Sucuri is Building a Comprehensive Alternative to CloudFlare

Sucuri launched a new free performance tool today. The Global Website Performance Tester allows anyone to enter a URL and get a quick assessment of how fast the website is loading from 13 globally distributed testing stations. Results include three key metrics: connection time, time to first byte (TTFB) and total load time.


At the moment, there are no plans for an API, but Sucuri CEO Tony Perez said that it’s possible to build one if there’s enough demand.

The new performance checker is a simple free tool that the Sucuri team built for its own use but also signifies the company’s foray into performance-related products and services.

“Performance can easily fall into the realm of Availability, and as such we see it as an important piece of security,” Perez told the Tavern. “There is no denying that performance is top of mind to most website owners, as is security.”

Sucuri has been quietly beefing up its architecture to support an expansion into performance-related services that would go hand-in-hand with its WAF (Website Firewall) product.

“We’ve been building out our network and performance is a tenant of our Website Firewall,” Perez said. “It was imperative that we understood how good or bad our network was compared to the other performance (CDN) providers. Like most things we do, the performance tool was a tool to satisfy our own needs.”

Sucuri Is Expanding to Accommodate Plans for a Full-Featured CloudFlare Alternative

Sucuri is currently managing over 40 billion page views per month via its WAF network. The team is working on expanding to a full WAF/CDN solution to serve performance-related features.

“The fundamental difference is that it’s security first, performance second,” Perez said. “So yes, in the coming months you’ll see more as our solution blossoms into a full WAF/CDN solution.”

Up until now the company has been limited by using a leased architecture but is making changes to support the WAF/CDN expansion.

“We’re actively migrating from a leased architecture to our own infrastructure, giving us full control of the website,” Perez said. “This gives us optimal control to mitigate all attacks, including large scale DDOS attacks; a by-product of that will be performance in the form of a global CDN.”

Sucuri is is building its own DNS architecture with full DNS management within its application.

“Users will have an alternative to solutions like CloudFlare,” Perez said. “The fundamental difference being we’re a security company first.

Sucuri is building its expansion on top of the an Anycast network, which means that users’ requests will be routed to the nearest node on request.

“With most of the content cached at the edge it’ll be designed for optimal speeds regardless of where you are in the world,” Perez said. “That’s perhaps the biggest feature – most everything comes down to our design and configuration and how we handle the traffic.”

When asked if he sees the final WAF/CDN solution to be a comprehensive Cloudflare alternative, Perez responded, “Oh hell yeah – with one key differentiator: we’ll clean the mess too.”

“The idea is when you think of Sucuri it’s a complete package – Protection – Detection – Response. It’s all built in-house, no third-party integrations,” he said.

“The cleaning is the one thing that no one else can match us on, it’s either too much liability or they haven’t figured out how to scale.”

Sucuri’s WAF service is currently used by iThemes, Gravity Forms, List25, and many others in the WordPress space. If the company is able to deliver on their CloudFlare alternative, which is planned for this summer, customers will have the opportunity to get their security services bundled in with the new performance-enhancing features of the CDN.


29 responses to “Sucuri is Building a Comprehensive Alternative to CloudFlare”

  1. Wow this is definitely some interesting news. I’m pretty excited to see what everything looks like as well as how it all works.

      • got an F. And yet some folks consider that to be the site of a WordPress guru.

        • Some folks think a lot crazy things that are simply not true. Some folks believe that everything technical should be ‘easy’ because ‘Google!’ Again, without lots of education and context, this is simply not true.

          Chris has always played himself as a communicator of ideas; bringing technical teams better productivity. His whole career is centered around that spindle. The fact that he does what he does within the sphere of ‘Technology’ (pretty successfully I might add) doesn’t really make him a guru of Technology. He comprehends a lot of things over a mature career in the industry. Yet he isn’t the guy you would hire to code something complex. He is the guy you would hire to make sure that your team of (expensive, yet valuable) coders work better together on complex projects.

          As a writer though, I am pretty sure you knew all of this, right? So why throw darts? Passion is a wonderful gift, when focused properly.

          • He’s also the guy who claims to be able to tell you (among other things) what theme to use and which host to go with. He gets affiliate commission for doing so, and yet his site scores an F.

            Apparently, you think the people he’s persuading to follow his guidance are “folks thinking crazy things.” And yet, apparently, you think it’s OK to take advantage of them.

