WillItSurvive
Cybersecurity companies · subsidiary of GoDaddy Inc. · United States

Sucuri

Sucuri sells website malware cleanup and a WAF/CDN, owned by GoDaddy since 2017.

Losing its protection
Assessed 21 July 2026 · Evidence as of 21 July 2026
The structural protection is eroding.
On the recordSince 21 July 2026 · Checkable from August 6, 2026 · Every call on the record Checkpoint: GoDaddy Q2 2026 earnings call, watch for Sucuri branding vs Core Platform bundling
The call

Sucuri survives on GoDaddy's customer base and manual cleanup work, while GoDaddy's own Cloudflare tie-up shows where the parent's security bets are actually going.

Sucuri provides website security services like firewalls and malware cleanup for small business owners, mostly sold through GoDaddy. Its main products are becoming easier for competitors to copy: Cloudflare offers similar protections for free, Wordfence does the same for WordPress sites, and both now appear in 2026 reviews as the recommended choice. GoDaddy is even routing its new AI security features through Cloudflare instead of building them into Sucuri, which signals the company views Sucuri as less important. The only advantage Sucuri has left is hiring actual people to manually clean up hacked websites and the ability to bundle it with GoDaddy's other services, but that may not be enough to stop the slide. Watch GoDaddy's August earnings call to see if they still talk about Sucuri as its own product or mention weaving security into their new AI tool called Airo, which would confirm Sucuri is being quietly downgraded.

Why
01
AI pressure: AI-automated vulnerability scanners and free WAF tools. AI-driven scanning tools cut into paid detection work, while remediation still needs human cleanup Sucuri provides. Could AI do the core job? Only partly.
02
Bigger players: Cloudflare. Cloudflare's free WAF and CDN, now GoDaddy's own AI Crawl Control partner since April 2026, undercuts Sucuri's core product. Could a giant copy it? Yes, easily.
03
What protects it. Human-staffed malware remediation and GoDaddy's built-in distribution to hosting customers.
What would change this call
GoDaddy's August 6, 2026 Q2 earnings call mentions or omits Sucuri as a named product. Naming Sucuri distinctly would show continued investment; silence suggests deprioritization.
GoDaddy expands its April 2026 Cloudflare partnership into WAF or malware remediation services. Would show GoDaddy bypassing Sucuri's core product with a competitor's technology.
Sucuri headcount or hiring trend reported over the next two quarters. Continued decline would confirm the subsidiary is not being reinvested in.
Key numbers
  • Headcount down 1.6% YoY to 62 employees (2026-06-10)
  • Revenue estimates range $4.6M to $26.3M across sources (2025-04-09)
  • GoDaddy Core Platform grew 3.3% YoY to $776.2M (2026-02-24)
Named risks
  • Core WAF/CDN business commoditized by free Cloudflare and Wordfence alternatives. Severity: high
  • Parent GoDaddy routes new AI security features (AI Crawl Control) through Cloudflare, not Sucuri. Severity: high
  • Stagnant headcount (0/100 growth score, -1.6% YoY) signals non-priority subsidiary status. Severity: medium
  • GoDaddy's documented history of major security breaches (2019, 2021, 2023) creates reputational spillover risk. Severity: medium
  • No standalone financial disclosure makes true revenue/health of Sucuri unverifiable. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
Cloudflarelosing toGoDaddy partnered with Cloudflare for AI Crawl Control (April 2026) instead of building via Sucuri
Wordfencelosing to2026 reviews (Apr 2026) recommend free Wordfence plus free Cloudflare over paid Sucuri tiers
SiteLockcontestingEstimated ~$48.7M revenue and 203 employees versus Sucuri's smaller estimated scale
ArmorcontestingEstimated ~$31.7M revenue and 156 employees, comparable niche security competitor
Questions people ask
Is Sucuri profitable in 2026?
Sucuri does not report standalone financials since being folded into GoDaddy's Core Platform segment. Third-party estimates range from $4.6M ARR (Latka, April 2025) to $26.3M (Datanyze), but no profit figure is disclosed separately from parent GoDaddy, which guided FY2026 revenue of $5.195-5.275B.
Is Sucuri owned by GoDaddy?
Yes. GoDaddy Inc. (NYSE: GDDY) acquired Sucuri in March 2017 for undisclosed terms. Sucuri has operated as a wholly-owned subsidiary/brand ever since, with Pitchbook and CB Insights both listing GoDaddy as sole investor and no ownership change through mid-2026.
Could AI replace Sucuri's security services?
Automated vulnerability scanning and blocklist monitoring are increasingly commoditized; 2026 reviews recommend free Cloudflare plus free Wordfence as good-enough substitutes for paid Sucuri tiers (April 2026). Human-staffed malware cleanup on live infected sites remains harder to automate and is Sucuri's main defensible service.
Who is Sucuri's biggest competitor?
Cloudflare, per CB Insights (December 2025), which offers free and enterprise WAF/CDN/bot-management that 2026 reviewers rate above Sucuri. Notably, parent GoDaddy itself partnered with Cloudflare in April 2026 for AI Crawl Control rather than routing that feature through Sucuri.
What is Sucuri's market share in website security?
Datanyze tracking shows the Sucuri WAF/Website Security product installed on roughly 18,000-20,000 tracked sites, about 12% share in its WordPress security niche, well behind larger rivals like SiteLock (~$48.7M estimated revenue, 203 employees).
Timeline
  • 2026-04-30GoDaddy Q1 2026 slides highlight AI momentum, AiroCare launch, margin expansion
  • 2026-04-192026 reviews recommend free Cloudflare plus free Wordfence over paid Sucuri tiers
  • 2026-04-02Sucuri publishes March 2026 vulnerability roundup flagging AI plugin CVEs
  • 2026-04GoDaddy partners with Cloudflare for AI Crawl Control feature
  • 2026-02-24GoDaddy Q4 2025 earnings: Core Platform segment revenue up 3.3% YoY to $776.2M
  • 2023-09-27GoDaddy Garage blog post on Sucuri-GoDaddy teaming to protect websites
  • 2020-01-01Sucuri co-founder Daniel Cid leaves GoDaddy to found other ventures
  • 2017-03-22GoDaddy acquires Sucuri to advance digital security for customers
Revision history
21 July 2026
First assessed. Losing its protection. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources