It is a winderful plugin and co operated with 000webhost and my site for a couple of months until today.
Ok, then activate the static cache plugins and get rid of the security plugin. No one will attempt to attack your site anyway, as you are using Cloudflare which blocks automatically certain threats.
What did you test by the way?
To see if website loads ok with the security & autoptimize plugin