Hi @kodgems,
Thank you for reaching out.
Wordfence will show a different icon for parts of the scan depending on the results and the options chosen in Wordfence > Scan > Scan Options and Scheduling. For example, if the scan option Scan files outside your WordPress installation is deselected and there are files outside of your WordPress installation, Wordfence will show a yellow warning symbol for Server State to warn you. Likewise, if you have outdated plugins, or if Scan for out of date, abandoned, and vulnerable plugins, themes, and WordPress versions is deselected, a warning or disabled icon will be shown for Vulnerability Scan instead of a checkmark.
You can read more about what details are checked in each scan stage here: https://www.wordfence.com/help/scan/#scan-stages
If you’re seeing something different, can you please provide a screenshot or a more detailed description? You can email us a screenshot at wftest @ wordfence . com for privacy. If you do, please respond here to let us know.
Thanks,
Margaret