom login URL slug), and **svg-upload** (SVG file upload permission).

## When to Use This Ability

Check current security configuration before applying changes via nexter/update-security-settings.

Audit a site's security feature states as part of a site health check.

Verify login protection and CAPTCHA settings are correctly configured on a live site.

## Related Documentation

Update Security Settings Ability: nexter/update-security-settings

Get Performance Settings Ability: nexter/get-performance-settings

Get SMTP Settings Ability: nexter/get-smtp-settings