WPBeginner

Beginner's Guide for WordPress

  • Blog
    • Beginners Guide
    • News
    • Opinion
    • Showcase
    • Themes
    • Tutorials
    • WordPress Plugins
  • Start Here
    • How to Start a Blog
    • Create a Website
    • Start an Online Store
    • Best Website Builder
    • Email Marketing
    • WordPress Hosting
    • Business Name Ideas
  • Deals
    • Bluehost Coupon
    • SiteGround Coupon
    • WP Engine Coupon
    • HostGator Coupon
    • Domain.com Coupon
    • Constant Contact
    • View All Deals »
  • Glossary
  • Videos
  • Products
X
☰
Beginner's Guide for WordPress / Start your WordPress Blog in minutes
Choosing the Best
WordPress Hosting
How to Easily
Install WordPress
Recommended
WordPress Plugins
View all Guides

WPBeginner» Blog» Opinion» Sucuri Review – How Sucuri Helped us Block 450,000 WordPress Attacks in 3 Months

Sucuri Review – How Sucuri Helped us Block 450,000 WordPress Attacks in 3 Months

Last updated on August 31st, 2019 by Editorial Staff
6.1k Shares
Share
Tweet
Share
Pin
Free WordPress Video Tutorials on YouTube by WPBeginner
Sucuri Review – How Sucuri Helped us Block 450,000 WordPress Attacks in 3 Months

Whenever we’re asked about WordPress security tips, our top 2 recommendations are get a good WordPress backup solution and start using Sucuri website firewall. In this article, we will share our honest review of Sucuri’s website firewall and why it’s worth every single penny!

Full Disclosure: No we did not get paid to write this Sucuri review. We’re just happy customers of Sucuri. They have a referral program available for all their customers, so if you decide to use Sucuri by clicking on our referral link in this article, then we will get a small commission. However we only recommend services that we personally use and believe will add value to our readers.

WPBeginner Love Sucuri

A Little Background

WPBeginner is one of the largest free WordPress resource sites on the planet. Because of that, we often have to deal with website attacks. This includes brute force attacks, feed attacks, DDoS, and a whole lot of spam.

That’s why we have always been extremely cautious. We have a real-time WordPress backup solution in place.

On top of that, we have password-protected our wp-admin directory, disabled PHP execution, changed the default WordPress database prefix, and basically followed every other security “hardening” trick.

While you can follow all the “prevention” best practices at the software “WordPress” level, the reality of the matter is that security has to be addressed at the hosting server level and more importantly the DNS level.

During the attacks, our website would slow down significantly due to the high server load. Sometimes it would even cause the server to restart causing downtime.

That’s when we started looking for a DNS level firewall solution.

We already had the Sucuri WordPress plugin installed on the site, so we decided to give their web application firewall (WAF) a try.

Some of you are probably confused by the tech-lingo and wondering what does Sucuri do and what is a WAF?

Overview of Sucuri

Sucuri is a website security company that specializes in WordPress security. They protect your website from hackers, malware, DDoS and blacklists.

When you enable Sucuri, all your site traffic goes through their cloudproxy firewall before coming to your hosting server. This allows them to block all the attacks and only send you legitimate visitors.

See the illustration below:

Sucuri Web Application Firewall

The biggest benefit of Sucuri is that it makes your website secure. On top of that, the firewall makes your website faster, and you save money on your hosting bill because your server load goes down significantly.

As soon as we enabled the Sucuri firewall, we started seeing the difference in performance. The attack overview inside the Sucuri dashboard was just eye opening.

WPBeginner’s Sucuri Firewall Results

Within the first three months, Sucuri helped us block over 450,000 WordPress attacks.

Sucuri Attack Block Chart

A break down of some of the common blocked requests:

  • Exploit blocked by virtual patching (115,946 blocked attempts)
  • Blacklisted IP address (72,495 blocked attempts)
  • Bad bot access denied (45,299 blocked attempts)
  • Backdoor location denied (29,690 blocked attempts)
  • DDOS attempt blocked (29,676 blocked attempts)
  • Fake bot access (24,571 blocked attempts)
  • Evasion attempt denied (21,887 blocked attempts)
  • Spam request blocked (14,313 blocked attempts)
  • Scanning tool blocked (13,842 blocked attempts)

Now most of you are probably thinking that WPBeginner is a huge site that’s why we’re a bigger target.

Not entirely true. Often smaller sites are an easier target for hackers because they don’t take any security precautions. At this very moment, your website is probably getting attacks, and you just don’t know about it.

Sadly, when most people find out it’s a bit too late because they’re hacked. That’s why articles like how to find a backdoor in a hacked WordPress site and how to fix “this site ahead contains harmful programs” error are among the most popular on WPBeginner.

If you are running a business website, then Sucuri is a MUST HAVE solution because it offers complete end-to-end WordPress security.

5 Reasons Why We Love Sucuri

We are absolutely in love with Sucuri. Aside from using it on WPBeginner, we’re also using it on our other sites like List25 and SyedBalkhi.com.

Below are the 5 reasons why we love Sucuri.

1. Blocks all the Attacks

Sucuri’s firewall blocks all the attacks before it even touches our server. Since they’re one of the leading security companies, Sucuri proactively research and report potential security issues to WordPress core team as well as third-party plugins.

Their team closely works with the respective developers in fixing the security issues. Once fixed, Sucuri patches those vulnerabilities at the firewall level in case you didn’t get a chance to update your plugin fast enough.

For example, the recent Elegant Themes vulnerability that was disclosed was already patched on Sucuri’s servers before you updated your plugins and themes. Meaning your site was ALWAYS secure.

2. Website Integrity Monitoring

We have the Sucuri 2-in-1 Website AntiVirus package which comes with the Sucuri scanner. It monitors our website every 3 hours to ensure that it is clean of malware, malicious JavaScript, malicious iframes, suspicious redirections, spammy link injections etc.

The scanner also makes sure that our site is not blacklisted by any of the popular services like Google, Norton, AVG, Phishtank, Opera and others.

This helps you keep your reputation intact and keeps your users from seeing warnings like these:

This site contains harmful programs error in Google Chrome

3. Site Audit Log

Sucuri’s WordPress plugin keeps track of every thing that happens on your site.

This includes file changes, new posts, new users, last logins, failed login attempts, and more.

Sucuri Audit Log

4. Server Side Scanning

When you’re dealing with smart hackers, you need to account for everything. Some hackers don’t care about infecting your users with malwares. Maybe they just want to add banner ads in your old post or replace your affiliate links.

These kind of hacks are very hard to catch because they’re not as obvious, and you won’t get blacklisted for these.

That’s when the server side scan comes in handy. Sucuri’s server side scanner goes through every single file (even non-WordPress files) to ensure that nothing suspicious exist on your server.

It also audit events like file changes and such to keep you informed.

5. Malware Cleanup Service

Even though all the reasons above well justify the cost, they also offer malware cleanup service with no page limits along with blacklist removal. We haven’t had to use this part of the service yet, but can you imagine having security experts cleaning up your site.

On average security experts charge $250 / hour for consulting.

Since this can get quite expensive, Sucuri has an extra incentive to make sure that your website never gets hacked.

Our Final Thoughts – Sucuri Review

Day after day, we hear stories of people’s websites getting hacked. We can honestly say that Sucuri is hands down the best and most cost effective security service in the WordPress industry.

For $199 / year, it is the best insurance you can buy for your online business.

If government websites can be hacked, then so can yours – no matter what you do. However it’s much better to find out that your website is hacked from a monitoring service rather than finding out from your users or better yet from Google when they blacklist your website.

More importantly, it’s definitely worth the peace of mind knowing that if something were to happen, we have a team of security experts who’ll help us clean everything properly.

Sucuri is a leading security company and they’ve been mentioned in major publications like CNN, USAToday, TechCrunch, TheNextWeb, and tons more. We have personally met with their co-founder and CEO, Tony Perez, and can honestly say that they are a trustworthy company, and we’re in good hands.

