Sumos – 139 Avaliações de Clientes: Análise (agosto 2026) - PT

Visite o Site

Recursos e serviços

Sucuri sells two things: a cleanup service for sites already hacked, and a firewall to stop it happening again. You can buy either, ou ambos.

What Sucuri Actually Sells

• Security Platform – malware removal by human analysts, plus scanning and monitoring. Sold per year.
• Firewall with CDN – um WAF (Firewall de aplicativo da web, a filter that blocks malicious traffic before it reaches your server). It comes bundled with a CDN (Rede de entrega de conteúdo, which caches your pages closer to visitors). Sold per month.
• Blocklist monitoring and removal – Sucuri petitions Google and other vendors to delist your site after a cleanup.
• Ferramentas gratuitas – SiteCheck, a public malware scanner, and a free WordPress plugin that does scanning and hardening.

Everything here is platform agnostic. It works with any CMS and any host, which separates Sucuri from security tools that only cover WordPress.

Principais recursos destacados pelos clientes

• Unlimited manual cleanups – every Platform tier includes them with no per-incident fee. Reviewers hacked repeatedly rate this highly.
• Human analysts, not just automation – people log in and clean the site. Several reviews describe analysts finding malware their own scanners missed.
• Virtual patching – the firewall blocks exploits against known plugin vulnerabilities before you’ve patched them. One Reddit user delays updates to test them, relying on Sucuri to cover the gap.
• Tiered response times – Sucuri sells speed. Basic promises cleanup within 30 horas, Pro within 12, Business within 6.

Locais de data centers

The firewall runs on an Anycast network. One IP address is announced from many locations, and visitors reach the nearest one. Where those locations are is oddly hard to establish.

Marketing pages name no cities at all. The documentation page titled “Sucuri Firewall Locations” is dated 27 marcha 2019, and the locations exist only inside an image, not as text. That image names ten sites: São José, Chicago, Dallas, Washington DC, Miami, Londres, Paris, Frankfurt am Main, Tóquio e Singapura.

That map also contradicts Sucuri’s own blog. A post from 3 novembro 2021 announcing a Mumbai data center listed eleven locations, including Amsterdam and Sofia. None of those three appears on the current map, and nothing appears for South America, África, Oceania or the Middle East. Buying on latency grounds? Sucuri no longer publishes a list you can trust.

Expectativas de desempenho

Marketing claims the CDN “improves page speed and reduces server load by 80% na média” on Firewall plans, e 60% on Platform plans. We found no independent benchmark to check either figure against, and Sucuri doesn’t publish its method.

What we can verify is the absence of a guarantee. Sucuri’s terms state it does not warrant the service “will be secure or available at any particular time or location.” There is no uptime SLA (Acordo de Nível de Serviço, um compromisso contratual de tempo de atividade) in the contract at all. For a product that routes all of your traffic, essa é uma lacuna real.

Experiência do cliente

Sucuri’s ratings vary more across platforms than any provider we’ve looked at recently. Trustpilot coloca em 1.4 fora de 5 de 170 avaliações. Capterra puts it at 4.5 de 39. The distribution explains that gap better than either average does.

Desses 170 Avaliações da Trustpilot, 98 are one star (57.6%) e 54 are five star (31.8%). In between sit 11 two-star reviews, 6 três estrelas, and exactly one four-star. A corpus with almost no middle. People either got their site cleaned and loved it, or they couldn’t reach anybody.

The timing matters more than the split. Sucuri received 17 Trustpilot reviews in the 12 months to August 2026. Fifteen of them are one star. One is two star. One is five star. The five-star reviews cluster in 2021 para 2024. That is why the time-weighted TrustScore of 1.4 sits so far below the raw average of 2.4.

O que os clientes elogiam

Start with the good news: the core service works. Reviewers describe analysts locating malware other scanners missed, in one case an infection dating back four months. Another describes a site going from semi-weekly attacks that crashed the server to zero incidents.

Named agents come up often, which usually signals real support rather than a script. Reviewers thank specific people for escalating SSL problems and for diagnosing faults that turned out to be the host’s.

Value gets mentioned by people hacked more than once. Um janeiro 2024 reviewer called it the best money they spend on their website. The unlimited-cleanup policy earns that.

Reclamações Comuns

Support disappearing after payment is the dominant theme, in almost every recent negative review. Um junho 2026 reviewer wrote that all options to get a reply vanish as soon as you pay. Um janeiro 2026 reviewer described a site down for nearly two days with tickets unanswered.

Missed cleanup deadlines come second, and they attack the thing customers actually bought. Um fevereiro 2026 reviewer paid for the 12-hour tier, then reported nobody had logged into the site 48 hours later. Um agosto 2026 reviewer paid USD 339 on their host’s recommendation and got no reply at all.

False positives are a newer complaint. Em julho 2026 a developer reported Sucuri flagging a legitimate Google AdSense script as an infection. Refund delays recur too. One reviewer spent over ten months chasing an agreed refund, repeatedly told there was a problem with Sucuri’s PayPal account.

One more pattern worth naming. Sucuri has replied to none of the 16 negative reviews Trustpilot counts on its profile. Its reply rate is zero, and it has switched off review collection entirely.

Feedback da comunidade (Reddit e fóruns)

Community discussions add a complaint that barely registers on review sites, because it comes from people who never bought anything: visitors blocked by the firewall.

Em maio 2026, a Linux Mint user asked why the distribution’s forum ran a WAF that “arbitrarily blocks users.” A forum moderator replied that they don’t know why an IP gets randomly blocked either. Another said reopening a browser tab was enough to trigger it, calling the firewall the definition of too sensitive. An r/ProtonVPN thread from June 2026 reports the same for VPN users. One Trustpilot reviewer added the detail that stings. The block page tells you to open a support ticket, and that link sits behind the same block.

On support, um junho 2026 r/Wordpress thread titled “Sucuri is a scam” atraiu 22 comentários. The top reply reads: “24/7 support = you can email us any time. Sucuri is owned by godaddy, ergo …” Not everyone piled on. One commenter pushed back that poor service isn’t fraud. Another wrote that they used to be great back when it started.

The balance is real, Apesar. Um fevereiro 2026 r/Wordpress thread asked how to replace Sucuri’s WAF with something free. The person asking had run Sucuri for years and said it kept every site hack-free. Commenters recommended Cloudflare’s free tier plus Wordfence. One reported 150-plus sites over ten years on that combination, with zero hacks.

Qualidade de suporte

Advertised support is 24/7/365, por meio de tickets e chat ao vivo, plus a phone number. Reviews suggest that number reaches sales, not support. Um abril 2026 reviewer reported the line hanging up after they selected an option.

The gap between “24/7” and what customers experience is this company’s most-cited problem. Sucuri’s own tiers price response time as a feature, de 30 hours down to 6. Recent reviewers report waiting longer than the tier they paid for.

When to Use Sucuri

Sucuri is a strong choice in specific situations:

Ideal para

Sites that are already hacked and need people, não software: this is Sucuri’s core competence, and the thing its positive reviews consistently credit. Unlimited cleanups mean a reinfection doesn’t generate a second invoice.

Non-WordPress sites: most affordable security tools are WordPress plugins. Sucuri covers Joomla, Drupal, Magento and custom applications on equal terms.

Site owners who delay updates deliberately: virtual patching blocks exploits against unpatched plugins. If you test updates before deploying, that gap is what you’re buying cover for.

Você vai gostar se

• You’ve been blocklisted by Google, because delisting is included and handled for you
• You want one vendor across a mixed estate of hosts and platforms
• You’d rather pay a flat annual fee than a per-incident cleanup quote

When NOT to Use Sucuri

No security vendor suits everyone. Sucuri is the wrong choice if:

Procure em outro lugar se

You need fast support during an incident: this is the clearest signal in the data. Fifteen of the last 17 Trustpilot reviews are one star, nearly all citing unanswered tickets. If downtime costs you money by the hour, buy a contractual response time.

You only need a firewall and CDN: Cloudflare’s free tier includes unmetered DDoS protection and a managed ruleset. Pagando em dólares americanos 9.99 a month for the same category of protection needs a reason.

Your audience uses VPNs or shared IP addresses: the false-positive blocking reported across several communities will cost you real visitors. Pior, the block page’s own support link is blocked too.

Bandeiras vermelhas para sua situação

• Você quer uma garantia de tempo de atividade: Sucuri’s terms explicitly disclaim that the service will be available at any particular time. There is no SLA and no service credit.
• You might want a refund after a cleanup: the 30-day guarantee is void once you submit a malware removal request. Since most buyers arrive already hacked, most buyers void it on day one.
• You expect a guaranteed outcome: the contract states Sucuri does not warrant that the service will prevent infection or reinfection. Nor that your site will still work after being cleaned.
• Você precisa de suporte por telefone: the published number routes to sales, and reviewers report being hung up on.

Se alguma destas situações se aplicar, consider Cloudflare, Wordfence or MalCare instead. Veja a seção Alternativas abaixo.

Sucuri Transparency Score

We assess how upfront Sucuri is with information a buyer needs:

• Informações da Empresa: Limitado. The About page says “since 2009” and names no founder, headquarters or address. GoDaddy ownership appears only in a footer line reading “GoDaddy Mediatemple, Inc., d/b/a Sucuri,” which most buyers will never notice.
• Transparência de preços: Boa. Prices are published per tier, with no promotional rate hiding a renewal jump. That beats most of the hosting industry. Multi-year discount terms are only visible after you create an account.
• Documentação Técnica: Limitado. The firewall locations page is dated March 2019, publishes its list only as an image, and omits three locations Sucuri itself announced. o 80% speed claim carries no methodology.
• Termos e Políticas: Boa, in that the bad news is written down. The refund exclusion, the renewal-at-current-rates clause and the no-guarantee language are all stated plainly. Just in the terms, not next to the buy button.

Transparência geral: Misturado. Sucuri publishes honest prices and an honest contract, then stops. The parts a buyer checks after a bad experience, like where the servers are and who to escalate to, have gone stale or missing.

Alternatives to Sucuri

If Sucuri doesn’t fit, estes três abordam suas lacunas específicas. Prices verified August 2026.

For Firewall and CDN Only: Cloudflare

Cloudflare’s free plan includes unmetered DDoS protection and a managed firewall ruleset at USD 0. Pro costs USD 20/mo billed annually, or USD 25/mo monthly. It won’t clean an infected site, so it replaces Sucuri’s firewall, not its cleanup service. It’s the most common recommendation in the Reddit threads we read.

For Guaranteed Response Time: Wordfence

Wordfence Premium costs USD 149/yr, well under Sucuri Basic, though it only covers WordPress. The interesting tier is Wordfence Response at USD 1,250/yr. It contracts a 1-hour response and 24-hour resolution, 365 dias por ano. That’s the direct answer to Sucuri’s support problem, and you pay for it. Wordfence Care sits at USD 590/yr, close to Sucuri Business at USD 549/yr. Compare those two directly, then check our Guia de hospedagem WordPress, since some hosts bundle equivalent protection.

For Cheaper Cleanup: MalCare

MalCare Repair costs USD 299/yr with cleanup and a 24-hour response. Fortify costs USD 499/yr with a 6-hour response and hourly scans. Compare that to Sucuri Business at USD 549/yr for the same 6-hour commitment. MalCare is WordPress-only, e um 40% discount was running when we checked.

Worth saying plainly: your host may already cover this. Vários fornecedores em nosso comparação de hospedagem na nuvem e nosso guia de hospedagem compartilhada include malware scanning and cleanup at no extra cost. Check that before adding USD 229 um ano, and check the managed plans in our Guia de hospedagem VPS também.

Conclusão

Copie este resultado

Sucuri earns 1.4 fora de 5 na Trustpilot em 170 avaliações. That score reflects the last two years, not the reputation. The security product still works. The company behind it has stopped answering.

O resultado final

Com 57.6% of its Trustpilot reviews at one star, e 15 of its last 17 at one star, Sucuri has a support problem. Its cleanup quality no longer offsets it. Prices are honest and the analysts are skilled. But you are buying a response time, and recent buyers report not getting the one they paid for.

Buy it if your site is infected, you’ve read the refund exclusion, and you can wait. Don’t buy it if downtime costs you money, or if you only wanted a firewall, because Cloudflare gives that away. Nosso ecommerce WordPress hosting guide covers hosts that build protection in rather than selling it separately.

perguntas frequentes

Is Sucuri good for beginners?

Yes for cleanup, no for everything else. If your site is hacked, Sucuri does the work for you. That suits people who can’t clean malware themselves. But the firewall needs a DNS change to activate, and support is slow if that goes wrong. Check what your host already includes first.

Is Sucuri worth the price?

It depends on whether you need people or software. USD 229 a year buys unlimited human cleanups with a 30-hour wait and no firewall. Fair value if you’ve been hacked twice. Poor value if you just want a WAF, since Cloudflare’s free tier covers that.

Do que os clientes mais reclamam?

Support that goes quiet after payment. It’s the top theme in nearly every recent negative review. Second is missed cleanup deadlines, where customers paid for a 12-hour or 6-hour response and waited days. Third is the firewall blocking legitimate visitors, which shows up in Reddit threads more than on review sites.

How does Sucuri compare to Wordfence?

Wordfence is WordPress-only; Sucuri works with any platform. Wordfence Premium costs USD 149/yr against Sucuri Basic at USD 229/yr. The real difference is the contract. Wordfence Response commits to a 1-hour reply and 24-hour resolution. Sucuri publishes cleanup targets, then disclaims availability guarantees in its terms.

Does Sucuri offer refunds?

sim, with a catch that affects most buyers. Você consegue 30 days to cancel for a full refund, from signup or from any renewal date. But the refund is void if you submitted a malware removal request in those 30 dias. Most people buy Sucuri because they’re already hacked, so requesting the cleanup forfeits the guarantee. Cancelling also requires a ticket, and PayPal users must cancel the recurring payment separately.

Does Sucuri guarantee my site won’t be hacked?

Não, and the terms say so directly. Sucuri does not warrant that the service will prevent infection or reinfection. Nor that your site will still work after cleaning, nor that the service will be available at any given time. If Sucuri can’t clean your site, the only remedy is a refund of that site’s annual fee. Total liability is capped at USD 10,000.

Avaliações de usuários sobre Sucuri