Sucuri Security - Auditing, Malware Scanner and Hardening 2.5

Does "Sucuri Security - Auditing, Malware Scanner and Hardening" work with WordPress 6.9 and PHP 8.1.12? A smoke test was performed on .

Summary

Errors
1PHP notices
5PHP deprecation warnings
No JavaScript exceptions
All test pages loaded successfully
No resource errors
Performance

Memory usage: 181.72 KiB
The average PHP memory usage increased by this amount after activating by the plugin.

Page speed impact: insignificant.
The plugin didn't make the site noticeably slower.

Environment
WordPress version6.9
PHP version8.1.12
MySQL version10.6.10
PHP memory limit512M
Plugin Info
Last updated
Active installs 600,000+
WordPress.org page https://wordpress.org/plugins/sucuri-scanner/
Badges

WordPress compatibility badge PHP compatibility badge

Get badge code

Pages 11

Plugins ‹ Test site — WordPress

Page screenshot: Plugins ‹ Test site — WordPress
URL /wp-admin/plugins.php?plugin_status=all&paged=1&s
Requested URL /wp-admin/plugins.php?action=activate&plugin=sucuri-scanner%2Fsucuri.php&plugin_status=all&paged=1&s&_wpnonce=6808073c28
Aspect after-activation
HTTP status 200
Load time 0.433 s
Memory usage 3.88 MiB
JS errors None
Resource errors None

Sucuri Security

Page screenshot: Sucuri Security
URL /wp-admin/admin.php?page=sucuriscan
Aspect menu-item
HTTP status 200
Load time 0.490 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Firewall Management

Page screenshot: Sucuri Security → Firewall Management
URL /wp-admin/admin.php?page=sucuriscan_firewall
Aspect menu-item
HTTP status 200
Load time 0.338 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Two-Factor Authentication

Page screenshot: Sucuri Security → Two-Factor Authentication
URL /wp-admin/admin.php?page=sucuriscan_2fa
Aspect menu-item
HTTP status 200
Load time 0.300 s
Memory usage 3.81 MiB
JS errors None
Resource errors None

Sucuri Security → Events Reporting

Page screenshot: Sucuri Security → Events Reporting
URL /wp-admin/admin.php?page=sucuriscan_events_reporting
Aspect menu-item
HTTP status 200
Load time 0.284 s
Memory usage 3.81 MiB
JS errors None
Resource errors None

Sucuri Security → Headers Management

Page screenshot: Sucuri Security → Headers Management
URL /wp-admin/admin.php?page=sucuriscan_headers_management
Aspect menu-item
HTTP status 200
Load time 0.494 s
Memory usage 4.21 MiB
JS errors None
Resource errors None

Sucuri Security → Hardening & Prevention

Page screenshot: Sucuri Security → Hardening & Prevention
URL /wp-admin/admin.php?page=sucuriscan_hardening_prevention
Aspect menu-item
HTTP status 200
Load time 0.299 s
Memory usage 3.86 MiB
JS errors None
Resource errors None

Sucuri Security → Post-Hack Actions

Page screenshot: Sucuri Security → Post-Hack Actions
URL /wp-admin/admin.php?page=sucuriscan_post_hack_actions
Aspect menu-item
HTTP status 200
Load time 0.280 s
Memory usage 3.86 MiB
JS errors None
Resource errors None

Sucuri Security → Last Logins

Page screenshot: Sucuri Security → Last Logins
URL /wp-admin/admin.php?page=sucuriscan_lastlogins
Aspect menu-item
HTTP status 200
Load time 0.270 s
Memory usage 3.86 MiB
JS errors None
Resource errors None

Sucuri Security → Settings

Page screenshot: Sucuri Security → Settings
URL /wp-admin/admin.php?page=sucuriscan_settings
Aspect menu-item
HTTP status 200
Load time 0.373 s
Memory usage 4.52 MiB
JS errors None
Resource errors None

Test site – Just another WordPress site

Page screenshot: Test site – Just another WordPress site
URL /
Aspect front-page
HTTP status 200
Load time 0.230 s
Memory usage 4.25 MiB
JS errors None
Resource errors None

