Secure your website with SiteLock

The SiteLock Security Seal is a widely-recognized emblem you can display on your website. It is a clear indication that you've taken the necessary steps to protect your website and your website’s visitors. You may only display the SiteLock seal if you have been given the "all clear" after the SiteLock Scan.

The SiteLock Security Seal has proven to benefit businesses, increasing customer trust, website traffic, and sales.

Please note: If a SiteLock scan discovers a vulnerability or security issue with your website, you will be given a specific amount of time to fix the problem. The SiteLock seal will not be visible on your website if the appropriate action is not taken. It will be restored as soon as your website is deemed safe again.

SiteLock is a security tool that will protect your website, network, and business. It's one of the most comprehensive online security services available today.

Once installed, SiteLock will scan your website regularly to look for vulnerabilities or threats. From malware removal to database security, ongoing security assurance to reputation monitoring, SiteLock is a valuable protector of your website and, with it, your website’s reputation.

The SiteLock Security Seal from HostPapa has some key advantages: We make it simple and affordable to protect your website with this high-level security service. It's easy to add the service to your HostPapa account, whether you're a new or existing customer. Buying SiteLock through HostPapa also means that you’ll receive HostPapa around-the-clock, award-winning support in four different languages so that if you have any issues with your SiteLock account, we’ll be standing by to help you out.

SiteLock performs daily scans of your website, identifying any vulnerabilities and protecting against threats like viruses, malware and cross-site scripting. It will identify if your site has been "blacklisted" or blocked by servers.

SiteLock will verify your credentials and contact information, demonstrating to your website visitors that you are a trustworthy and reputable business. SiteLock will also ensure email from you is not marked spam, so it will land in your customers' inboxes – not their spam or junk folders. It all starts with SiteLock's Deep 360-Degree Site Scan: a deep look at your website that will find any hidden malicious code or vulnerabilities.

There are hundreds of thousands of cyber threats to your website and network stability. New ones are being discovered every day. If your website is infected by any of these, your business may suffer, not only due to website downtime but also by losing consumer confidence.

SiteLock will help you discover and deal with vulnerabilities and cyber dangers effectively and efficiently. It will secure your network, protect your databases, extract malware and preserve your reputation.

You will receive a long list of benefits by being a SiteLock subscriber, both in the short and long term. To simplify, SiteLock:

• Protects your website: SiteLock will scan your website regularly for vulnerabilities and malware, protecting against threats and ensuring you are not being blocked or blacklisted. Remove and Shield plans include a full scan of your site daily.
• Builds business: Displaying the SiteLock seal on your website shows you are a trustworthy business; this increases confidence, traffic, sales and conversions.
• Speeds recovery: If your website is infiltrated or damaged, SiteLock will identify the problem and help you find a fast solution. You'll be back up and running with barely a blip.

Most website security systems don't look deep enough to find all potential issues with a site. They may miss .css (cascading style sheets) files, .js (javascript) files, .jpg, .png and other image files. Today's hackers often hide malicious code within these file types.

The SiteLock Deep 360-Degree Site Scan will delve into all files susceptible to threats, including those listed above, searching deep for anything that could become a security issue. The patent-pending Deep 360-Degree Site Scan sets SiteLock apart from other website security services. The SiteLock Deep 360-Degree Site Scan will scan for a wide range of potential threats.

You will be notified immediately by email. An alert will also be posted in the SiteLock dashboard, which you can access by logging in to your HostPapa customer area.

There are resources available to help you address the issue. If you receive a notification, you must log into your SiteLock dashboard as soon as possible. There, you will find additional details on the particular issue your site is encountering. You may also search HostPapa's Knowledge Base for tips and additional information.

All SiteLock plans offer unparalleled online protection for your website and business. HostPapa offers three SiteLock packages (Detect, Remove, and Shield), so there's sure to be one to suit your needs. All SiteLock plans include the SiteLock Security Seal. The plan you choose will depend on the size of your site, as well as the type of information you collect from your visitors. Compare all plans

The best SiteLock plan will depend on the type of website you manage and your business requirements. Below are some guidelines; please contact HostPapa sales if you have any questions:

Detect

This plan is ideal if you maintain a fairly simple (25 pages or less), content-only website. If you don't collect personal information, store data, or sell products or services, this package is an affordable way to keep hackers out and your site safe.

The SiteLock Detect package offers a Deep 360-Degree Site Scan and basic daily malware scanning to alert you of any malicious activity on your website.

Remove

Consider a SiteLock Remove package if you run a dynamic site (up to 500 pages): perhaps you collect non-public information, encourage interaction or comments (such as social networking or blogging), or run a special interest site. SiteLock Remove protects the information shared with you and offers database security and detection tools. Ideal for business websites that do not collect credit card or payment information.

SiteLock Remove security includes SMART (Smart Malware Alert & Removal Tool) to scan files, directories and code for daily malware removal.

