Overview
Sucuri sells a cloud-based web application firewall with a built-in CDN. You add your site, point its DNS records at Sucuri, and the firewall inspects every request before it reaches your server, blocking common exploits, brute-force attempts and layer 3, 4 and 7 DDoS attacks. Virtual patching shields outdated CMS plugins and software, and Sucuri issues SSL certificates automatically for the firewall.
There are two families of plans. Firewall with CDN plans start at $9.99 a month (Basic) and $19.98 (Pro, which lets you upload your own SSL certificate). Security Platform plans from $229 to $549 a year bundle the firewall with unlimited manual malware removal, blocklist monitoring and scheduled security scans, with faster cleanup response times on higher tiers.
Sucuri is aimed at site owners and agencies running WordPress and other CMSs rather than developers who want programmable edge rules. It is not a DNS host, and each plan covers a single site.
Pricing and plans
| Plan | Price | What you get |
|---|---|---|
| Basic Firewall | $9.99/mo | WAF and CDN for one site |
| Pro Firewall | $19.98/mo | Adds custom SSL certificate upload |
| Basic Platform | $229/yr | WAF, unlimited malware cleanups (30 h SLA), scans every 12 h |
| Pro Platform | $339/yr | 12 h cleanup SLA, scans every 6 h, custom SSL |
| Business Platform | $549/yr | 6 h cleanup SLA, scans every 30 min |
| Multi-site | $999.98/yr (5 sites) | Junior Dev plan; 10+ sites by quote |
What it does
- Cloud WAF
- Blocks malicious traffic and hacks before they reach the server, adapted to the CMS in use.
- Virtual patching
- Hardening rules protect outdated software until it is updated.
- DDoS mitigation
- Anycast network mitigates layer 3, 4 and 7 DDoS attacks.
- CDN caching
- Anycast CDN that Sucuri says reduces server load by 60% on average.
- Malware removal
- Unlimited manual cleanups on platform plans, with response SLAs from 30 to 4 hours.
- Security scans
- Malware, blocklist, DNS, uptime and SEO spam monitoring every 12 hours to 30 minutes.
Strengths and limitations
Strengths
- Simple setup by DNS change, independent of host or CMS.
- Malware cleanup and firewall from one vendor.
- 24/7 security team and 30-day money-back guarantee.
- Low entry price for a managed WAF.
Limitations
- Each plan covers only one website.
- No free tier.
- Custom SSL uploads need Pro or higher.
- No DNS hosting or programmable edge rules.
Who it suits
Good for
- WordPress and CMS sites on shared hosting
- Small businesses recovering from or preventing hacks
- Agencies protecting client sites
Look elsewhere if
- API-heavy applications needing programmable rules
- Teams wanting usage-based CDN pricing for many sites
Alternatives to Sucuri Website Firewall
| Tool | From | Free option | Stages |
|---|---|---|---|
| Amazon CloudFront CDN with bundled WAF and DNS plans | $15/mo | Free tier | |
| Cloudflare CDN, DNS, WAF and DDoS protection | $20/mo | Free tier | |
| ClouDNS Managed DNS with free and low-cost plans | $2.95/mo | Free tier | |
| LuaDNS Developer DNS hosting with Git | $29/yr | Free tier | |
| easyDNS Managed anycast DNS and registrar | $20/yr | ||
| Namecheap Domain registrar | $10.98/yr |
Questions
How much does Sucuri Firewall cost?
Basic Firewall starts at $9.99 a month and Pro at $19.98 a month, each for one site.
Does Sucuri include malware removal?
The Security Platform plans ($229 to $549 a year) include unlimited manual malware cleanups.
How do you activate the Sucuri firewall?
Add your site in Sucuri and change your DNS records to route traffic through the firewall.
Sources read for this page