Sucuri Security - Auditing, Malware Scanner and Hardening 2.7

Does "Sucuri Security - Auditing, Malware Scanner and Hardening" work with WordPress 6.9.4 and PHP 8.1.12? A smoke test was performed on .

Summary

Errors
1PHP notices
1PHP deprecation warnings
No JavaScript exceptions
All test pages loaded successfully
No resource errors
Performance

Memory usage: 190.75 KiB
The average PHP memory usage increased by this amount after activating by the plugin.

Page speed impact: insignificant.
The plugin didn't make the site noticeably slower.

Environment
WordPress version6.9.4
PHP version8.1.12
MySQL version10.6.10
PHP memory limit512M
Plugin Info
Last updated
Active installs 600,000+
WordPress.org page https://wordpress.org/plugins/sucuri-scanner/
Badges

WordPress compatibility badge PHP compatibility badge

Get badge code

Pages 11

Plugins ‹ Test site — WordPress

Page screenshot: Plugins ‹ Test site — WordPress
URL /wp-admin/plugins.php?plugin_status=all&paged=1&s
Requested URL /wp-admin/plugins.php?action=activate&plugin=sucuri-scanner%2Fsucuri.php&plugin_status=all&paged=1&s&_wpnonce=4e412d3e1c
Aspect after-activation
HTTP status 200
Load time 0.466 s
Memory usage 3.88 MiB
JS errors None
Resource errors None

Sucuri Security

Page screenshot: Sucuri Security
URL /wp-admin/admin.php?page=sucuriscan
Aspect menu-item
HTTP status 200
Load time 0.591 s
Memory usage 3.89 MiB
JS errors None
Resource errors None

Sucuri Security → Firewall Management

Page screenshot: Sucuri Security → Firewall Management
URL /wp-admin/admin.php?page=sucuriscan_firewall
Aspect menu-item
HTTP status 200
Load time 0.375 s
Memory usage 3.89 MiB
JS errors None
Resource errors None

Sucuri Security → Two-Factor Authentication

Page screenshot: Sucuri Security → Two-Factor Authentication
URL /wp-admin/admin.php?page=sucuriscan_2fa
Aspect menu-item
HTTP status 200
Load time 0.358 s
Memory usage 3.81 MiB
JS errors None
Resource errors None

Sucuri Security → Events Reporting

Page screenshot: Sucuri Security → Events Reporting
URL /wp-admin/admin.php?page=sucuriscan_events_reporting
Aspect menu-item
HTTP status 200
Load time 0.290 s
Memory usage 3.82 MiB
JS errors None
Resource errors None

Sucuri Security → Headers Management

Page screenshot: Sucuri Security → Headers Management
URL /wp-admin/admin.php?page=sucuriscan_headers_management
Aspect menu-item
HTTP status 200
Load time 0.578 s
Memory usage 4.23 MiB
JS errors None
Resource errors None

Sucuri Security → Hardening & Prevention

Page screenshot: Sucuri Security → Hardening & Prevention
URL /wp-admin/admin.php?page=sucuriscan_hardening_prevention
Aspect menu-item
HTTP status 200
Load time 0.337 s
Memory usage 3.86 MiB
JS errors None
Resource errors None

Sucuri Security → Post-Hack Actions

Page screenshot: Sucuri Security → Post-Hack Actions
URL /wp-admin/admin.php?page=sucuriscan_post_hack_actions
Aspect menu-item
HTTP status 200
Load time 0.300 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Last Logins

Page screenshot: Sucuri Security → Last Logins
URL /wp-admin/admin.php?page=sucuriscan_lastlogins
Aspect menu-item
HTTP status 200
Load time 0.331 s
Memory usage 3.86 MiB
JS errors None
Resource errors None

Sucuri Security → Settings

Page screenshot: Sucuri Security → Settings
URL /wp-admin/admin.php?page=sucuriscan_settings
Aspect menu-item
HTTP status 200
Load time 0.569 s
Memory usage 4.54 MiB
JS errors None
Resource errors None

Test site – Just another WordPress site

Page screenshot: Test site – Just another WordPress site
URL /
Aspect front-page
HTTP status 200
Load time 0.259 s
Memory usage 4.24 MiB
JS errors None
Resource errors None

Benchmark

URL Load time Memory usage
Inactive Active Change Inactive Active Change
/wp-admin/index.php0.532 s0.494 s-0.038 s3.78 MiB3.97 MiB+ 193.56 KiB
/wp-admin/edit.php0.383 s0.337 s-0.046 s3.78 MiB4.02 MiB+ 239.26 KiB
/wp-admin/post-new.php0.803 s1.003 s+0.200 s6.31 MiB6.52 MiB+ 218.34 KiB
/wp-admin/upload.php0.470 s0.492 s+0.022 s3.74 MiB3.91 MiB+ 175.28 KiB
/wp-admin/options-writing.php0.344 s0.334 s-0.010 s3.71 MiB3.89 MiB+ 179.05 KiB
/wp-admin/media-new.php0.520 s0.381 s-0.139 s3.7 MiB3.89 MiB+ 187.25 KiB
/wp-admin/edit-tags.php?taxonomy=category0.346 s0.329 s-0.017 s3.72 MiB3.91 MiB+ 197.7 KiB
/wp-admin/post-new.php?post_type=page0.750 s0.924 s+0.174 s6.3 MiB6.51 MiB+ 222.43 KiB
/wp-admin/options-discussion.php0.356 s0.372 s+0.016 s3.71 MiB3.89 MiB+ 175.24 KiB
/wp-admin/edit-comments.php0.347 s0.372 s+0.025 s3.73 MiB3.91 MiB+ 175.15 KiB
/0.304 s0.205 s-0.099 s4.11 MiB4.24 MiB+ 135 KiB
Average 0.469 s0.477 s+0.008 s4.24 MiB4.42 MiB+ 190.75 KiB

Code Statistics

Note: Third-party libraries and minified JS/CSS files are excluded from these statistics where possible, so the numbers you see here may be lower than those reported by other tools.

PHP
CSS
JavaScript
Language % Lines of code Comment lines Files
PHP71.6%13,6886,12848
CSS19.1%3,645104
JavaScript9.1%1,7321912
SVG0.3%6107
HTML0.0%011
Total 19,126 6,330 62

PHP Code Analysis | More results »

Lines of code 13,022
Total complexity 2,675
Median class complexity 41.0
Median method complexity 3.0
Most complex class SucuriScanTwoFactor
Most complex function SucuriScanAuditLogs::ajaxAuditLogs()
Classes 37
Methods 462
Functions 70

Additions

Things that the plugin adds to the site. This section is not intended to be comprehensive. The test tool only looks for a few specific types of added content.

Options wp_options 1

PHP Error Log 2 lines

[11-Mar-2026 16:36:37 UTC] PHP Notice:  Function _load_textdomain_just_in_time was called <strong>incorrectly</strong>. Translation loading for the <code>sucuri-scanner</code> domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the <code>init</code> action or later. Please see <a href="https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/">Debugging in WordPress</a> for more information. (This message was added in version 6.7.0.) in /wp-includes/functions.php on line 6131
[11-Mar-2026 16:36:40 UTC] PHP Deprecated:  Automatic conversion of false to array is deprecated in /wp-content/plugins/sucuri-scanner/src/sitecheck.lib.php on line 173
See also: All tests for this plugin, How to Hide Sucuri Security - Auditing, Malware Scanner and Hardening Admin Menus