            I don’t.

        • Well somebody got out of the wrong side of bed this morning didn’t they? Perhaps find someone who gets a good grade, and complement them. It’s much more productive than whining :P

    • got an A grade when I tested it. Did you guys do anything special to achieve that? Or was it just dumb luck?

  2. I would love to drop CloudFlare and switch to the Sucuri WAF/DNS… we have been Sucuri clients for YEARS and have only had to use the cleanup twice. If I could move all that inhouse that rock. Cannot wait to give this a run!

    • Hey David

      You can already do this. If you’re still a client, just submit a ticket and ask to try the WAF product.. they’ll enable it for 30 days if you’re interested..


  3. What’s the cost per month going to be? Are you going to offer a free version similar to what CloudFlare does to with your WAF and cleanup?

    • You can already find the cost on our Website Firewall page.. it starts at $9.99 a month and goes up from there depending on your need.

      No, there won’t be a free version.



  4. This also means competition for CloudFlare, so they might improve their services. This should be interesting.

  5. This is going to be hard to improve your ratings on I think. It seems to be mostly measuring your ability to serve content based on geo-location. My site serves content plenty fast enough for anywhere nearby, but it slows down a lot in overseas places like the USA. Short of setting up servers in each location, I’m not even sure how to fix that aside from changing to a different server host.

    • I think it is also affected by the time when you test the site. At the time of writing, my site got an F, and WPTavern got a C. Both dropped one grade.

    • wonder how its done. I cant duplicate the times using other tools. Sucuri site itself is weirdly fast in their own tests. Feels a little off.

  6. Interesting to see where this Sucuri goes as an alternative. I tried my Shaped Pixels site and got an E, lol. I won’t worry too much about that because the grade seems to fluctuate a lot in a matter of minutes with sites I’ve entered in and then once again minutes later. I put in one where it got an A, then about 8 minutes after, it got a D. I just turned on my host account’s Cloudfare (free through Media Temple) to see what grade I get with that. With Webpagetest, I got all “A”s except first time byte at 1.197s which gave me an F, lol. An F at just under 2 sec.

  7. First time I tested my site,, it got an A. Now it gets a D, yet another site of mine (in the same server farm) gets a B.
    I like tools like this, but to get more conclusive results, it would need to be able to measure the average loading time (e.g. over a couple of seconds or minutes) instead of just 1 point in time. It even looks like it caches the results for a while, so re-testing immediately does not work.

    I have previously used a service called to monitor my sites like mentioned above and would get detailed statistics of loading time across the continents, but unfortunately that closed down.

  8. I’ve tested their performance tool on about 7 domains I own and have to say that this tool is useless as the results are inaccurate. There must be some issue with their test servers in few locations (Dallas, Atlanta, LA … saturated bandwidth or something like that) because I got 5 seconds connection time to my server in New York. I got same results for my VPS in Atlanta (even tested from their Atlanta location !!). I then tested from my dedicated box I have in Atlanta and instead of 5 seconds I got 0.07 seconds! I also did cross server tests with same results, every result below 1 second.
    Then I decided to ask my friend who also has about 5 domains on 2 different servers to do some tests. And he said that he experienced weird results too.

  9. I love everything from Sucuri, they are the savior. No doubt it will be the competition to CloudFlare.

    And great that I got A+ for my blog. :)

  10. Another great tool being offered by Securi. But I agree with some of the other comments. Some of the results from different locations are a little weird and seem to be inaccurate.

  11. Fantastic News. I’m really hoping the CDN works out. I’ve been considering using a CDN but if Sucuri are going to cover it, then I’ll just wait and use that.

  12. Interesting tool for performance testing. But there’s a big difference in results between ,, and this tool.

    My results in this tool are a lot worse than compared tools.pingdom and gtmetrix.

    Total load time for here is 0,2..sec while in gtmetrix it is 2.8sec and 2.09 in tools.pingdom

    With my site it is more consistent, I had an F here with 1.6sec, but 0,6sec on tools.pingdom and 1.6sec via gtmetrix (normally that’s around 1.2sec).

    So I wonder how these measurements are made and how reliable they are.


Subscribe Via Email

Enter your email address to subscribe to this blog and receive notifications of new posts by email.

%d bloggers like this: