Sucuri apex normalization

Sucuri apex normalization

In Sucuri’s system, example.com, www.example.com, and *.example.com are one site at the apex, not three.

Our Sucuri.platform strips a leading www. and *. before sending, but the normalization is enforced server-side anyway.

Implication

  • One Waf row per apex — don’t create separate rows for www or wildcard variants.
  • A “domain not found” error against a www. form usually means the apex row is missing, not that the www form needs its own site.