Sucuri Firewall + WordPress Security Plugin connects WordPress security monitoring with Sucuri’s cloud Website Firewall. The firewall runs in the cloud and can operate without the extension; installing the extension lets administrators view and manage supported firewall options from the WordPress dashboard. Monitoring tools include security activity auditing, file integrity monitoring, remote malware scanning, blocklist monitoring, hardening recommendations, and post-hack actions.

Review activity and file changes

Audit logs record security events such as visitor logins and content modifications. To investigate an unexpected file change, compare current documents with the known-good baseline created when the plugin is installed. The integrity view identifies added, modified, and removed files. Administrators can also review recorded login and content events. Sucuri says audit logs are not stored in the WordPress database.

The remote malware scan checks the website as a regular visitor for known malware, viruses, blocklisting, site errors, outdated software, and malicious code. Blocklist monitoring checks major services, and security alerts can be customized, including their frequency. Hardening recommendations vary by environment. If a compromise occurs, the Post-Hack tools guide administrators through updating secret keys, resetting user passwords, resetting installed extensions, then updating plugins and themes.

Firewall controls and vulnerability scans

A Sucuri Firewall account and valid Firewall API key are required for account-linked functions, including firewall controls and vulnerability scanners. The Web Application Firewall helps protect against denial-of-service and distributed denial-of-service attacks, software vulnerability exploitation, and brute force attacks against access controls. Its functions also include zero-day disclosure patches, performance optimization, advanced access controls, failover, and redundancy. Brute force auditing and reporting provide visibility into login attempts. Separate vulnerability scanners check WordPress core files, installed plugins, installed themes, and the PHP environment.

Connect the services

Install the plugin in WordPress and generate its API key to activate event monitoring. This key authenticates the site with the remote WordPress API; it is separate from the Firewall API key. To use account-linked firewall features, connect the Firewall API key from the Sucuri Firewall dashboard. Administrators can then configure alerts and review hardening recommendations for their site environment.