I'm using SecurityCheck Pro latest version on Joomla 3.9.11 and php 7.3.8.
Once in a while, it says "Forbidden access" to the superadmin. So far I had to disable all the package/subcomponents using phpmyadmin, in order to be able to log in again. It's kinda frustrating...
How can I set it up, so it won't log out the admin again (and maybe without having to add the current IP to the whitelist every time the admin logs in in the backend - this is variable)?
Does this happens when you are logged in twice with the same account? If so remember that the "user session protection" feature forbids this and you get that message.
If not please export and send me Securitycheck Pro logs to check which rule is causing this behavior. Since a couple of versions ago, when I improved the extension to apply rules also to users with administrative accounts, some false positives could arise for admin profiles.