A step-by-step guide to using SUCURI protect and speed up a
site a WordPress site.
Two most important metrics for any site is
Performance & Security.
How do you ensure your site loads
faster to generate more sales, traffic, engagement?
How do you monitor & protect your site from online
vulnerabilities, hacker ,
Do you have the above concern for your WordPress site? Well,
you are not alone!
There are multiple ways to achieve.
However, one of the quickest and
cost-effective ways to supercharge your
WordPress site and add protection is by using cloud-based
security provider (CBSP) such as SUCURI .
Wondering, what is SUCURI?
SUCURI is all-in-one security & CDN
(content delivery network) platform for WordPress, Joomla,
Drupal, Magento, phpBB, etc.
Some of the platform features are:
Continous monitoring for DNS records, code
integrity, SSL certificates expiry, WHOIS changes and alert
through SMS, email, slack & RSS.
Remove malware, malicious code, blacklist
warnings, SEO spam and provide a full cleanup report.
Protect from hacks and attacks such as DDoS,
brute-force, bad bots, spam, application specific & common
vulnerabilities. Also, protectino against OWASP top 10.
Improve website performance with global
anycast CDN, HTTP/2 support, smart caching, gzip compression.
There are two plans.
Website Security – a
complete site security solution, starting from $16.66 per
Website Firewall (WAF) –
to protect and speed up your site, start from %9.99 per
Curious, what is a difference between SUCURI’s firewall and
Website Security plan got everything you get under WAF, plus
- Unlimited hack/malware cleanup
- Malware & blacklist detection
- Uptime monitoring
If your site is not hacked, blacklisted or malware infected
then you can get it started with WAF plan, and in future if you
ever need the complete security, you can upgrade it through the
SUCURI provides 30 days guarantee and
support is available 24/7/365.
Ready to see how to use SUCURI with WordPress?
Little bit about my setup – I am using my test
domain techpostal.com which is hosted on SiteGround with Newspaper
themes by Tagdiv . I am not using
third-party caching or security plugin.
Adding Site to SUCURI Monitoring
Once you’ve purchased plan and account is activated, you
will get the following screen after login to SUCURI dashboard
- Click “Add Site”
- Enter site information and add again
You will get a confirmation about site being added. If your
site is not infected with malware, you can
skip requesting cleanup by clicking “Not Yet”
It will take you to the dashboard and you should notice
warning about “Server side scanner is not
- Let’s take advantage of server-side scanner, click
It will prompt to enter the FTP information but I know most of
you won’t be comfortable in providing FTP information.
- So let’s click “enable manually” and you will get the
PHPfile to download which you got to upload on
your site root directory.
If you are on SiteGround or shared hosting then you can login to cPanel
>> File Manager >> and Go
- Click upload button and choose the downloaded file from
- Once done, click “Verify file and enable” on SUCURI page
Next, It will prompt to whitelist the URL path. If you have any
then provide else skip it.
Let’s go back to overview and here you can see the status of
malware, blacklist, uptime status.
- To change the scan frequency, you can go
to settings tab and adjust accordingly.
Great, site is configured to be monitored by
SUCURI and will be notified when something goes wrong.
Let’s go to next step.
Adding Site to SUCURI Firewall
I assume you are still logged into, go to Website firewall menu
- Click “protect my site now”
- Enter site information and select I want to use
the SUCURI’s DNS servers, click “Add Site”
Note: using SUCURI DNS server is optional.
- It will take few seconds and you will be given a SUCURI
Let’s point domain (in my example – techpostal.com) to point to
SUCURI IP so all traffic routes through them.
There are three options, so choose whatever
1. Automatic integration – if using cPanel or Plesk
hosting then click “Continue Setup” and choose what you use.
Note: you need to provide hosting login details so if
you are not comfortable then can skip this method and follow
2. Update NS server – the second option is to
update your domain’s NS (name server) to use SUCURI name
- Go to DNS tab and you see the list of name servers
; Current Name Servers ns1.sgp22.siteground.asia ns2.sgp22.siteground.asia ; Expected Name Servers 10.sucuridns.com 11.sucuridns.com 18.sucuridns.com 19.sucuridns.com
By updating name server, you let SUCURI manage your domain
records. This means when you need to add any subdomain record
you need to do in SUCURI DNS dashboard and not with
SUCURI DNS is fast so if you don’t have a
technical limitation in updating NS servers then this is
However, if you don’t want SUCURI to manage the DNS then you
may like the next option.
3. Update A record – Login to your domain registrar or shared hosting cPanel and
update the A record of your domain.
I am going ahead with updating name servers. Once updated, you
can use DNS lookup
tool to verify if it’s reflected.
Note: Sometime DNS update may take up-to 24 hours.
You will notice “Service is activated” banner
on the dashboard.
Well done! You’ve successfully routed your
website traffic thorugh SUCURI.
Let’s explore some of the essential configuration and settings.
SUCURI offer FREE SSL/TLS certificate by Let’s
Encrypt. If you want to make your site accessible over HTTPS
for security and search ranking, then you can enable it as
- Go to HTTPS/SSL tab
- Select HTTPS only site under “protocol
redirection” and save
Now, try to access your WP site with https://
And there you go!
With just one click you get SSL implemented on WP site with
Easy, isn’t it?
Note: if you notice any mixed content warning or page
doesn’t load correctly then install Simple SSL plugin .
Compression is disabled by default, and it’s recommended to
enable it. Compressing helps to reduce the overall page size
and eventually load the page faster.
- To enable, go to performance tab >> compression and
select enable >> save
Made some changes and don’t see the results? Don’t worry; you
can clear the cache whenever you want.
There are two ways:
- Clear cache by file – provide the absolute path
- Entire site – clear cache for whole site
It’s doable by going to “Performance” tab.
Go to the report tab to see the site analytics, such as:
- Blocked attacks by type
- Visitors by browser, device
- Requests served by response
codes , HTTP protocol version
- Caching status
- Traffic by country, hourly
There are many other options which you can play around with.
Now, let’s see how much time it takes to load the page.
In less than one second, amazing!
SUCURI looks promising and if you are serious about making your
site secure and faster then worth giving a try. They offer
30-days money back so go ahead and give a try .