I just patched my PHP 5.3.2 with the suhosin patch and recognised that Piwiks security plugin fails to recognise the patch.
The error was to check for suhosin variables identified in php.ini. My php was running without any changes to the default suhosin settings, therefore no suhosin.* variable was defined.
It is easy to resolv this problem - the suhosin patch defines a constant "SUHOSIN_PATCH" which is easy to get via get_defined_constants().
Attachment: Fixed version of patch.php in /SecurityInfo/PhpSecInfo/Test/Suhosin/
In , fixes #1310 - fix PhpSecInfo test for Suhosin patch; thanks halfdan