All the times that we have interacted with Sucuri’s support team, they have been quick, polite, and helpful.

If we were to rate Sucuri’s service and support, we would give them a 5 out of 5.

We hope you found our Sucuri review helpful. If you’re thinking about improving your WordPress security, then definitely check out Sucuri and give them a try.

Full Disclosure: No we did not get paid to write this Sucuri review. We’re happy customers of Sucuri. They have a referral program available for all their customers, so if you decide to use Sucuri by clicking on our referral link in this article, then we will get a small commission. However we only recommend services that we personally use and believe will add value to our readers.

If you liked this article, then please subscribe to our YouTube Channel for WordPress video tutorials. You can also find us on Twitter and Facebook.

6.1k Shares
Share
Tweet
Share
Pin
Popular on WPBeginner Right Now!
  • Revealed: Why Building an Email List is so Important Today (6 Reasons)

    Revealed: Why Building an Email List is so Important Today (6 Reasons)

  • How to Start Your Own Podcast (Step by Step)

    How to Start Your Own Podcast (Step by Step)

  • How to Properly Move Your Blog from WordPress.com to WordPress.org

  • How to Fix the Error Establishing a Database Connection in WordPress

    How to Fix the Error Establishing a Database Connection in WordPress

About the Editorial Staff

Editorial Staff at WPBeginner is a team of WordPress experts led by Syed Balkhi. Trusted by over 1.3 million readers worldwide.

The Ultimate WordPress Toolkit

48 Comments

Leave a Reply
  1. Marissa says:
    May 26, 2020 at 10:23 am

    I just got Sucuri premium plan and wanted to know do I still need to install the Sucuri plugin on WordPress or do they do everything through their site?

    Reply
    • WPBeginner Support says:
      May 27, 2020 at 9:23 am

      We would recommend keeping and connecting their plugin currently

      Reply
  2. Ariel says:
    Sep 5, 2019 at 8:01 pm

    I have another question I just thought of: Sucuri also has backup service. Do you use that one at wpbeginner, or do you use another backup solution instead?. If that’s the case, which one, and why not the Sucuri one? Thanks!!

    Reply
    • WPBeginner Support says:
      Sep 6, 2019 at 9:45 am

      For the time being, we are using VaultPress for our backups and Sucuri for our security. For what we use on our site, you would want to take a look at our blueprint page: /blueprint/

      Reply
  3. Gautam Budhiraja says:
    May 27, 2019 at 4:22 pm

    Whenever I click on any article on my website from my mobile, it redirects to spam page but not on laptop.Wpbeginner please help me out to remove hack or any malware.Should I install wordfence or sucuri to remove this and to prevent future attacks.
    Thanks!

    Reply
    • WPBeginner Support says:
      May 28, 2019 at 2:54 pm

      As a starting point, you would want to take a look at our guide here: /plugins/how-to-scan-your-wordpress-site-for-potentially-malicious-code/

      Reply
  4. Sanjib says:
    Mar 31, 2019 at 7:16 am

    So if I install sucuri, Do I still need wordfence

    Reply
    • WPBeginner Support says:
      Apr 1, 2019 at 10:58 am

      If you’re using Sucuri’s firewall then normally you shouldn’t need an additional firewall as multiple plugins/tools for the same purpose can sometimes cause conflicts between the two.

      Reply
  5. Ankit says:
    Mar 6, 2019 at 10:27 am

    Awesome article really helpful information.
    Sucuri quiet expansive subscription plane but I know how to secure my website manually.
    Overall article was greatest.
    Thanks Dear

    Reply
    • WPBeginner Support says:
      Mar 6, 2019 at 10:36 am

      Thank you, glad you liked our article :)

      Reply
  6. MD Fahim says:
    Feb 26, 2019 at 5:42 am

    Awesome article really helpful information.
    Sucuri quiet expansive subscription plane but I know how to secure my website manually.
    Overall article was greatest.
    Thanks wpbegainer

    Reply
    • WPBeginner Support says:
      Feb 26, 2019 at 1:37 pm

      You’re welcome, glad you liked our article :)

      Reply
  7. Amit Mishra says:
    Nov 10, 2018 at 3:23 am

    Literally loveed your full review and will definitely try securi paid plan, as currently I am in free plan is it necessary to go with their paid plan?
    Is free plan isn’t effective?

    Reply
    • WPBeginner Support says:
      Nov 12, 2018 at 4:18 am

      Hi Amit,

      The paid plan gives you access to their premium features like DNS level website firewall.

      Reply
  8. Bill Patterson says:
    Aug 9, 2018 at 8:20 pm

    What do you think of the free version of Securi? I am using wordfence, securi and Bulletproof. I know there must be some overlap. Just did not see any review using the free version.

    Reply
    • WPBeginner Support says:
      Aug 14, 2018 at 10:18 pm

      Hi Bill,

      The free version of Sucuri helps you scan your WordPress website for security vulnerabilities. It is a solid plugin maintained by the top WordPress security company.

      Reply
  9. Christoforos says:
    Feb 26, 2018 at 10:02 am

    I came across this article while searching on Google for wordpress security info.
    I subscribed to their service. I admit that they are very helpful and they do know what they do… The problem is that because of their firewall my website was unreachable for more than 90 minutes. I have more than 40K visits per day, so 90 minutes offline is a lot of money lost!!!!!!!

    Nothing is perfect!

    Reply
  10. Cody says:
    Feb 24, 2018 at 6:56 am

    I see in this article Sucuri and Wordfence are both firewall plugins so probably keep Sucuri and iThemes, correct?

    /plugins/best-wordpress-firewall-plugins-compared/

    I noticed you said that if you are using Sucuri and MaxCDN any CDN benifit you get from Sucuri is a bonus. If you point the nameservers at Sucuri would that not confuse MaxCDN of the host server location? Do you really have two CDN’s working at the same time?

    Reply
  11. Cody says:
    Feb 24, 2018 at 6:40 am

    I see you recommended Sucuri in combination with MaxCDN. Do you also have other security plugins enabled because Sucuri is that good? Currently I keep both iThemes Security and Wordfence Security enabled. Adding a third plugin seems like there might be many overlapping features. Can you comment on which combination you use on wpbeginner for a fast and secure site?

    Thank you

    Reply
    • WPBeginner Support says:
      Feb 25, 2018 at 6:36 pm

      Hi Cody,

      We use Sucuri for complete WordPress security. We also have many common best practices in place to improve security. Please see our complete WordPress security guide for more details.

      Reply
  12. Bill says:
    Sep 11, 2017 at 4:34 pm

    Sucuri, is in my opinion, the best computer-related investment I’ve made in my entire life. I’ve been with them several years and they are always there to help. I would say they have bent over backwards helping someone like myself who is not too computer-literate. I have a small cartoon site, and once had over 33K attacks in one day but my site was unaffected.

    Note: Sucuri I believe does have a referral service where you can get a discount if you recommend someone. I have repeatedly emailed them and told them, I do not wish to participate in this referral program as their service is so amazing, I’ve recommended them to many others just to help others avoid heartache from hacking attacks.

    The peace of mind that comes with a service such as this is immeasurable.

    Finally, there is only one thing I absolutely despise about Sucuri, the name Sucuri. As someone who is terrified of snakes, Sucuri is Portuguese for anaconda. I’d much prefer rabbit, dog or another animal.

    Reply
  13. Brian says:
    Aug 23, 2017 at 4:05 pm

    Thanks for your review. How concerning, in your opinion, is Go Daddy’s acquisition of Sucuri? I always feel like when a huge company acquires a smaller company, there’s a chance for quality and service to take a nosedive.

    Reply
    • WPBeginner Support says:
      Aug 24, 2017 at 10:26 am

      Hi Brian,

      It hasn’t taken a nose dive yet. And GoDaddy as a company has improved a lot in the recent years when it comes to their product quality.

      Reply
  14. Dani says:
    Aug 20, 2017 at 7:40 pm

    Does anyone have bad experience with securi. They would be the best according to them, But I only have problems with them. And is there a way that I can look how many people they employ (Chamber of Commerce). I will pay for it.

