Sucuri Firewall + WordPress Security Plugin

Sucuri Firewall + WordPress Security Plugin combines WordPress monitoring with access to supported options for Sucuri’s cloud Website Firewall. The firewall runs without the add-on; connecting the add-on lets administrators view and manage settings from the WordPress dashboard. The plugin does not include a Sucuri account or the Website Firewall service.

Activity entries and file comparisons

Audit logs record security events such as visitor logins and content changes. Administrators can search and filter entries by event type, date, severity, plugin, and theme, then download the audit trail as a CSV file. Sucuri says these logs are not stored in the WordPress database.

File integrity monitoring makes a known-good baseline when the plugin is installed. It compares current files with that baseline and identifies added, modified, or removed files across WordPress core, plugin, and theme directories.

Remote checks and vulnerability scans

The remote malware scanner checks for known malware, viruses, malicious code, outdated software, site errors, and blocklist status. It visits the site like a regular user, which can help detect threats that try to stay hidden from bots or search engines.

Separate vulnerability scanners check WordPress core files, PHP, installed plugins, and themes. These scanners require a Sucuri Firewall account and its API key, entered in Firewall Management.

Firewall controls and website response

The cloud Website Firewall helps protect against denial-of-service and DDoS attacks, software vulnerability exploits, zero-day threats, and brute-force attacks. It also includes performance optimization, advanced access controls, failover, and redundancy. The plugin provides access to supported firewall settings in WordPress, but is not required to use the cloud firewall.

Hardening recommendations vary by site environment. Examples include removing the WordPress version, blocking PHP files in selected directories, checking the default administrator account, and disabling the plugin and theme editor. Customizable security alerts let administrators select how often to be notified.

If a site is compromised, the Post-Hack section guides administrators through updating secret keys, resetting user passwords, resetting installed extensions, and updating plugins and themes.

Connecting the plugin

After installing and activating the plugin, generate its API key to enable event monitoring. Review the dashboard and configure alerts and hardening settings for the site. To use firewall controls and vulnerability scanners, connect a Sucuri Firewall account with its API key in Firewall Management.