Website Firewall

Plugins

The plugin is available for any website owner that is using WordPress. This security plugin will monitor file changes, provide audit trails, apply hardening features and detect various types of malware, SPAM and other infections. The Sucuri...

Read more

Website Firewall

You made the right choice by trying out our Sucuri Firewall on your website. The Sucuri Firewall is a cloud-based protective layer, that does not require any installation or modification to your server. With a simple DNS change, we will protect your...

Read more

Testing the WAF Before Changing the DNS

To make sure the WAF is working as expected before changing the DNS records for real, you can configure your operating system to use the Sucuri WAF IP address when accessing your website. To do that, you just need to edit the host file on your...

Read more

Bypassing the WAF for Testing

In the early Internet age, operating systems used to use the hosts file to resolve hostnames to IP addresses until public DNS servers were commonplace. Operating systems continue to allow you to edit the hosts file manually in order to bypass...

Read more

Block HTTP Cookies

A cookie is a small piece of data sent from a website and stored in a user’s web browser while the user is browsing that website. Every time the user loads the website, the browser sends the cookie back to the server to notify the website of the...

Read more

Protected Page

In order to increase your site’s protection, Sucuri offers an extra layer of protection to Sucuri Firewall users. It is what we call Protected Pages. This option allows you to restrict access to certain pages on your site and it can also be used as...

Read more

Block User-Agents

A good way to block unwanted visitors to your site is by blocking specific user-agents. By blocking their User Agents, you will stop any traffic that contains the specified name in the user agent field. A “user agent” is a software agent that is...

Read more

Blacklist an URL path

If you want to prevent access on a specific URL, you can do this by the following: Click here and enter the URL path you want to blacklist under the Blacklist URL Paths section. Click on Blacklist to blacklist the URL path once you have typed it...

Read more

Blacklist an IP address

The Sucuri Firewall has several layers of protection, so you don’t need to worry about blacklisting IP addresses. It will automatically blacklist offending IP addresses, if it detects continuous attacking requests. However, if for any reason...

Read more

Whitelist an IP Address

By default, Sucuri Firewall will restrict access to your admin pages (e.g. /wp-admin, /administrator or /admin) so that only authorized IP’s can log in. That way, if your user accounts are ever compromised, your site will still be safe. To...

Read more