    My english is not so good i’m from belgium and i speak dutch – I will also write it in Dutch.

    -How it all started-
    2 months ago I protected my domain name using securi firewall. Because securi told me they were the best I chosen them without a doubt.
    3 days ago I contacted securi whit a support ticket. I asked them to delete my domain name, Because I bought another domain name, And I will not use the old domain name anymore. I want to use my new domain name with the securi firewal. They said no problem, just remove the securi name sever from your hosting Then you can delete it in your securi account. I do not know how to do that so my hosting company has removed the name server, And then I asked securi to put the new domain name into my securi account.
    ———————————————————–
    SECURI Ticket update

    Hi, in that instance you need to point the nameservers from your domain.be back to the ones that they were previous to ours. Otherwise, if we remove the domain from the firewall dashboard the domain.be site will show a Sucuri error message.

    Once the nameservers are pointed away from us and the site is no longer resolving to our firewall IP, we can remove it from the dashboard and then you can add in the new domain.

    By: Jarret C.

    ——————————————————————
    SECURI Ticket update Ticket
    Hi,

    The old site has been removed and the new site has been added

    Thanks,
    Caleb
    ——————————————————————
    I was happy I thought now I can upload my website and then its well protected, Because securi told me they were the best.
    Now I wanted to login I filled in my email address and my password. but I automatically get redirected to (https://login.sucuri.net/login/2fa/)
    and I get a error – Sucuri 2FA ( Invalid code. Please try again.) Ok no problem until i have tried it 20 times with 20 different codes.
    I then sent an email to support@sucuri.net Because written on their website. And Because I want to log in to my securi account

    Please email support@sucuri.net if you need to reset or disable your 2FA account.
    re-opened.

    day 1 – I did not get an answer to my email nothing So I called them 10 times (No one answers the phone) A bit angry but okay tomorrow I will try again.

    day 2 – Sent an email again but this time 3 emails – No one answer my email So I called them 15 times (I do not get anyone on the phone) A bit angry but okay tomorrow I will try again pffff.

    Day 3 – I thought I will call them a few times a few times (8 times) – (But no one answers the phone) But yes i got a mail from them.
    ————————————————————————————–
    SECURI Ticket update Ticket
    Hello,

    It looks like you were able to remove domain.be because I don’t see any sites here at the moment: https://waf.sucuri.net/

    You should be able to continue with adding new domain.be now, but let us know if you have any other issues.

    – jon
    ————————————————————————————–
    Pffff After 3 days I get an email whit no answer to my question and I still can not log in
    So I sent securi an e-mail (again)

    The namesaver has already been deleted 3 days ago by my hosting company. and the domain name deleted Successful from suciri. I want to use my new domain name

    But that’s not the problem, and I say it again for clarity that’s not the problem.
    (2FA) Code not working – I’ve always been able to log in whit (2FA) Code until 3 days ago. When a colleague of you changed things in my securi account After that, I could not log in again.

    you can remove (2FA) Code So I can log in (disable 2FA account.
    ———————————————————————————————-

    I received a message again, you should send an email to billing@sucuri.net. I have already emailed them 4 times.
    ——————————————————————————————————————–

    Hi there,

    Unfortunately we currently do not have phone support at this time. It also appears that the emails were going to the wrong mailbox.

    I would be happy to help you with disabling the 2fa so you can log in to your account. But first, I need to authenticate you as the account owner. We do this by verifying with the billing information on file.

    If PayPal – we need the PayPal account email / billing agreement ID

    If Credit card:
    Company Name – if any
    Full name of the account holder
    Last 4 digits of the credit card number used
    Expiration date
    Billing address

    Looking forward to your reply.

    Regards,

    —————————————————————————-
    I sent them all the information and wait and waiting no anser no mail no call nothing. I now pay for a securi firewall that I can not use
    Sorry but I’m really angry people. So I sent them an angry mail.

