In reply to WPVKP.

Templatic has confirmed that Sucuri was brought into the picture after the hack. See this twitter conversation: