New critical signals
A warning can be triggered when a particularly relevant signal appears for the first time, such as modified core files, executable files in uploads, public debug output, no detected backup solution, or an unsupported PHP version.
Significant score drop
A warning can also be sent when the health index falls by at least eight points compared with the previous stored comparison state.
Cooldown
After a warning, WM Guard uses a cooldown of about 20 hours. This prevents the same condition from generating another alarm email on every daily run.