Report - Sucuri Security - Auditing, Malware Scanner and Hardening 2.6

Does "Sucuri Security - Auditing, Malware Scanner and Hardening" work with WordPress 6.9.1 and PHP 8.1.12? A smoke test was performed on 2026-02-03 19:03:05 UTC.

Summary

Errors

1	PHP notices
1	PHP deprecation warnings
	No JavaScript exceptions
	All test pages loaded successfully
	No resource errors

Performance

Memory usage: 187.17 KiB
The average PHP memory usage increased by this amount after activating by the plugin.

Page speed impact: insignificant.
The plugin didn't make the site noticeably slower.

Environment

WordPress version	6.9.1
PHP version	8.1.12
MySQL version	10.6.10
PHP memory limit	512M

Plugin Info

Last updated	2026-03-07T01:07:00+00:00
Active installs	600,000+
WordPress.org page	https://wordpress.org/plugins/sucuri-scanner/
Badges	Get badge code

Pages 11

Plugins ‹ Test site — WordPress

URL	/wp-admin/plugins.php?plugin_status=all&paged=1&s
Requested URL	/wp-admin/plugins.php?action=activate&plugin=sucuri-scanner%2Fsucuri.php&plugin_status=all&paged=1&s&_wpnonce=e29770e835
Aspect	after-activation
HTTP status	200
Load time	0.468 s
Memory usage	3.89 MiB
JS errors	None
Resource errors	None

Sucuri Security

URL	/wp-admin/admin.php?page=sucuriscan
Aspect	menu-item
HTTP status	200
Load time	0.531 s
Memory usage	3.89 MiB
JS errors	None
Resource errors	None

Sucuri Security → Firewall Management

URL	/wp-admin/admin.php?page=sucuriscan_firewall
Aspect	menu-item
HTTP status	200
Load time	0.426 s
Memory usage	3.89 MiB
JS errors	None
Resource errors	None

Sucuri Security → Two-Factor Authentication

URL	/wp-admin/admin.php?page=sucuriscan_2fa
Aspect	menu-item
HTTP status	200
Load time	0.328 s
Memory usage	3.81 MiB
JS errors	None
Resource errors	None

Sucuri Security → Events Reporting

URL	/wp-admin/admin.php?page=sucuriscan_events_reporting
Aspect	menu-item
HTTP status	200
Load time	0.275 s
Memory usage	3.83 MiB
JS errors	None
Resource errors	None

Sucuri Security → Headers Management

URL	/wp-admin/admin.php?page=sucuriscan_headers_management
Aspect	menu-item
HTTP status	200
Load time	0.498 s
Memory usage	4.24 MiB
JS errors	None
Resource errors	None

Sucuri Security → Hardening & Prevention

URL	/wp-admin/admin.php?page=sucuriscan_hardening_prevention
Aspect	menu-item
HTTP status	200
Load time	0.318 s
Memory usage	3.87 MiB
JS errors	None
Resource errors	None

Sucuri Security → Post-Hack Actions

URL	/wp-admin/admin.php?page=sucuriscan_post_hack_actions
Aspect	menu-item
HTTP status	200
Load time	0.295 s
Memory usage	3.87 MiB
JS errors	None
Resource errors	None

Sucuri Security → Last Logins

URL	/wp-admin/admin.php?page=sucuriscan_lastlogins
Aspect	menu-item
HTTP status	200
Load time	0.295 s
Memory usage	3.87 MiB
JS errors	None
Resource errors	None

Sucuri Security → Settings

URL	/wp-admin/admin.php?page=sucuriscan_settings
Aspect	menu-item
HTTP status	200
Load time	0.386 s
Memory usage	4.56 MiB
JS errors	None
Resource errors	None

Test site – Just another WordPress site

URL	/
Aspect	front-page
HTTP status	200
Load time	0.236 s
Memory usage	4.25 MiB
JS errors	None
Resource errors	None

Benchmark

URL	Load time			Memory usage
URL	Inactive	Active	Change	Inactive	Active	Change
/wp-admin/index.php	0.505 s	0.463 s	-0.042 s	3.78 MiB	3.97 MiB	+ 193.21 KiB
/wp-admin/edit.php	0.364 s	0.314 s	-0.050 s	3.79 MiB	3.98 MiB	+ 193.36 KiB
/wp-admin/post-new.php	0.868 s	0.960 s	+0.092 s	6.31 MiB	6.53 MiB	+ 222.46 KiB
/wp-admin/upload.php	0.676 s	0.515 s	-0.161 s	3.74 MiB	3.91 MiB	+ 176.16 KiB
/wp-admin/options-writing.php	0.331 s	0.323 s	-0.008 s	3.72 MiB	3.89 MiB	+ 179.52 KiB
/wp-admin/media-new.php	0.513 s	0.374 s	-0.139 s	3.71 MiB	3.89 MiB	+ 187.72 KiB
/wp-admin/edit-tags.php?taxonomy=category	0.429 s	0.307 s	-0.122 s	3.72 MiB	3.91 MiB	+ 198.08 KiB
/wp-admin/post-new.php?post_type=page	0.708 s	0.891 s	+0.183 s	6.3 MiB	6.52 MiB	+ 222.08 KiB
/wp-admin/options-discussion.php	0.335 s	0.502 s	+0.167 s	3.72 MiB	3.89 MiB	+ 175.71 KiB
/wp-admin/edit-comments.php	0.325 s	0.330 s	+0.005 s	3.74 MiB	3.91 MiB	+ 175.52 KiB
/	0.283 s	0.184 s	-0.099 s	4.12 MiB	4.25 MiB	+ 135.05 KiB
Average	0.485 s	0.469 s	-0.016 s	4.24 MiB	4.42 MiB	+ 187.17 KiB

Code Statistics

Note: Third-party libraries and minified JS/CSS files are excluded from these statistics where possible, so the numbers you see here may be lower than those reported by other tools.

PHP

CSS

JavaScript

Language		%	Lines of code	Comment lines	Files
	PHP	71.1%	13,361	5,890	48
	CSS	19.4%	3,645	10	4
	JavaScript	9.2%	1,732	191	2
	SVG	0.3%	61	0	7
	HTML	0.0%	0	1	1
Total			18,799	6,092	62

PHP Code Analysis | More results »

Lines of code	12,695
Total complexity	2,596
Median class complexity	41.0
Median method complexity	3.0
Most complex class	SucuriScanTwoFactor
Most complex function	SucuriScanAuditLogs::ajaxAuditLogs()

Classes	37
Methods	443
Functions	70

Additions

Things that the plugin adds to the site. This section is not intended to be comprehensive. The test tool only looks for a few specific types of added content.

No new entries found.

PHP Error Log 2 lines

[03-Feb-2026 19:03:24 UTC] PHP Notice:  Function _load_textdomain_just_in_time was called <strong>incorrectly</strong>. Translation loading for the <code>sucuri-scanner</code> domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the <code>init</code> action or later. Please see <a href="https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/">Debugging in WordPress</a> for more information. (This message was added in version 6.7.0.) in /wp-includes/functions.php on line 6131
[03-Feb-2026 19:03:28 UTC] PHP Deprecated:  Automatic conversion of false to array is deprecated in /wp-content/plugins/sucuri-scanner/src/sitecheck.lib.php on line 173