Automatically Prevents Attacks
SiteLock monitors your website 24x7 for vulnerabilities and attacks, which means you can worry less about your website and more about your business.
Sitelock is easy, economical and effective
Boosts Customer Trust
Over 70% Customers look for a sign of security before providing personal details online. The SiteLock Trust Seal not only re-assures customers but also boosts sales.
Starts Working Instantly
You don't need technical expertise to install and set up SiteLock for your website. SiteLock is cloud-based and starts scanning your website and email instantly.
How it Works
Scans Daily
SiteLock screens every aspect of your web presence daily to identify security gaps. It not only checks your website, email and applications, but also search engine blacklists and spam filters.
Identifies Threats
SiteLock's 360 degree scan and powerful firewall identify advanced vulnerabilities before they can be exploited to damage your web presence, thus putting you one step ahead of hackers, always!
Instantly Notifies and Fixes
SiteLock not only identifies threats, but also fixes them for you automatically. This way, SiteLock works in the background to protect your website, while it's business as usual for you and your customers.
Scans Daily
Get over $100 worth of Free Services with every Domain you Register
Website Files
SiteLock uses outside-in and inside-out FTP scans to screen all your files daily and identify security loopholes or malware injections. It not only identifies threats, but also fixes them instantly before they can hurt your web presence.
Applications
SiteLock scans all applications like blogs, shopping carts etc. for known vulnerabilities, which hackers exploit to attack your website. SiteLock will alert you of these gaps and inform you of upgrades to ensure your are running safe software on your site.
Emails
SiteLock will check if your website or servers are sending or referenced in spam emails. If your are caught by spam filters, many email programs will ignore mails sent by your site, which means that you will not be able to reach your customers.
Visitor Traffic
SiteLock's TrueShield Firewall creates a force field around your website and uses a global network to identify malicious traffic, block bot attacks and protect your content from being "scraped", while ensuring search engine accessibility.
Changes to Files
With SiteLock's deep FTP scans, you will be instantly alerted of any changes that have been made to your files, so that you can stay on top of all activity happening on your website and catch unauthorized edits before they cause any damage.
Search Engine Blacklists
SiteLock monitors blacklists of search engines and checks their own database of 7,000+ malware sites, to ensure that your site is not linked to them or blacklisted. This way, SiteLock helps protect and boost your organic rankings and traffic.
Select a plan for your website
Choose A Suitable Plan
|
Basic $14.45/mo For Static websites Get Started |
Professional $40.98/mo For Dynamic websites Get Started |
Premium $53.04/mo For Ecommerce websites Get Started |
Enterprise $180.84/mo For Web Applications Get Started |
|
|---|---|---|---|---|
|
Pages
|
25 | 100 | 500 | 2500 |
|
Daily Malware Scan
|
||||
|
Network Scan
|
||||
|
Trust Seal
|
||||
|
Daily FTP Scan
|
- | |||
|
Automatic Malware Removal
|
- | |||
|
File Change Monitoring
|
- | |||
|
Application Scan
|
1-time | 1-time | ||
|
SQL Injection Scan
|
1-time | 1-time | ||
|
Cross-Site Scripting Scan
|
1-time | 1-time | ||
| TRUESHIELD FIREWALL | ||||
|
TRUESHIELD FIREWALL
|
||||
|
Security Alerts
|
||||
|
Use of Global Network to Identify Malicious Behavior
|
||||
|
Block Bad Bot Attacks
|
||||
|
Search Engine Access
|
||||
|
Comment Spam Elimination
|
||||
|
Comment Spam Elimination
|
||||
|
CAPTCHA Security
|
||||
|
Block content "scraping"
|
||||
| BLACKLIST MONITORING | ||||
|
BLACKLIST MONITORING
|
||||
|
Search Engine Blacklist Monitoring
|
||||
|
Spam Verification
|
||||
|
SSL Verification
|
||||
|
Buisness Verification
|
||||
|
Phone Number Verification
|
||||
|
Postal Address Verification
|
||||
|
TrueSpeed CDN
|
||||
Instantly Notifies and Fixes
SiteLock not only identifies threats, but also fixes them for you automatically.
Instantly Notifies
On detecting a vulnerability or presence of malicious code on your website, SiteLock instantly notifies you via:
- Email Notification
- SMSes will be sent to the list of supported countries only
Instantly Fixes
In addition to identifying malware, SiteLock's SMART Tool can actually fix it automatically
- Conducts deep FTP scans for your files
- Identifies loopholes or vulnerabilities in your code
- Detects malicious code
- Removes malicious code and cleans your site
Identifies Threats
SQL Injections (SQL-I)
Hackers can gain access to your database and steal customer information, including email addresses, passwords, credit card data etc. by inserting SQL commands in your website's input forms and running codes that you don't intend to.
Remote File Includes (RFI)
Attackers upload a custom coded, malicious file on a website or server using a script. The vulnerability exploits the poor validation checks in websites and can eventually lead to unintended code execution on the server or website.
Cross-Site Scripting (XSS)
XSS flaws occur due to improper validation. Attackers exploit common client-side scripts like JavaScript and HTML and execute code in the victim's browser which can hijack user sessions, deface sites, or redirect the user to malicious sites.
Broken Authentication and Session Management
Often, application functions related to authentication and session management are not implemented correctly, allowing hackers to steal passwords, keys, tokens, or exploit other implementation flaws to assume users' identities.
Cross-Site Request Forgery (CSRF)
This attack forces a victim's browser to send forged HTTP requests, including the session cookie and other authentication information, to a vulnerable web application. This allows hackers to force the victim's browser to make requests which trick the application into believing that they are legitimate.
Unvalidated Redirects and Forwards
Due to improper validation, websites often redirect users to other pages using untrusted data to determine the destination. This allows attackers to redirect victims to phishing or malware sites, or use forwards to access unauthorized pages.
Frequently Asked Questions
SiteLock provides simple, fast and affordable website security to websites of all sizes. Founded in 2008, the company protects over 12 million websites worldwide. The SiteLock cloud-based suite of products offers automated website vulnerability detection and malware removal, DDoS protection, website acceleration, website risk assessments, and PCI compliance.
SiteLock provides comprehensive website security. It performs website daily scans to identify vulnerabilities or malware. When vulnerabilities or malware are found, you will be alerted immediately. Based on your SiteLock scanner, it will automatically remove any malware on your website. For content management system (CMS) websites, SiteLock can automatically patch found vulnerabilities.
SiteLock has the technology to perform a comprehensive website scan that encompasses:
- SiteLock performs daily scans of a website's files for malware. If malware is found, the website owner is alerted immediately. SiteLock also offers comprehensive scans to automatically remove the malware.
- SiteLock performs scans of website applications for common vulnerabilities that could lead to a compromise.
- SiteLock has the technology to automatically patch vulnerabilities in content management systems (CMS).
A website vulnerability is a weakness or misconfiguration in a website or web application code that allows an attacker to gain some level of control of the site, and possibly the hosting server. Most vulnerabilities are exploited through automated means, such as vulnerability scanners and botnets. Malware, short for malicious software, is used to gather sensitive data, gain unauthorized access to websites and even hijack computers.
No. During a website scan, SiteLock downloads the relevant files to a secure server and performs scans there. There is no impact to the website content, code, bandwidth or server resources on the website.
The SiteLock Trust Seal is a widely-recognized security badge you can display on your website. It is a clear indication that your website is secure and malware-free. To add the seal to your website, simply include the code snippet that SiteLock provides in the footer area of your website.