Hi @nlpro
The direct config change in the database was obviously the last resort, thankfully it worked. Otherwise, I would have restored it from the backup, it’s not risky as long as you know what you are doing. Regarding my environment, I am on a non-managed Linode 40$ VPS, CentOS, CyberPanel+LSWS. I am managing it all by myself for the last 2 years.
I didn’t know about the ITSEC_DISABLE_MODULES option, but I did try all the debugging myself before taking the drastic step. There were no errors anywhere at all, the website was working fine, except the 500 error for wp-admin that lead me to immediately identify this plugin as the culprit. Even moving the better-wp-security folder from the plugins directory didn’t help. And, if I have to disable the modules then what is the use of it, better to disable the plugin itself.
I am not saying it’s a bad plugin, I might give it a try once again after a few more releases.
I am also okay to work through Developers if they need more information to debug the issue.