    I’m really frustrated I thought you were the best. But I really begin to doubt you.
    I have been trying for 3 days now To call you Your line is supposedly occupied for 3 days okay
    Really this is the last time I send an email to you Can you solve my problem If you can not, I would like a refund. Because I pay for something I can not use

    Please disable my 2FA account. So I can log in

    ——————————————————————————–

    Then I received a message

    – This is the last message I received from Ryan securi –
    Your IP address is being blocked for abuse. To continue correspondence, you can email support@sucuri.net. Have a great day! :)

    – I have replay
    Why I just want to be helped I’ve been waiting for 3 days now. No problem I will now post a review online with all the mails that I received from securi. please close my account. And give me a refund. Because you are not fair. have a nice day

    Reply
    • Tony Perez says:
      Aug 22, 2017 at 9:25 pm

      Hi Dani

      Thank you for the feedback. I have since tried reaching out, have no had luck connecting. Please, if you can respond to tony@sucuri.net I’m sure we can work to get this resolved quickly.

      Thanks in advance for your time.

      Tony

      Reply
  15. AJ Clarke says:
    Apr 23, 2017 at 2:32 pm

    Hey,

    We are getting hit hard by SPAM bots located on Amazon AWS and Google Cloud. Do you know if Sucuri firewall can help with that? We currently use WPEngine which has a built-in firewall (not blocking anything) and CloudFlare (also not blocking the spam) we are running out of options and really hope Sucuri can help.

    Reply
    • Editorial Staff says:
      Apr 24, 2017 at 8:31 am

      Hey AJ,

      We use Sucuri because it helps us combat bot spam. I’m fairly certain that their service will fix that problem for you.

      -Syed

      Reply
  16. Ron says:
    Jan 18, 2017 at 1:23 pm

    Do you find that the Sucuri firewall affects your server-based analytics?

    Reply
    • WPBeginner Support says:
      Jan 30, 2017 at 9:05 am

      Hey Ron,

      We don’t use server based analytics because Google analytics and other platforms are far more accurate

      Reply
  17. John says:
    Aug 26, 2016 at 9:12 am

    If you already have Wordfence should you get this too?

    Reply
  18. Avinash says:
    Aug 14, 2016 at 1:02 am

    On sucuri’s product page related to there basic plan which is available for 9.99$ per month, they have also mentioned Performance Optimization and CDN. So is it something like they provide CDN services or they provide web security for websites using CDN services?
    Can you please explain that if they provide CDN services, why should we go for a separate CDN provider?

    Reply
    • WPBeginner Support says:
      Aug 15, 2016 at 12:54 pm

      Please contact Sucuri support, they will be able to explain each plan what features it comes with.

      Reply
  19. Connor Wright says:
    Jul 29, 2016 at 6:34 pm

    I’ve had this for about 1 month and about 1 week ago it blocked 700k attacks and allowed 3m requests through (I own a web hosting company)

    Reply
  20. Johnathan says:
    May 19, 2016 at 1:45 am

    A very recent problem with our website is causing me to uninstall / re- install WordPress.

    Multiple issues:
    We had I guess what you would call “link injection” – Links showing up for our webite in Google that redirected to porn, viagra and such. I found that the htaccess has a a couple additional lines in it that allowed for these redirections.

    I also found in “users” that there were hundreds of user acounts created.

    Dashboard showed there were over 7K log in attemps.

    I started off by trying to pick through everything and repair, but I am concerned that I wouldn’t find all the problems and this would just happen again.

    I know the paid version of sucuri is recommended, but from the information I provided would you think the free versions will prevent these issues until I can justify the monthly cost to the owner of the company?

    Reply
    • WPBeginner Support says:
      May 19, 2016 at 9:17 pm

      The free version can check your website for infections or malware. But for removal and other features you will need the paid version.

      Reply
  21. madan says:
    Mar 9, 2016 at 7:27 am

    Will this affect in search engines bot accessing website

    Reply
    • WPBeginner Support says:
      Mar 9, 2016 at 9:04 am

      Nope.

