No options. No proof.

You don’t see any options because it’s fully automatized.

As clearly described (read documentation and site https://www.wp-security-optimizer.com/), WP Security Optimizer does not require any configuration and the one thing you should do is activate it using the built-in plugin manager of WordPress.

An inspection engine monitors the traffic between clients and your Website, enhancing the security of your WordPress installation without any human intervention. Just install it, so your review is incorrect.