by
Sucuri
4.2 (384 reviews)
Sucuri Security - Auditing, Malware Scanner and Security Hardening
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
Sucuri Security ranks #106 among WordPress.org plugins with 600,000+ active installations, is #25 of 4,482 in the Security category, a 4.2/5 rating from 384 reviews, and was last updated Sep 9, 2026. Data from WordPress.org, refreshed twice daily — see methodology.
Compatible with WP 7.1
v2.8
Current Version v2.8
Updated 6 days ago
Last Update on 09 Sep, 2026
Refreshed 11 hours ago
Last Refreshed on
#25 of 4,482 in Security
Top 1% by installs
Downloads +843.6% this week
Actively maintained
Rank
#106
—
No change
Active Installs
600K+
-7.7%
KW Avg Position
13
0.2 better
Downloads
33.5M
+9,592 today
Support Resolved
100%
—
No change
Rating
84%
Review 4.2 out of 5
4.2
(384 reviews)
Next Milestone 700K
600K+
700K+
15
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 65,218 more installs to reach 700K+
Rank Changes
Current
#106
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.2
384 reviews
Overall
84%
5
286
(74%)
4
21
(5%)
3
9
(2%)
2
4
(1%)
1
64
(17%)
Support Threads Overview
Resolved
Unresolved
1
Total Threads
1
Resolved
0
Unresolved
100%
Resolution Rate
Security History
Source: WPVulnerability2 known vulnerabilities on record · 1 in the last 24 months · checked 1 week ago
-
UNPATCHED
CVE-2026-73033 · No fix released
-
Sucuri Security – Auditing, Malware Scanner and Security Hardening [sucuri-scanner] < 1.8.34
CVE-2022-29489 · Fixed in v1.8.34
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.8
- Last Updated
- Sep 09, 2026
- Requires WP
- 6.0+
- Tested Up To
- 7.1
- PHP Version
- 7.4 or higher
- Author
- Sucuri
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.2
- Reviews
- 384
- Support Threads
- 1
- Resolved
- 100%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
6K+ installs
#2,752
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#1,007
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#8
Wordfence Security - Firewall, Malware Scan, and Login Security
5M+ installs
#11
Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)
3M+ installs
#17
Hostinger Tools
3M+ installs
#20
WPS Hide Login
2M+ installs
#27
Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention
1M+ installs
#33
WP Super Cache
1M+ installs
#38
TL;DR
AI summary of the plugin's readmeThis plugin is for WordPress site owners who want to monitor their site's security and detect malware or unauthorized changes. It provides file integrity monitoring, malware scanning, and hardening tools to detect and respond to security threats.
- Security activity auditing
- File integrity monitoring
- Remote malware scanning
- Blocklist monitoring
- Security hardening
- Post-hack security actions
Frequently Asked Questions
Common questions about Sucuri Security - Auditing, Malware Scanner and Security Hardening
One of the standout features of our WordPress plugin is the comprehensive audit logging system. At Sucuri, we recognize that every change within your application can be a potential security event. From user logins to content modifications, our audit logs are designed to capture all security-related activities on your site. These logs provide you with crucial visibility into your website's operations, answering key questions such as: * Who logged in? Understanding who accesses your site is fundamental to ensuring that only authorized users are logging in. This helps in identifying any unauthorized access attempts, allowing you to respond swiftly to potential security breaches. * What changes were made? Essential for maintaining its integrity and security. By knowing what modifications have been made, you can quickly pinpoint any suspicious activities or errors that need attention. With the release of version 1.9.6, we've enhanced this feature, allowing you to filter audit logs by event types and dates. This improvement offers you even greater insight into your site's activities, enabling proactive security management.
Security File Integrity Monitoring has been fundamental to the world of security. It's the act of comparing a known good with the current state. If the current state differs from the known good, you know you have a problem. This is the basis of a lot of host intrusion detection systems. We have built that into this plugin. It will create a known good the minute the plugin is installed. This will be of all the directories at the root of the install, including plugins, themes and core files.
Once this plugin is installed and activated, we automatically scan your site searching for known malware, viruses, blacklisting status, website errors, out-of-date software, and malicious code. We access your site just like a regular visitor would as this helps us catch threats that try to stay hidden from bots or search engines. This feature is powered by our free website security scanner – SiteCheck.
Another very interesting feature of the website Security Malware Scanner is that it checks various blocklist engines, including the following: Sucuri Labs Google Safe Browsing Norton AVG Phish Tank ESET McAfee Site Advisor Yandex SpamHaus Bitdefender These are some of the largest blocklisting entities, each having the ability to directly impact your brand's online reputation. By synchronizing with their environments we're able to tell you whether any of them are negatively flagging your website with a security related issue. If they do, then via our website security product, we're able to help you get off of the security blocklist.
Our team cleans thousands of websites every day, giving us deep insight into the most effective ways to protect WordPress sites. We've used that experience to create a list of actionable recommendations available in the Hardening & Prevention section of this plugin. To name a few (note that this will depend on your environment), these actions are: Enable Website Firewall Protection Remove WordPress Version Block PHP Files in Uploads, wp-content and wp-includes directories. Verify default admin account. Disable Plugin and Theme Editor. Automatic Secret Keys Updater.
Even with the strongest security measures, no site is 100% safe from hacking. When a compromise occurs, the Post-Hack section of our plugin guides you through four critical steps to help you regain control of your site: Update Secret Keys. Reset User Passwords. Reset Installed Plugins. Update Plugin and Themes. These steps are designed to help you recover faster after a security incident.
Security features only matter if you know when something's wrong, that's why we included a set of customizable security alerts inside our Settings > Alerts section. You can also customize how frequently you want to be alerted of security related events.
This is by far the coolest security feature Sucuri has to offer everyday website owners. It's an enterprise grade Website Firewall designed to give you the best security protection any website can hope for. It protects your website from a variety of website attacks, including: Denial of Service (DOS / DDOS) Attacks. Exploitation of Software Vulnerabilities. Zero Day Disclosure Patches. Brute Force Attacks against your Access Control Mechanisms. This is coupled with a number of features like: Performance Optimization. Advanced Access Control Features. Failover and Redundancy. This is not included as a free option of the plugin, but is integrated so that if purchased you are able to activate. If you prefer to leverage the Sucuri Firewall product by itself, you have the option to operate the Website Firewall WordPress Security plugin in standalone mode. The Sucuri WordPress Security plugin is built by the team that is known for their proactive approach to security. It is built using intelligence gathered from thousands upon thousands of remediation cases, millions of unique domain scans and 10's of millions of website security attack blocks.
Our expertise has given us deep insight into what truly helps prevent security incidents, and we've cooked that knowledge directly into this plugin. To give you a sense of what this security plugin offers, here are some of its most powerful features: WordPress core, PHP, plugins and themes vulnerability scanners. Firewall Management. Events Reporting (auditlogs). Headers Management. Hardening & Prevention. Post-Hack Actions. Last Logins. And there's more! And while other security plugins may offer similar features, few deliver them as effectively as we do. Ask around! :)
No, this is a free plugin that we offer at no charge. It does not mean you get a free account.
