Sucuri Security - Auditing, Malware Scanner and Hardening 2.7.1

Does "Sucuri Security - Auditing, Malware Scanner and Hardening" work with WordPress 6.9.4 and PHP 8.1.12? A smoke test was performed on .

Summary

Errors
1PHP notices
1PHP deprecation warnings
No JavaScript exceptions
All test pages loaded successfully
No resource errors
Performance

Memory usage: 188.1 KiB
The average PHP memory usage increased by this amount after activating by the plugin.

Page speed impact: insignificant.
The plugin didn't make the site noticeably slower.

Environment
WordPress version6.9.4
PHP version8.1.12
MySQL version10.6.10
PHP memory limit512M
Plugin Info
Last updated
Active installs 600,000+
WordPress.org page https://wordpress.org/plugins/sucuri-scanner/
Badges

WordPress compatibility badge PHP compatibility badge

Get badge code

Pages 11

Plugins ‹ Test site — WordPress

Page screenshot: Plugins ‹ Test site — WordPress
URL /wp-admin/plugins.php?plugin_status=all&paged=1&s
Requested URL /wp-admin/plugins.php?action=activate&plugin=sucuri-scanner%2Fsucuri.php&plugin_status=all&paged=1&s&_wpnonce=62cdf7f499
Aspect after-activation
HTTP status 200
Load time 0.489 s
Memory usage 3.89 MiB
JS errors None
Resource errors None

Sucuri Security

Page screenshot: Sucuri Security
URL /wp-admin/admin.php?page=sucuriscan
Aspect menu-item
HTTP status 200
Load time 0.542 s
Memory usage 3.9 MiB
JS errors None
Resource errors None

Sucuri Security → Firewall Management

Page screenshot: Sucuri Security → Firewall Management
URL /wp-admin/admin.php?page=sucuriscan_firewall
Aspect menu-item
HTTP status 200
Load time 0.897 s
Memory usage 3.9 MiB
JS errors None
Resource errors None

Sucuri Security → Two-Factor Authentication

Page screenshot: Sucuri Security → Two-Factor Authentication
URL /wp-admin/admin.php?page=sucuriscan_2fa
Aspect menu-item
HTTP status 200
Load time 0.455 s
Memory usage 3.81 MiB
JS errors None
Resource errors None

Sucuri Security → Events Reporting

Page screenshot: Sucuri Security → Events Reporting
URL /wp-admin/admin.php?page=sucuriscan_events_reporting
Aspect menu-item
HTTP status 200
Load time 0.278 s
Memory usage 3.83 MiB
JS errors None
Resource errors None

Sucuri Security → Headers Management

Page screenshot: Sucuri Security → Headers Management
URL /wp-admin/admin.php?page=sucuriscan_headers_management
Aspect menu-item
HTTP status 200
Load time 0.421 s
Memory usage 4.24 MiB
JS errors None
Resource errors None

Sucuri Security → Hardening & Prevention

Page screenshot: Sucuri Security → Hardening & Prevention
URL /wp-admin/admin.php?page=sucuriscan_hardening_prevention
Aspect menu-item
HTTP status 200
Load time 0.320 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Post-Hack Actions

Page screenshot: Sucuri Security → Post-Hack Actions
URL /wp-admin/admin.php?page=sucuriscan_post_hack_actions
Aspect menu-item
HTTP status 200
Load time 0.293 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Last Logins

Page screenshot: Sucuri Security → Last Logins
URL /wp-admin/admin.php?page=sucuriscan_lastlogins
Aspect menu-item
HTTP status 200
Load time 0.339 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Settings

Page screenshot: Sucuri Security → Settings
URL /wp-admin/admin.php?page=sucuriscan_settings
Aspect menu-item
HTTP status 200
Load time 0.927 s
Memory usage 4.54 MiB
JS errors None
Resource errors None

Test site – Just another WordPress site

Page screenshot: Test site – Just another WordPress site
URL /
Aspect front-page
HTTP status 200
Load time 0.284 s
Memory usage 4.25 MiB
JS errors None
Resource errors None

Benchmark

URL Load time Memory usage
Inactive Active Change Inactive Active Change
/wp-admin/index.php1.072 s0.669 s-0.403 s3.78 MiB3.97 MiB+ 195.2 KiB
/wp-admin/edit.php0.480 s0.425 s-0.055 s3.79 MiB3.98 MiB+ 193.93 KiB
/wp-admin/post-new.php1.160 s1.173 s+0.013 s6.31 MiB6.53 MiB+ 224.34 KiB
/wp-admin/upload.php0.528 s0.543 s+0.015 s3.74 MiB3.91 MiB+ 176.63 KiB
/wp-admin/options-writing.php0.335 s0.353 s+0.018 s3.72 MiB3.89 MiB+ 180.41 KiB
/wp-admin/media-new.php0.545 s0.367 s-0.178 s3.71 MiB3.89 MiB+ 188.6 KiB
/wp-admin/edit-tags.php?taxonomy=category0.330 s0.358 s+0.028 s3.72 MiB3.91 MiB+ 199.05 KiB
/wp-admin/post-new.php?post_type=page1.379 s0.775 s-0.604 s6.3 MiB6.52 MiB+ 223.97 KiB
/wp-admin/options-discussion.php0.455 s0.845 s+0.390 s3.72 MiB3.89 MiB+ 176.59 KiB
/wp-admin/edit-comments.php0.354 s0.453 s+0.099 s3.74 MiB3.91 MiB+ 176.5 KiB
/0.391 s0.236 s-0.155 s4.12 MiB4.25 MiB+ 133.82 KiB
Average 0.639 s0.563 s-0.076 s4.24 MiB4.42 MiB+ 188.1 KiB

Code Statistics

Note: Third-party libraries and minified JS/CSS files are excluded from these statistics where possible, so the numbers you see here may be lower than those reported by other tools.

PHP
CSS
JavaScript
Language % Lines of code Comment lines Files
PHP71.7%13,8116,23648
CSS18.9%3,645104
JavaScript9.0%1,7321912
SVG0.3%6107
HTML0.0%011
Total 19,249 6,438 62

PHP Code Analysis | More results »

Lines of code 13,166
Total complexity 2,719
Median class complexity 41.0
Median method complexity 3.0
Most complex class SucuriScanTwoFactor
Most complex function SucuriScanAuditLogs::ajaxAuditLogs()
Classes 37
Methods 467
Functions 70

Additions

Things that the plugin adds to the site. This section is not intended to be comprehensive. The test tool only looks for a few specific types of added content.

No new entries found.

PHP Error Log 2 lines

[16-Apr-2026 02:11:42 UTC] PHP Notice:  Function _load_textdomain_just_in_time was called <strong>incorrectly</strong>. Translation loading for the <code>sucuri-scanner</code> domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the <code>init</code> action or later. Please see <a href="https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/">Debugging in WordPress</a> for more information. (This message was added in version 6.7.0.) in /wp-includes/functions.php on line 6131
[16-Apr-2026 02:11:45 UTC] PHP Deprecated:  Automatic conversion of false to array is deprecated in /wp-content/plugins/sucuri-scanner/src/sitecheck.lib.php on line 173
See also: All tests for this plugin, How to Hide Sucuri Security - Auditing, Malware Scanner and Hardening Admin Menus