Sitelock
Automatically scan your website for malware and protect online reputation
Website security & malware protection for your website
SiteLock™, the global leader in website security, protects your website with real time protection to give you peace of mind. A full security suite with Daily Malware Scanning that identifies vulnerabilities with and known malicious code and automatically removes it from your website with the malware removal tool to protect your website and visitors against threats. Plus you get the SiteLock Trust Seal which builds customer confidence and is proven to increase sales and conversion rates.
How this security tool works
Added security services to protect your site
Scans and Checks
SiteLock screens every aspect of your web presence daily to identify security gaps. It not only checks your website, email and applications, but also search engine blacklists and spam filters.
Website Files
Malware scanners scan outside-in and inside-out to screen all your files daily and identify security loopholes or malware injections. It not only identifies threats, but also fixes them instantly before they can hurt your web presence.
Applications
SiteLock scans all applications like blogs, shopping carts etc. for known vulnerabilities, which hackers exploit to attack your website. We will alert you of these gaps and inform you of upgrades to ensure your are running safe software on your site.
Emails
SiteLock will check if your website or servers are sending or referenced in spam emails. If your are caught by spam filters, many email programs will ignore mails sent by your site, which means that you will not be able to reach your customers.
Visitor Traffic
SiteLock's TrueShield Firewall creates a force field around your website and uses a global network to identify malicious traffic, block bot attacks and protect your content from being "scraped", while ensuring search engine accessibility and uninterrupted access via a web browser.
Changes to Files
The antivirus software will provide deep real time scanning, you will be instantly alerted of any changes that have been made to your cloud storage, so that you can stay on top of all activity happening on your website and catch unauthorized edits before they cause any damage.
Search Engine Blacklists
SiteLock monitors blacklists of search engines and checks their own database of various types of malware, to ensure that your site is not linked to them or blacklisted. This way, SiteLock helps protect and boost your organic rankings and traffic.
Identifies Threats
SiteLock's 360 degree scan and powerful firewall identify advanced vulnerabilities before they can be exploited to damage your web presence, thus putting small businesses one step ahead of hackers, always!
SQL Injections (SQL-I)
Hackers can gain access to your database and steal customer information, including email addresses, passwords, credit card data etc. by inserting SQL commands in your website's input forms and running codes that you don't intend to. Sitelock reviews SQL injection vulnerabilities to help keep websites safe from these highly exploited attacks.
Remote File Includes (RFI)
Attackers upload a custom coded, malicious file on a website or server using a script. The vulnerability exploits the poor validation checks in websites and can eventually lead to unintended code execution on the server or website.
Cross-Site Scripting (XSS)
XSS flaws occur due to improper validation. Attackers exploit common client-side scripts like JavaScript and HTML and execute code in the victim's browser which can hijack user sessions, deface sites, or redirect the user to malicious sites.
Broken Authentication and Session Management
Often, application functions related to authentication and session management are not implemented correctly, allowing hackers to steal passwords, keys, tokens, or exploit other implementation flaws to assume users' identities.
Cross-Site Request Forgery (CSRF)
This attack forces a victim's browser to send forged HTTP requests, including the session cookie and other authentication information, to a vulnerable web application. This allows hackers to force the victim's browser to make requests which trick the application into believing that they are legitimate.
Unvalidated Redirects and Forwards
Due to improper validation, websites often redirect users to other pages using untrusted data to determine the destination. This allows attackers to redirect victims to phishing or malware sites, or use forwards to access unauthorized pages.
Instantly Notifies and Fixes
SiteLock not only identifies threats, but also fixes them for you automatically. This way, SiteLock works in the background to protect your website, while it's business as usual for you and your customers. With multi layered, anti virus security features, you can significantly reduce the article risk of your website becoming compromised.
Instantly Notifies
On detecting a vulnerability or presence of malicious code on your website, SiteLock instantly notifies you via email and sms.Unvalidated Redirects and Forwards
Unvalidated Redirects and Forwards
Instantly Fixes
In addition to identifying malware, the security software SMART Tool can actually fix it automatically with the automated malware removal SMART Tool:- Conducts deep FTP scans for your files
- Identifies loopholes or vulnerabilities in your code
- Removes malicious code and cleans your site
- Detects malicious code from all kinds of malware
| Find | Fix | Defend | |
|---|---|---|---|
| Daily Malware Scanning | |||
| Number of pages per scan | 25 | 500 | 500 |
| Daily Blacklist Monitoring | |||
| SiteLock Risk Score | |||
| Website Application Scan | One time | Daily | Daily |
| SQL Injection Scan | One time | Daily | Daily |
| Cross Site (XSS) Scan | One time | Daily | Daily |
| Sitelock™ Trust Seal | |||
| Daily SMART Scans | |||
| Automatic Malware Removal | |||
| TrueShield Protection | |||
| Wordpress Scan | |||
| Spam Blacklist Monitoring | |||
| Web Application Firewall | |||
| Global CDN | |||
| 24/7 Customer Service | |||
| Content Acceleration | |||
| Price per year | $99.95 | $299.95 | $399.95 |
| Price bi-annually | $189.95 | $499.95 | $749.95 |
| Signup for SiteLock | Sign Up Now | Sign Up Now | Sign Up Now |
Website Hacked?