      Reply
  22. Martin Fuller says:
    Mar 7, 2016 at 2:10 pm

    I am at a loss to understand why the makers of WordPress itself do not address this problem of protection and security

    Reply
    • Ezeugwu Paschal says:
      Jun 14, 2016 at 9:47 pm

      Website Security is a big deal entirely and not everybody is excellent at it. If the makers of WordPress focus thoroughly on security, I bet you we will still be running WordPress version 1.2alpha. It’s better when another set of people takes one of the flaws as their major concern and try as much as possible to fix them.

      Reply
  23. Mary says:
    Mar 7, 2016 at 12:32 pm

    Sucuri is awesome, They have helped me with my site. I’ve looked into other malware removal services and it’s expensive. For $199 a year, you get awesome support, an awesome firewall, awesome advice, and they will even remove the malware for you. If your site gets some good traffic, it’s important to secure your site.

    Reply
  24. simpson says:
    Mar 1, 2016 at 5:17 pm

    can i use together free cloudflare service and sucuri?

    Reply
  25. David says:
    Mar 1, 2016 at 10:21 am

    First and obvious question — how does Sucuri compare to CloudFlare? CloudFlare’s basic plan is free, and does lots of the same things. Why should one switch to Sucuri at $200 a year from CloudFlare (free or $20 a month?)

    Reply
    • Editorial Staff says:
      Mar 1, 2016 at 12:05 pm

      You don’t get the web application firewall on Cloudflare free plan. Your site also don’t get much optimization on the free plan.

      On their $20 / month plan, you do get WAF but that comes out to $240 / year. You also don’t get Advanced DDoS protection for which Cloudflare charges $200 / month (so $2400 / year).

      On the other hand Sucuri gives you WAF + Advanced DDoS protection for $199 / year. And if you want DDoS protection on Layer, 3, 4, & 7 — that’ll be $499 vs CloudFlare’s $2400.

      Aside from price comaprison, Cloudflare doesn’t offer malware cleanup guarantee that Sucuri includes as part of their service.

      Reply
      • GdiGesu says:
        Jul 24, 2016 at 3:29 am

        This is very helpful. Thanks.

        Reply
      • shiva says:
        Mar 7, 2017 at 1:12 pm

        Our website is an huge database and fully loaded with latest windows softwares

        Our website traffic (hummans) : 5-10K & hits : 20-25K, we are worring same problem , what you said in post.

        When i tried our website on cloudflare as plan 20$/month, If set security ” iunder attck mode” , we got blocked adsense for one day. we got mad, now i removed cloudflare , i added maxcdn & keycdn . it works okay not perfect for security purpose.

        Compare to keycdn , maxcdn is excellent work for speed . Still im looking some thing perfect security for wordpress. we will try for this. and also i will post a review on securi in next month.

        Reply
    • Ashu Xlon says:
      Apr 11, 2016 at 3:56 am

      Actually Cloudfare do not totally protect you in their free basic version.They consider all the sites same that’s why there is no specialized security for wordpress whereas wordpress has its own security issues and needed to patched separately.

      Reply
  26. Abhay says:
    Mar 1, 2016 at 9:47 am

    Thank for this article. This is much needed. Sucuri is also of great help in identifying the malware in the site and it’s root. One observation I have on Sucuri, even when there is a malware in the website (because of which the hosting service provider first blocks port 80 and then the website), Sucuri does not show any malware / risk in the website. That’s suprising.

    Reply
    • Editorial Staff says:
      Mar 1, 2016 at 11:59 am

      If you’re using their free scanner tool on the website, then yes that won’t detect all malware specially the ones that are hidden inside your server.

      However the server side scan will detect those.

      Reply

Leave a Reply Cancel reply

Thanks for choosing to leave a comment. Please keep in mind that all comments are moderated according to our comment policy, and your email address will NOT be published. Please Do NOT use keywords in the name field. Let's have a personal and meaningful conversation.

