Hi @kmarusek,
I ran into the same issue and after debugging I saw the following code in the plugin.
wp-content/plugins/better-wp-security/core/modules/site-scanner/api.php
$cached = set_site_transient( $cache_key, $cache, (int) $mapped[‘max-age’] );
What if max-age is 0, it is going to be cached forever.
Maybe good to check if $mapped[‘max-age’] > 0
Regards,
SLASH2