Firewall, Malware Scanner, Two Factor Auth, and Comprehensive Security Features, powered by our 24-hour team. Make security a priority with Wordfence.
- Installs
- 5+ million
- Rating
- 4.7 (5K)
- Updated
- 31 days ago
Sucuri Security – Auditing, Malware Scanner and Security Hardening
The Sucuri WordPress Security plugin is a security toolset for security integrity monitoring, malware detection and security hardening.
- Active installs
- 600,000+
- #106 of 1,000
- Downloads, all time
- 37.6M
- 37,570,707
- Downloads, 30 days
- 623.2K
- 76.5K in the last 7
- Rating
- 4.2 / 5
- 386 reviews
- Last updated
- 17 days ago
- Oct 14, 2026
- Version
- 2.8.1
- 118 releases
Upkeep and compatibility
| Last updated | October 14, 2026Updated in the last 3 months |
|---|---|
| Tested up to | WordPress 7.1.4Covers WordPress 7.1.4, the current release |
| Needs WordPress | 6.0 or newer |
| Needs PHP | 7.4 or newer |
| First published | November 18, 2011 |
| Support, last two months | 2 of 2 threads resolved (100%) |
Reviews
4.2 / 5 from 386 reviews
| 5 stars | 288 |
|---|---|
| 4 stars | 21 |
| 3 stars | 9 |
| 2 stars | 4 |
| 1 star | 64 |
Downloads, last 30 days
What the author says it does
At Sucuri, we are dedicated to keeping your website safe and secure. With a focus on protection and monitoring, we offer solutions that help you stay ahead of potential threats for your WordPress site.
Our services include everything from malware detection to performance optimization, all designed to give you peace of mind.
We understand the importance of your online presence and are here to support you every step of the way. Join us, and let’s work together to ensure your website remains secure and resilient.
The Sucuri Security Monitoring Plugin is designed to safeguard your WordPress site with ease and reliability. Our plugin offers a range of essential security features, including:
- Security Activity Auditing: Keep track of every security-related event within your WordPress environment.
- File Integrity Monitoring: Detect unauthorized changes to your files and protect your site from potential vulnerabilities.
- Remote Malware Scanning: Regularly scan your site for malware with our remote scanner to ensure it’s clean and secure.
- Blocklist Monitoring: Receive alerts if your site is blocklisted by any major services, allowing for quick resolution.
- Security Hardening: Implement recommended security practices to fortify your site against threats.
- Post-Hack Security Actions: If the worst happens, our plugin helps you recover your site easily.
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Questions the author answers
What is the security activity auditing?
One of the standout features of our WordPress plugin is the comprehensive audit logging system. At Sucuri, we recognize that every change within your application can be a potential security event. From user logins to content modifications, our audit logs are designed to capture all security-related activities on your site.
What is the file integrity monitoring
Security File Integrity Monitoring has been fundamental to the world of security. It’s the act of comparing a known good with the current state. If the current state differs from the known good, you know you have a problem. This is the basis of a lot of host intrusion detection systems. We have built that into this plugin.
What is remote malware scanning?
Once this plugin is installed and activated, we automatically scan your site searching for known malware, viruses, blacklisting status, website errors, out-of-date software, and malicious code.
We access your site just like a regular visitor would as this helps us catch threats that try to stay hidden from bots or search engines. This feature is powered by our free website security scanner – SiteCheck.
What is the blocklist monitoring?
Another very interesting feature of the website Security Malware Scanner is that it checks various blocklist engines, including the following:
- Sucuri Labs
- Google Safe Browsing
- Norton
- AVG
- Phish Tank
- ESET
- McAfee Site Advisor
- Yandex
- SpamHaus
- Bitdefender
What is effective security hardening?
Our team cleans thousands of websites every day, giving us deep insight into the most effective ways to protect WordPress sites.
We’ve used that experience to create a list of actionable recommendations available in the Hardening & Prevention section of this plugin.
To name a few (note that this will depend on your environment), these actions are:
- Enable Website Firewall Protection
- Remove WordPress Version
What are the post-hack security actions?
Even with the strongest security measures, no site is 100% safe from hacking. When a compromise occurs, the Post-Hack section of our plugin guides you through four critical steps to help you regain control of your site:
- Update Secret Keys.
- Reset User Passwords.
- Reset Installed Plugins.
- Update Plugin and Themes.
These steps are designed to help you recover faster after a security incident.
Latest changelog entry
- Fix the Last Logins date and time column showing up blank when the site’s date or time format setting is empty or invalid. The WordPress default format is used instead.
- Fix logins completed through Two-Factor Authentication not being recorded in Last Logins or reported to other plugins that watch for logins.
Screenshots
WordPress Integrity Tool - Detects added, modified, and removed files. 
Integrity Diff Utility - Shows differences in the core WordPress files. 
Audit Logs and Malware Scanner - Reports suspicious events and malicious code. 
Sucuri Firewall - Settings visibility, audit logs, IP blocklisting, and cache.
Tagged
Plugins that share its tags
A true Web Application Firewall to protect and secure WordPress.
- Installs
- 100,000+
- Rating
- 4.9 (220)
- Updated
- 25 days ago
#356 by installs
Jetpack Protect
Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!
- Installs
- 100,000+
- Rating
- 4.6 (123)
- Updated
- 3 months ago
#522 by installs
Defender Security – Malware Scanner, Login Security & Firewall
WordPress security plugin with malware scanner, IP blocking, audit logs, antivirus scans, firewall, 2FA, brute force login security, and more.
- Installs
- 80,000+
- Rating
- 4.8 (334)
- Updated
- 32 days ago
#882 by installs
Security Plugin, Firewall & Malware Scanner with Auto Removal
Protect WordPress from malware, hackers, brute-force attacks & suspicious traffic. Includes firewall, login security, 2FA & vulnerability checks.
- Installs
- 40,000+
- Rating
- 4.8 (397)
- Updated
- 4 days ago
#886 by installs
SecuPress with Simple SSL – Simple and Performant Security
Protect your WordPress with SecuPress, analyze and ensure the safety of your website daily.
- Installs
- 40,000+
- Rating
- 4.1 (106)
- Updated
- 9 days ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin. The author takes donations at their donate page.