iThemes Security Pro 8.4.2

-Enhancement: Log Plugin activation/deactivation/uninstall and Theme switching in the User Logging module.
-Enhancement: Log WordPress, Plugin and Theme installs & updates in the Version Management module.
-Tweak: Use Logging API for tracking Notification Center errors.
-Tweak: Register Scheduler Events whenever the plugin build changes.
-Tweak: Allow for filtering logs by any module recorded.
-Bug Fix: Account for any CLI PHP SAPI instead of just WP-CLI in the SSL Module.
-Bug Fix: Incorrect notice for delayed plugins if the custom per-plugin setting had been switched off.
-Bug Fix: Incorrect User Logging log when logging in via the Login Interstitial framework.

-New Feature: Granular Version Management control. Select which plugins or themes to auto-update. Optionally, use the delay feature to wait for a release to be stable for a certain number of days for sensitive or critical plugins.
-New Feature: Optionally, receive an email notification whenever your Grade Report changes. A maximum of once per-day.
-Tweak: Grade report notice styling and disable the "Resolve Issues" button when working.
-Tweak: Add Security Check Pro debug page.
-Tweak: Display a time diff until the next event on the Debug page.
-Compatibility Fix: 404 detection for plugins that mark is_404 later in the hook sequence.
-Bug Fix: Plugin and theme updates were hidden after updating a single package via the Grade Report.
-Bug Fix: Correct grammar for Email Two-Factor method.
-Bug Fix: Warning when using Grade Report when the Password Requirements module is disabled by constant.
-Bug Fix: The Dashboard Widget did not count users who didn't have a primary provider set.
-Bug Fix: Show "File Scan" button on dashboard widget even if "Write to Files" is disabled.

-Enhancement: Add setting to customize On-Board text.
-Enhancement: Require user to confirm Two-Factor email method when signing up via On-Boarding. Can be disabled by disabling the new Two-Factor Email Confirmation email in the Notification Center.
-Enhancement: Add setting for customizing who is required to use two-factor when "Vulnerable User Protection" and "Vulnerable Site Protection" are enabled and who is presented the On-Board flow.
-Tweak: Check if an IP is blacklisted on page load for compatibility with servers that cannot process server configuration level bans immediately.
-Bug Fix: Provide better error messages in case the server for SSL support detection is non-responsive.