How to Use SUCURI with WordPress for Better Performance & Security?

A step-by-step guide to using SUCURI protect and speed up a
site a WordPress site.

Two most important metrics for any site is
Performance & Security.

How do you ensure your site loads
faster to generate more sales, traffic, engagement?

How do you monitor & protect your site from online
vulnerabilities, hacker ,

Do you have the above concern for your WordPress site? Well,
you are not alone!

There are multiple ways to achieve.

However, one of the quickest and
cost-effective ways to supercharge your
WordPress site and add protection is by using cloud-based
security provider (CBSP) such as SUCURI .

Wondering, what is SUCURI?

SUCURI is all-in-one security & CDN
(content delivery network) platform for WordPress, Joomla,
Drupal, Magento, phpBB, etc.

Some of the platform features are:

Continous monitoring for DNS records, code
integrity, SSL certificates expiry, WHOIS changes and alert
through SMS, email, slack & RSS.

Remove malware, malicious code, blacklist
warnings, SEO spam and provide a full cleanup report.

Protect from hacks and attacks such as DDoS,
brute-force, bad bots, spam, application specific & common
vulnerabilities. Also, protectino against OWASP top 10.

Improve website performance with global
anycast CDN, HTTP/2 support, smart caching, gzip compression.

There are two plans.

  1. Website Security – a
    complete site security solution, starting from $16.66 per
  2. Website Firewall (WAF) –
    to protect and speed up your site, start from %9.99 per

Curious, what is a difference between SUCURI’s firewall and
security plan?

Website Security plan got everything you get under WAF, plus
the following.

  • Unlimited hack/malware cleanup
  • Malware & blacklist detection
  • Uptime monitoring

If your site is not hacked, blacklisted or malware infected
then you can get it started with WAF plan, and in future if you
ever need the complete security, you can upgrade it through the

SUCURI provides 30 days guarantee and
support is available 24/7/365.

Ready to see how to use SUCURI with WordPress?

Let’s explore…

Little bit about my setup – I am using my test
domain which is hosted on SiteGround with Newspaper
themes by Tagdiv . I am not using
third-party caching or security plugin.

Adding Site to SUCURI Monitoring

Once you’ve purchased  plan and account is activated, you
will get the following screen after login to SUCURI dashboard

  • Click “Add Site”
  • Enter site information and add again

You will get a confirmation about site being added. If your
site is not infected with malware, you can
skip requesting cleanup by clicking “Not Yet”

It will take you to the dashboard  and you should notice
warning about “Server side scanner is not

  • Let’s take advantage of server-side scanner, click
    Enable Scanner

It will prompt to enter the FTP information but I know most of
you won’t be comfortable in providing FTP information.

  • So let’s click “enable manually” and you will get the
    PHP file to download which you got to upload on
    your site root directory.

If you are on SiteGround or shared hosting then you can login to cPanel
>> File Manager >> and Go

  • Click upload button and choose the downloaded file from
  • Once done, click “Verify file and enable” on SUCURI page

Next, It will prompt to whitelist the URL path. If you have any
then provide else skip it.

Let’s go back to overview and here you can see the status of
malware, blacklist, uptime status.

  • To change the scan frequency, you can go
    to settings tab and adjust accordingly.

Great, site is configured to be monitored by
SUCURI and will be notified when something goes wrong.

Let’s go to next step.

Adding Site to SUCURI Firewall

I assume you are still logged into, go to Website firewall menu

  • Click “protect my site now”

  • Enter site information and select I want to use
    the SUCURI’s DNS servers
    , click “Add Site”

Note: using SUCURI DNS server is optional.

  • It will take few seconds and you will be given a SUCURI
    firewall IP.

Let’s point domain (in my example – to point to
SUCURI IP so all traffic routes through them.

There are three options, so choose whatever
you like.

1. Automatic integration – if using cPanel or Plesk
hosting then click “Continue Setup” and choose what you use.

Note: you need to provide hosting login details so if
you are not comfortable then can skip this method and follow
another one.

2. Update NS server – the second option is to
update your domain’s NS (name server) to use SUCURI name

  • Go to DNS tab and you see the list of name servers
; Current Name Servers
; Expected Name Servers

By updating name server, you let SUCURI manage your domain
records. This means when you need to add any subdomain record
you need to do in SUCURI DNS dashboard and not with
the registar.

SUCURI DNS is fast so if you don’t have a
technical limitation in updating NS servers then this is
recommended method.

However, if you don’t want SUCURI to manage the DNS then you
may like the next option.

3. Update A record – Login to your domain registrar or shared hosting cPanel and
update the A record of your domain.

I am going ahead with updating name servers. Once updated, you
can use DNS lookup
tool to verify if it’s reflected.

Note: Sometime DNS update may take up-to 24 hours.

You will notice “Service is activated” banner
on the dashboard.

Well done! You’ve successfully routed your
website traffic thorugh SUCURI.

Let’s explore some of the essential configuration and settings.

Implementing SSL

SUCURI offer FREE SSL/TLS certificate by Let’s
Encrypt. If you want to make your site accessible over HTTPS
for security and search ranking, then you can enable it as

  • Go to HTTPS/SSL tab
  • Select HTTPS only site under “protocol
    redirection” and save

Now, try to access your WP site with https://

And there you go!

With just one click you get SSL implemented on WP site with

Easy, isn’t it?

Note: if you notice any mixed content warning or page
doesn’t load correctly then install Simple SSL plugin .

Enable Compression

Compression is disabled by default, and it’s recommended to
enable it. Compressing helps to reduce the overall page size
and eventually load the page faster.

  • To enable, go to performance tab >> compression and
    select enable >> save

Clearing Cache

Made some changes and don’t see the results? Don’t worry; you
can clear the cache whenever you want.

There are two ways:

  1. Clear cache by file – provide the absolute path
  2. Entire site – clear cache for whole site

It’s doable by going to “Performance” tab.

Meaningful Analytics

Go to the report tab to see the site analytics, such as:

  • Blocked attacks by type
  • Visitors by browser, device
  • Requests served by response
    codes , HTTP protocol version
  • Caching status
  • Traffic by country, hourly

There are many other options which you can play around with.

Now, let’s see how much time it takes to load the page.

In less than one second, amazing!

SUCURI looks promising and if you are serious about making your
site secure and faster then worth giving a try. They offer
30-days money back so go ahead and give a try .


Leave a Reply

%d bloggers like this: