Sucuri Security – Auditing, Malware Scanner and Security Hardening

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 65% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A declining trend compresses what a buyer would pay.

Older reviews cite a run of hacks, poor support, and firewall lockouts, while the newest reviews report the scanner catching malware early with responsive support.

1. ★★★★★ grome32

   2mo ago

   Had a malware scare on an old site last year and Sucuri’s scanner caught it before it spread further. Support was responsive too. Recommend it for anyone managing multiple client sites.

   Read on wp.org ↗
2. ★★★★★ ealfred88

   8mo ago

   Solve my security problem cloaking, malicious database injections, that the Wordfence wasn’t able to remove.

   Read on wp.org ↗
3. ★★★★★ bogdantd

   2.4y ago

   No hack since Sucuri. Before hacked.

   Read on wp.org ↗
4. ★★★★★ dsitechmktg

   2.6y ago

   I’m really glad I set up this plugin because I was able to track suspicious logins and other security threats

   Read on wp.org ↗
5. ★★★★★ irinasaratov2

   2.6y ago

   Плагин сразу нашел вирус, который был у меня на сайте, чем очень мне помог, т.к. другие плагины его не видели. Но плагин сломал мне админку Вордпресса, я теперь по сути не могу управлять своим сайтом, т.к. кнопки в админке не работают, все плагины отображаются косо и криво (слетели CSS стили). Что мне делать, чтобы восcтановить CSS?

   Read on wp.org ↗
6. ★★★★★ richinberlin99

   3.2y ago

   Does not protectDoes not detect.Paid service, does nothing, and does not fix.Absolute waste of time and money.Look elsewhere

   Read on wp.org ↗
7. ★★★★★ helen_wpd

   3.3y ago

   Absolutely rubbish support, couldn’t even help me with a relatively simple set up issue. Don’t even bother downloading this plugin!

   Read on wp.org ↗
8. ★★★★★ sgogroup42

   3.5y ago

   i am here to warn you not join sucuri .its all an advertisments of them but in the real world my site got blocked fro, all anti viruses and tons of ssl problems on there system.there support very pooor they only answer when you want to buy somthing but when you have a real problem with there product that its not working and caousing tons of problems they tellign you open a ticket.so i did open a ticket and for few monthes still 0 HELP and 0 solver problems ON SSL that they provide.Be aware. This topic was modified 3 years, 4 months ago by sgogroup42.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.7.4 Improve the Two-Factor Authentication page to load the users list in pages, so it stays fast and reliable on sites with hundreds or thousands of users (for example, WooCommerce stores). Add a search box to the Two-Factor 2.7.4
2. — Version 2.7.3 Refactor AJAX handler to an explicit dispatch map for improved security and efficiency. Improve 2FA section with more UI clarity. Make light-mode default when no preference is defined. Correct inverted dark/light mode ic 2.7.3
3. — Version 2.7.2 Fix salt bug in the wp-config file. 2.7.2
4. — Version 2.7.1 Update on the encryption process for the WAF API key due to problems reported on some users. 2.7.1
5. — Version 2.7 Fixes a lot of readiness warning/errors from PCP. Updates how the plugin stores WAF API key. 2.7
6. — Version 2.6 Create new permissions library. Fix error causing deletion of WAF API key on clearing cache. 2.6

1 disclosed vulnerability on record for this plugin, fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 8.8 Sucuri Security <= 1.8.33 - Cross-Site Request Forgery ↗
   2022-09-14 CVE-2022-29489 Cross-Site Request Forgery (CSRF) Affects <= 1.8.33 Patched in 1.8.34

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 28 languages, 3 at 90% or more

Plus 4 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-12 700K+ → 600K+ down after 69 days in tier
2. 2025-12-05 600K+ → 700K+ up after 2 days in tier
3. 2025-12-03 700K+ → 600K+ down after 406 days in tier
4. 2024-10-23 800K+ → 700K+ down after 1 days in tier
5. 2024-10-22 700K+ → 800K+ up after 1 days in tier
6. 2024-10-21 800K+ → 700K+ down after 348 days in tier
7. 2023-11-08 900K+ → 800K+ down after 168 days in tier
8. 2023-05-24 800K+ → 900K+ up after 26 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 3 shared tags A
• Jetpack – WP Security, Backup, Speed, & Growth 3M+ installs · 3.8★ · 3 shared tags A
• Jetpack Protect 100K+ installs · 4.6★ · 3 shared tags A
• NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall 100K+ installs · 4.8★ · 3 shared tags A
• Defender Security – Malware Scanner, Login Security & Firewall 80K+ installs · 4.8★ · 3 shared tags A
• Security Plugin, Firewall & Malware Scanner with Auto Removal 40K+ installs · 4.7★ · 3 shared tags A

Embed this report card

Drop a live Pulse card for Sucuri Security – Auditing, Malware Scanner and Security Hardening into a readme, a review or a deck. It updates itself.

Sucuri Security – Auditing, Malware Scanner and Security Hardening: 600K+ active installs, 4.2★ (384 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/sucuri-scanner