Sucuri Security - Auditing, Malware Scanner and Hardening 2.7

Does "Sucuri Security - Auditing, Malware Scanner and Hardening" work with WordPress 6.9.1 and PHP 8.1.12? A smoke test was performed on .

Summary

Errors
1PHP notices
1PHP deprecation warnings
No JavaScript exceptions
All test pages loaded successfully
No resource errors
Performance

Memory usage: 191.79 KiB
The average PHP memory usage increased by this amount after activating by the plugin.

Page speed impact: 0.044 seconds
The average page load time increased by this amount after activating the plugin.

Environment
WordPress version6.9.1
PHP version8.1.12
MySQL version10.6.10
PHP memory limit512M
Plugin Info
Last updated
Active installs 600,000+
WordPress.org page https://wordpress.org/plugins/sucuri-scanner/
Badges

WordPress compatibility badge PHP compatibility badge

Get badge code

Pages 11

Plugins ‹ Test site — WordPress

Page screenshot: Plugins ‹ Test site — WordPress
URL /wp-admin/plugins.php?plugin_status=all&paged=1&s
Requested URL /wp-admin/plugins.php?action=activate&plugin=sucuri-scanner%2Fsucuri.php&plugin_status=all&paged=1&s&_wpnonce=92ba8d3889
Aspect after-activation
HTTP status 200
Load time 0.506 s
Memory usage 3.89 MiB
JS errors None
Resource errors None

Sucuri Security

Page screenshot: Sucuri Security
URL /wp-admin/admin.php?page=sucuriscan
Aspect menu-item
HTTP status 200
Load time 0.589 s
Memory usage 3.89 MiB
JS errors None
Resource errors None

Sucuri Security → Firewall Management

Page screenshot: Sucuri Security → Firewall Management
URL /wp-admin/admin.php?page=sucuriscan_firewall
Aspect menu-item
HTTP status 200
Load time 0.448 s
Memory usage 3.89 MiB
JS errors None
Resource errors None

Sucuri Security → Two-Factor Authentication

Page screenshot: Sucuri Security → Two-Factor Authentication
URL /wp-admin/admin.php?page=sucuriscan_2fa
Aspect menu-item
HTTP status 200
Load time 0.396 s
Memory usage 3.81 MiB
JS errors None
Resource errors None

Sucuri Security → Events Reporting

Page screenshot: Sucuri Security → Events Reporting
URL /wp-admin/admin.php?page=sucuriscan_events_reporting
Aspect menu-item
HTTP status 200
Load time 1.091 s
Memory usage 3.83 MiB
JS errors None
Resource errors None

Sucuri Security → Headers Management

Page screenshot: Sucuri Security → Headers Management
URL /wp-admin/admin.php?page=sucuriscan_headers_management
Aspect menu-item
HTTP status 200
Load time 0.636 s
Memory usage 4.24 MiB
JS errors None
Resource errors None

Sucuri Security → Hardening & Prevention

Page screenshot: Sucuri Security → Hardening & Prevention
URL /wp-admin/admin.php?page=sucuriscan_hardening_prevention
Aspect menu-item
HTTP status 200
Load time 0.361 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Post-Hack Actions

Page screenshot: Sucuri Security → Post-Hack Actions
URL /wp-admin/admin.php?page=sucuriscan_post_hack_actions
Aspect menu-item
HTTP status 200
Load time 0.359 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Last Logins

Page screenshot: Sucuri Security → Last Logins
URL /wp-admin/admin.php?page=sucuriscan_lastlogins
Aspect menu-item
HTTP status 200
Load time 0.362 s
Memory usage 3.87 MiB
JS errors None
Resource errors None

Sucuri Security → Settings

Page screenshot: Sucuri Security → Settings
URL /wp-admin/admin.php?page=sucuriscan_settings
Aspect menu-item
HTTP status 200
Load time 0.613 s
Memory usage 4.54 MiB
JS errors None
Resource errors None

Test site – Just another WordPress site

Page screenshot: Test site – Just another WordPress site
URL /
Aspect front-page
HTTP status 200
Load time 0.353 s
Memory usage 4.25 MiB
JS errors None
Resource errors None

Benchmark

URL Load time Memory usage
Inactive Active Change Inactive Active Change
/wp-admin/index.php1.183 s1.161 s-0.022 s3.78 MiB3.97 MiB+ 194.37 KiB
/wp-admin/edit.php0.562 s0.573 s+0.011 s3.79 MiB4.02 MiB+ 240.12 KiB
/wp-admin/post-new.php1.017 s1.381 s+0.364 s6.31 MiB6.53 MiB+ 223.61 KiB
/wp-admin/upload.php0.546 s0.512 s-0.034 s3.74 MiB3.91 MiB+ 176.09 KiB
/wp-admin/options-writing.php0.379 s0.394 s+0.015 s3.72 MiB3.89 MiB+ 179.86 KiB
/wp-admin/media-new.php0.581 s0.819 s+0.238 s3.71 MiB3.89 MiB+ 188.05 KiB
/wp-admin/edit-tags.php?taxonomy=category0.404 s0.583 s+0.179 s3.72 MiB3.91 MiB+ 198.51 KiB
/wp-admin/post-new.php?post_type=page1.218 s1.079 s-0.139 s6.3 MiB6.52 MiB+ 223.23 KiB
/wp-admin/options-discussion.php1.165 s1.043 s-0.122 s3.72 MiB3.89 MiB+ 176.05 KiB
/wp-admin/edit-comments.php0.520 s0.593 s+0.073 s3.74 MiB3.91 MiB+ 175.95 KiB
/0.360 s0.286 s-0.074 s4.12 MiB4.25 MiB+ 133.82 KiB
Average 0.721 s0.766 s+0.044 s4.24 MiB4.43 MiB+ 191.79 KiB

Code Statistics

Note: Third-party libraries and minified JS/CSS files are excluded from these statistics where possible, so the numbers you see here may be lower than those reported by other tools.

PHP
CSS
JavaScript
Language % Lines of code Comment lines Files
PHP71.6%13,6886,12848
CSS19.1%3,645104
JavaScript9.1%1,7321912
SVG0.3%6107
HTML0.0%011
Total 19,126 6,330 62

PHP Code Analysis | More results »

Lines of code 13,022
Total complexity 2,675
Median class complexity 41.0
Median method complexity 3.0
Most complex class SucuriScanTwoFactor
Most complex function SucuriScanAuditLogs::ajaxAuditLogs()
Classes 37
Methods 462
Functions 70

Additions

Things that the plugin adds to the site. This section is not intended to be comprehensive. The test tool only looks for a few specific types of added content.

Options wp_options 1

PHP Error Log 2 lines

[07-Mar-2026 01:12:19 UTC] PHP Notice:  Function _load_textdomain_just_in_time was called <strong>incorrectly</strong>. Translation loading for the <code>sucuri-scanner</code> domain was triggered too early. This is usually an indicator for some code in the plugin or theme running too early. Translations should be loaded at the <code>init</code> action or later. Please see <a href="https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/">Debugging in WordPress</a> for more information. (This message was added in version 6.7.0.) in /wp-includes/functions.php on line 6131
[07-Mar-2026 01:12:22 UTC] PHP Deprecated:  Automatic conversion of false to array is deprecated in /wp-content/plugins/sucuri-scanner/src/sitecheck.lib.php on line 173
See also: All tests for this plugin, How to Hide Sucuri Security - Auditing, Malware Scanner and Hardening Admin Menus