Great post. What about WP Security Scan Plugin? Is it ok to use, in order to see your WP security gaps?