Over 1,320,000+ Readers

Get fresh content from WPBeginner

Featured WordPress Plugin
PushEngage
PushEngage
Increase your website traffic & revenue with push notifications. Learn More »
How to Start a Blog How to Start a Blog
I need help with ...
Starting a
Blog
WordPress
Performance
WordPress
Security
WordPress
SEO
WordPress
Errors
Building an
Online Store
Useful WordPress Guides
    • 7 Best WordPress Backup Plugins Compared (Pros and Cons)
    • How to Fix the Error Establishing a Database Connection in WordPress
    • Why You Need a CDN for your WordPress Blog? [Infographic]
    • 30 Legit Ways to Make Money Online Blogging with WordPress
    • Self Hosted WordPress.org vs. Free WordPress.com [Infograph]
    • Free Recording: WordPress Workshop for Beginners
    • 24 Must Have WordPress Plugins for Business Websites
    • How to Properly Move Your Blog from WordPress.com to WordPress.org
    • 5 Best Contact Form Plugins for WordPress Compared
    • Which is the Best WordPress Popup Plugin? (Comparison)
    • Best WooCommerce Hosting in 2020 (Comparison)
    • How to Fix the Internal Server Error in WordPress
    • How to Install WordPress - Complete WordPress Installation Tutorial
    • Why You Should Start Building an Email List Right Away
    • How to Properly Move WordPress to a New Domain Without Losing SEO
    • How to Choose the Best WordPress Hosting for Your Website
    • How to Choose the Best Blogging Platform (Comparison)
    • WordPress Tutorials - 200+ Step by Step WordPress Tutorials
    • 5 Best WordPress Ecommerce Plugins Compared
    • 5 Best WordPress Membership Plugins (Compared)
    • 7 Best Email Marketing Services for Small Business (2020)
    • How to Choose the Best Domain Registrar (Compared)
    • The Truth About Shared WordPress Web Hosting
    • When Do You Really Need Managed WordPress Hosting?
    • 5 Best Drag and Drop WordPress Page Builders Compared
    • How to Switch from Blogger to WordPress without Losing Google Rankings
    • How to Properly Switch From Wix to WordPress (Step by Step)
    • How to Properly Move from Weebly to WordPress (Step by Step)
    • Do You Really Need a VPS? Best WordPress VPS Hosting Compared
    • How to Properly Move from Squarespace to WordPress
    • How to Register a Domain Name (+ tip to get it for FREE)
    • HostGator Review - An Honest Look at Speed & Uptime (2020)
    • SiteGround Reviews from 4196 Users & Our Experts (2020)
    • Bluehost Review from Real Users + Performance Stats (2020)
    • How Much Does It Really Cost to Build a WordPress Website?
    • How to Create an Email Newsletter the RIGHT WAY (Step by Step)
    • Free Business Name Generator (A.I Powered)
    • How to Create a Free Business Email Address in 5 Minutes (Step by Step)
    • How to Install Google Analytics in WordPress for Beginners
    • How to Move WordPress to a New Host or Server With No Downtime
    • Why is WordPress Free? What are the Costs? What is the Catch?
    • How to Make a Website in 2020 – Step by Step Guide
Deals & Coupons (view all)
SiteGround
SiteGround Coupon
Get up to 63% off off SiteGround's WordPress hosting. Don't miss out!
TeslaThemes
TeslaThemes Coupon
Get 20% off on TeslaThemes large collection of premium WordPress Themes.
Featured In
About WPBeginner®

WPBeginner is a free WordPress resource site for Beginners. WPBeginner was founded in July 2009 by Syed Balkhi. The main goal of this site is to provide quality tips, tricks, hacks, and other WordPress resources that allows WordPress beginners to improve their site(s).
Join our team: We are Hiring!

Site Links
  • About Us
  • Contact Us
  • FTC Disclosure
  • Privacy Policy
  • Terms of Service
  • Free Blog Setup
  • Free Business Tools
Our Sites
  • OptinMonster
  • MonsterInsights
  • WPForms
  • SeedProd
  • Nameboy
  • RafflePress
  • Smash Balloon

Copyright © 2009 - 2021 WPBeginner LLC. All Rights Reserved. WPBeginner® is a registered trademark.

Managed by Awesome Motive | WordPress hosting by SiteGround | WordPress CDN by MaxCDN | WordPress Security by Sucuri.