Next, you need to navigate to the Sucuri Security ” Settings page and click on the “Hardening” tab.
Posted: Mon Jan 20, 2025 10:23 am
The default settings are fine for most sites, so you can enable them by clicking the “Apply Hardening” button on each option.
Hardening your WordPress blog or website
This way, you can secure the key areas that hackers often use for their attacks.
Tip: We'll cover other ways to secure your site later in this article, such as changing the database prefix and administrator username, but these are more technical in nature and may require programming knowledge.
After the hardening part, the other default settings of the plugin are sufficient for most websites and do not need to be changed.
The only thing we recommend is customizing the email notifications, which you can find in the Notifications tab on the Settings page.
Customizing your website's security alerts
By default, you receive a multitude of email notifications that can clog up your inbox.
We recommend enabling alerts only for important actions that you want to be notified about, such as plugin changes and new user registrations.
Customizing your WordPress security notifications
This WordPress security plugin is very powerful, list of bulgaria cell phone number browse through all the tabs and settings to see what it can do, such as malware scanning, audit logs, tracking failed login attempts, and more.
For more information, see our detailed Sucuri review .
Enable a Web Application Firewall (WAF)
Using a Web Application Firewall (WAF) is the easiest way to protect your website and be confident in WordPress security.
A website firewall blocks any malicious traffic before it even reaches your website.
A DNS-level website firewall routes your website traffic through its cloud proxy servers, allowing it to only send genuine traffic to your web server.
An application-level firewall inspects traffic as it reaches your server, but before most WordPress scripts are loaded. This method is not as efficient as the DNS-level firewall in reducing server load.
For more information, check out our list of the best WordPress firewall plugins .
Hardening your WordPress blog or website
This way, you can secure the key areas that hackers often use for their attacks.
Tip: We'll cover other ways to secure your site later in this article, such as changing the database prefix and administrator username, but these are more technical in nature and may require programming knowledge.
After the hardening part, the other default settings of the plugin are sufficient for most websites and do not need to be changed.
The only thing we recommend is customizing the email notifications, which you can find in the Notifications tab on the Settings page.
Customizing your website's security alerts
By default, you receive a multitude of email notifications that can clog up your inbox.
We recommend enabling alerts only for important actions that you want to be notified about, such as plugin changes and new user registrations.
Customizing your WordPress security notifications
This WordPress security plugin is very powerful, list of bulgaria cell phone number browse through all the tabs and settings to see what it can do, such as malware scanning, audit logs, tracking failed login attempts, and more.
For more information, see our detailed Sucuri review .
Enable a Web Application Firewall (WAF)
Using a Web Application Firewall (WAF) is the easiest way to protect your website and be confident in WordPress security.
A website firewall blocks any malicious traffic before it even reaches your website.
A DNS-level website firewall routes your website traffic through its cloud proxy servers, allowing it to only send genuine traffic to your web server.
An application-level firewall inspects traffic as it reaches your server, but before most WordPress scripts are loaded. This method is not as efficient as the DNS-level firewall in reducing server load.
For more information, check out our list of the best WordPress firewall plugins .