Shield

If your business relies heavily on your website for its daily operation, you should consider the Shield package. Not only do you get the full benefits of SMART (like Remove), but you get ongoing vulnerability scans. And you get the full protection of a Web Application Firewall, meaning that your website resides behind a dedicated, powerful wall of protection.

Yes. You may upgrade from Detect to Remove or even Shield at any time.

To add the SiteLock seal on your site, a piece of Javascript code must be installed in the footer of your site template.

You will find step-by-step installation instructions in the HostPapa knowledge base.

The SiteLock Deep 360-Degree Site Scan is extremely comprehensive. It will look for a vast and constantly updated list of website security issues, including:

• Reputation monitoring (malware, email, SSL verification)
• Network security vulnerabilities
• Cross-site scripting
• SQL injection
• Application scanning
• Virus scanning (and drive-by downloads)

Your online reputation is vital to your business’ success. There are three key components of SiteLock's reputation monitoring scans:

1. Monitor malware blacklists: SiteLock carefully monitors proprietary lists of sites reported as having malware to ensure your site does not appear on them and that when visitors do arrive on your site, they are not presented with a malware warning screen.

2. Monitor email spam blacklists: In much the same way, SiteLock keeps a watch on lists of email addresses and domain names reported as spam. This keeps the emails you send out of spam folders.

3. Scan SSL: Be sure your SSL certificate (if you have one) is up to date. This ensures your customers do not encounter warnings when they try to buy from you.

SiteLock’s Deep 360-Degree Site Scan will keep an eye on all of these items for you, ensuring smooth and consistent communication with all your website visitors and customers.

All network servers have ports (kind of like channels on a television) that can be opened or closed. Some ports, like the one you need to access the Internet, need to be open. Others, such as those for email or your secure databases, should be closed. If ports that should be closed to outsiders are actually open, your data and servers are vulnerable. A hacker can take advantage of this weakness to steal data, infect your website, or worse.

As part of the Deep 360-Degree Site Scan, SiteLock will check every single port on your servers, making sure the ones that are supposed to be closed are actually closed. If anything looks out of the ordinary, you will be alerted, so you can take action before a hacker does.

Hackers use cross-site scripting, also known as XSS, to gain control of the content of your web pages. They do this by entering a piece of malicious code into your site, usually through an existing input field, such as a search box or name/address box. If your website is not set up to fight off this sort of invasion, the hacker can take control of your site, even gathering personal information from your trusted customers.

The SiteLock Deep 360-Degree Site Scan will test each and every one of the input fields on your site by inserting code into them, just as hackers would (but SiteLock's code is harmless!). To avoid an XSS attack, make sure all your applications and scripts are up to date and, where possible, reduce your risk of third-party plugins. If the SiteLock scan finds a vulnerability, you'll need to quickly verify and harden your code for security.

Hackers use an SQL injection attack to attempt to access your website databases. They may be after customer data, user IDs, passwords, credit card numbers, or other sensitive information.

SQL (Structured Query Language) is specifically understood by databases. Hackers insert commands from this programming language into input fields on your site, and if your site is vulnerable, these commands will open the database so that the hacker can steal the information stored inside. This can be devastating to an online business.

It is critical that you use the latest versions of all applications and that you limit the use of third-party plug-ins where possible. Your SiteLock Deep 360-Degree Site Scan will verify the safety of each input data box, and if a vulnerability is detected, you will be notified.

As applications age, hackers tend to find ways to attack them and access your website files. It is important you update your applications regularly to ensure the latest safety measures are in place.

A SiteLock Deep 360-Degree Site Scan will verify the version of applications you are running against catalogues of known vulnerabilities to ensure the software you are running is safe. If a problem is located, you will be notified. You may then update your software accordingly.

A virus on your website is serious. If hackers have compromised your site, they may be using it to distribute virus-infected software to your visitors. You may never know that you are actually infecting the computers of your website visitors and customers. This can destroy customer relations quickly!

Virus scanning is a vital part of SiteLock's Deep 360-Degree Site Scan. It will review all files and applications on your site against constantly updated industry databases of virus software. If a virus is found on your site, you will be notified quickly. Log in to your SiteLock dashboard for specific details and advice.

After running your Deep 360-Degree Daily Malware Scan, any website malware that is found is automatically removed from your system. This quick removal keeps your website safe and secure and prevents it from being blacklisted or incurring any downtime.

Having a log of file changes gives you full access to what’s happening inside your website. Any suspicious behaviour can be seen, and you’ll be able to take action before it’s too late.

A Website Application Firewall (WAF) creates a custom set of rules that limits access to website applications to specific, trusted sources. Attacks that are prevented include cross-site scripting (XSS), SQL injection and more.

The 360-Degree Vulnerability Scan includes a deep network scan and website application scan and checks for weaknesses in the SQL injection and cross-site scripting areas. You are also notified of any vulnerabilities so that action can be taken before any weaknesses can be exploited.