Benchmark

URL Load time Memory usage
Inactive Active Change Inactive Active Change
/wp-admin/index.php0.399 s0.440 s+0.041 s3.78 MiB3.97 MiB+ 193.21 KiB
/wp-admin/edit.php0.343 s0.305 s-0.038 s3.78 MiB3.97 MiB+ 193.36 KiB
/wp-admin/post-new.php0.807 s0.946 s+0.139 s6.31 MiB6.52 MiB+ 222.45 KiB
/wp-admin/upload.php0.617 s0.478 s-0.139 s3.74 MiB3.91 MiB+ 176.16 KiB
/wp-admin/options-writing.php0.305 s0.298 s-0.007 s3.71 MiB3.87 MiB+ 159.52 KiB
/wp-admin/media-new.php0.476 s0.347 s-0.129 s3.7 MiB3.87 MiB+ 167.72 KiB
/wp-admin/edit-tags.php?taxonomy=category0.323 s0.304 s-0.019 s3.72 MiB3.91 MiB+ 198.08 KiB
/wp-admin/post-new.php?post_type=page0.798 s0.855 s+0.057 s6.3 MiB6.51 MiB+ 222.08 KiB
/wp-admin/options-discussion.php0.310 s0.635 s+0.325 s3.71 MiB3.87 MiB+ 155.71 KiB
/wp-admin/edit-comments.php0.300 s0.327 s+0.027 s3.74 MiB3.91 MiB+ 175.52 KiB
/0.271 s0.176 s-0.095 s4.12 MiB4.25 MiB+ 135.05 KiB
Average 0.450 s0.465 s+0.015 s4.24 MiB4.41 MiB+ 181.72 KiB

Code Statistics

Note: Third-party libraries and minified JS/CSS files are excluded from these statistics where possible, so the numbers you see here may be lower than those reported by other tools.

PHP
CSS
JavaScript
Language % Lines of code Comment lines Files
PHP70.9%13,2345,81247
CSS19.5%3,645104
JavaScript9.3%1,7321912
SVG0.3%6107
HTML0.0%011
Total 18,672 6,014 61

PHP Code Analysis | More results »

Lines of code 12,568
Total complexity 2,564
Median class complexity 44.5
Median method complexity 3.0
Most complex class SucuriScanTwoFactor
Most complex function SucuriScanAuditLogs::ajaxAuditLogs()
Classes 36
Methods 429
Functions 70

Additions

Things that the plugin adds to the site. This section is not intended to be comprehensive. The test tool only looks for a few specific types of added content.

No new entries found.

PHP Error Log 6 lines

[02-Dec-2025 21:28:59 UTC] PHP Notice:  Function _load_textdomain_just_in_time was called <strong>incorrectly</strong>. Translation loading for the <code>sucuri-scanner</code> domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the <code>init</code> action or later. Please see <a href="https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/">Debugging in WordPress</a> for more information. (This message was added in version 6.7.0.) in /wp-includes/functions.php on line 6131
[02-Dec-2025 21:29:02 UTC] PHP Deprecated:  Automatic conversion of false to array is deprecated in /wp-content/plugins/sucuri-scanner/src/sitecheck.lib.php on line 173
[02-Dec-2025 21:29:11 UTC] PHP Deprecated:  Function WP_Dependencies-&gt;add_data() was called with an argument that is <strong>deprecated</strong> since version 6.9.0! IE conditional comments are ignored by all supported browsers. in /wp-includes/functions.php on line 6131
[02-Dec-2025 21:29:11 UTC] PHP Deprecated:  Function WP_Dependencies-&gt;add_data() was called with an argument that is <strong>deprecated</strong> since version 6.9.0! IE conditional comments are ignored by all supported browsers. in /wp-includes/functions.php on line 6131
[02-Dec-2025 21:29:20 UTC] PHP Deprecated:  Function WP_Dependencies-&gt;add_data() was called with an argument that is <strong>deprecated</strong> since version 6.9.0! IE conditional comments are ignored by all supported browsers. in /wp-includes/functions.php on line 6131
[02-Dec-2025 21:29:20 UTC] PHP Deprecated:  Function WP_Dependencies-&gt;add_data() was called with an argument that is <strong>deprecated</strong> since version 6.9.0! IE conditional comments are ignored by all supported browsers. in /wp-includes/functions.php on line 6131
See also: All tests for this plugin, How to Hide Sucuri Security - Auditing, Malware Scanner and Hardening Admin Menus