If your website has been attacked and compromised get immediate emergency assistance to quickly recover your site. We have a one time fee for service to use our malicious software removal tool which will clean any malware on the site and also monitor in case of any re-infections. Here's how our Emergency Response team helps with a malware infection and ensures your site stays free of malware:
Immediate response
Get our fastest response time with analysis and work to recover your site started within 30 minutes.
Priority treatment
With the emergency package you get fast tracked straight to the top of the queue.
Real-time updates
Track progress with our real-time updates throughout the process of cleaning and recovering your site.
Complete malware removal
If the automatic technology is unable to remove the malicious content we'll perform manual cleaning.
7 day aftercare
We'll continue to monitor your site for 7 days to ensure that your site remains malware-free post recovery.
One-off payment
The emergency service is available for a single one-off fee, there's no recurring fees or subscription.
Fix it now with our Malware Removal Emergency Response
One time fee for 7 days of protection
Get SiteLock security for free
Existing clients of our Private Email and web hosting services can get a free "lite" version of SiteLock that includes displaying the SiteLock site seal and scanning of up to 5 pages. Existing clients of Thexyz get SiteLock for free in the control panel.
Answers to your questions about Sitelock
SiteLock provides simple, fast and affordable website security to websites of all sizes. Founded in 2008, the company protects over 12 million websites worldwide. The SiteLock cloud-based suite of products offers automated website vulnerability detection and malware removal, DDoS protection, website acceleration, website risk assessments, and PCI compliance.
The SiteLock dashboard provides comprehensive website security. It performs website daily security scans to identify vulnerabilities or malware. When vulnerabilities or malware are found, you will be alerted immediately. Based on your SiteLock scanner, it will automatically remove any malware on your website. For content management system (CMS) websites, SiteLock can automatically patch found vulnerabilities to keep your website safe and secure.
SiteLock has the technology to perform a comprehensive website scan that encompasses:
- File-based Malware Scanning and Removal: SiteLock scans your site files for malware. If malware is found, the website owner is alerted immediately. SiteLock also offers comprehensive scans to automatically remove the malware.
- Vulnerability Scanning: SiteLock performs scans of website applications for common vulnerabilities that could lead to a compromise.
- Application Security and Vulnerability Patching: SiteLock has the technology to automatically patch vulnerabilities in content management systems (CMS).
A website vulnerability is a weakness or misconfiguration in a website or web application code that allows an attacker to gain some level of control of the site, and possibly the hosting server. Most vulnerabilities are exploited through automated means, such as vulnerability scanners and botnets. Malware, short for malicious software, is used to gather sensitive data, gain unauthorized access to websites and even hijack computers.
No. During website security scans, SiteLock downloads the relevant files to a secure server and performs scans there. There is no impact to the website content, code, bandwidth or server resources on the website.
The SiteLock Trust Seal is a widely-recognized security badge you can display on your website. It is a clear indication that your website is secure and malware-free this can in turn help with customer trust and increases conversions on your website. To add the seal to your website, simply include the code snippet that SiteLock provides in the footer area of your website.
SiteLock's Reputation Monitoring consists of the following components:
- Search Engine Blacklists: SiteLock monitors if any page or link on the website is listed in the blacklists maintained by search engines or matches with their database of over 7000 known malware sites.
- Spam Blacklists: SiteLock checks if the email server is listed as a spammer on leading blacklists so as to prevent emails from being marked as spam.
- SSL Verification: SiteLock examines the site's SSL certificate to verify
- Encryption strength
- Certification Authority
- Certificate expiry
- Validity of name / domain name
The purpose of domain verification is to ensure that the user indeed owns and controls the website.
- Domain names registered with Thexyz will be automatically verified.
- For other domain names, the verification process can be completed in one of the following ways:
- Add DNS Records for the TrueShield setup
- Add a meta tag to your website page
- Upload a file to your website
Email Hosting
Help & Support
