Secure Your Website Properly with SiteLock^Ⓡ

The SiteLock Security Seal is a widely recognized emblem you can display on your website. It is a clear indication that you've taken the necessary steps to protect your website and your website’s visitors. You may only display the SiteLock seal if you have been given the "all clear" after the SiteLock Scan.

The SiteLock Security Seal has proven to benefit businesses by increasing customer trust, website traffic, and sales.

Please note: If a SiteLock scan discovers a vulnerability or security issue with your website, you will be given a specific amount of time to fix the problem. The SiteLock seal will not be visible on your website if the appropriate action is not taken. It will be restored as soon as your website is deemed safe again.

SiteLock is a security tool that will protect your website, network, and business. It's one of the most comprehensive online security services available today.

Once installed, SiteLock will scan your website regularly to look for vulnerabilities or threats. From malware removal to database security, ongoing security assurance and reputation monitoring: SiteLock is a valuable protector of your website and, with it, your website’s reputation.

SiteLock performs daily scans of your website, identifying vulnerabilities and protecting against threats like viruses, malware, and cross-site scripting. It will identify if your site has been "blacklisted" or blocked by servers.

SiteLock will verify your credentials and contact information, demonstrating to your website visitors that you are a trustworthy and reputable business. SiteLock will also ensure that any emails you send are not marked as spam, so they will land in your customers' inboxes—not their spam or junk folder. It all starts with SiteLock's Deep 360-Degree Site Scan: An in-depth look at your website that will find hidden malicious code or vulnerabilities.

Your website and network stability face hundreds of thousands of cyber threats. Everyday, new cyber threats are being discovered. If your website is infected by any of these, your business may suffer—not only due to website downtime but also by losing consumer confidence.

SiteLock will help you discover, and deal with, vulnerabilities and cyber threats effectively and efficiently. It will secure your network, protect your databases, extract malware, and preserve your reputation.

• Protects your website: SiteLock will scan your website regularly for vulnerabilities and malware, protecting against threats and ensuring you are not being blocked or blacklisted. Remove and Shield plans include a full daily scan of your site.
• Builds business: Displaying the SiteLock seal on your website shows you are a trustworthy business; this increases customer confidence, traffic, sales, and conversions.
• Speeds recovery: If your website is infiltrated or damaged, SiteLock will identify the problem and help you find a fast solution. You'll be back up and running in no time.

Most website security systems don't look deep enough to find all potential issues with a site. They may miss Cascading Style Sheets (CSS) files, Javascript (JS) files, .jpgs, .pngs, and other image files. Today's hackers often hide malicious code within these file types.

The SiteLock Deep 360-Degree Site Scan will delve into all files susceptible to threats, including those listed above, searching deep within your website for a wide range of potential threats and anything that might become a security issue. The patent-pending Deep 360-Degree Site Scan sets SiteLock apart from other website security services.

The best SiteLock plan will depend on the type of website you manage and your business requirements. Below are some guidelines; please contact HostPapa sales if you have any questions:

Detect

This plan is ideal if you maintain a fairly simple (25 pages or less), content-only website. If you don't collect personal information, store data, or sell products or services, this package is an affordable way to both keep hackers out and keep your site safe.

The SiteLock Detect package offers a Deep 360-Degree Site Scan and basic daily malware scanning to alert you of any malicious activity on your website.

Remove

Consider a SiteLock Remove package if you run a dynamic site (up to 500 pages). If you collect non-public information, encourage interaction or comments (such as social networking or blogging), or run a special interest site, this plan could be right for you. SiteLock Remove protects the information shared with you and offers database security and detection tools. It’s ideal for business websites that don’t collect credit card or payment information.

SiteLock Remove security includes Smart Malware Alert & Removal Tool (SMART) to scan files, directories, and code for daily malware removal.

Shield

If your business relies heavily on your website for its daily operation, you should consider the Shield package. Not only do you get the full benefits of SMART (like the Remove plan), but you also get ongoing vulnerability scans. You get the full protection of a Web Application Firewall, meaning that your website will thrive behind a dedicated, powerful wall of protection.

To add the SiteLock seal to your site, a piece of Javascript code must be installed in the footer of your site template.

You will find step-by-step installation instructions in the HostPapa knowledge base.

• Reputation monitoring (malware, email, SSL verification)
• Network security vulnerabilities
• Cross-site scripting
• SQL injection
• Application scanning
• Virus scanning (and drive-by downloads)

Your online reputation is vital to your business’s success. There are three key components of SiteLock's reputation monitoring scans:

1. Monitor malware blacklists: SiteLock carefully monitors proprietary lists of sites reported as having malware to ensure your site does not appear on them and that when visitors do arrive on your site, they are not presented with a malware warning screen.

2. Monitor email spam blacklists: In much the same way, SiteLock keeps a watch on lists of email addresses and domain names reported as spam. This keeps the emails you send out of spam folders.

3. Scan SSL: Be sure your SSL certificate (if you have one) is up to date. This ensures your customers don’t encounter warnings when they try to buy products from you.

SiteLock’s Deep 360-Degree Site Scan will keep an eye on all of these items for you, ensuring smooth and consistent communication with all your website visitors and customers.

All network servers have ports (kind of like channels on a television) that can be opened or closed. Some ports, like the one you need to access the Internet, need to be open. Others, such as those for email or your secure databases, should be closed. If ports that should be closed to outsiders are actually open, your data and servers are vulnerable. A hacker can take advantage of this weakness to steal data, infect your website, or worse.

As part of the Deep 360-Degree Site Scan, SiteLock will check every single port on your servers, making sure the ones that are supposed to be closed are actually closed. If anything looks out of the ordinary, you will be alerted: so you can take action before a hacker does.

Hackers use cross-site scripting, also known as XSS, to gain control of the content of your web pages. They do this by entering a piece of malicious code into your site, usually through an existing input field, such as a search box or name/address box. If your website is not set up to fight off this sort of invasion, the hacker can take control of your site, even gathering personal information from your trusted customers.

The SiteLock Deep 360-Degree Site Scan will test each and every one of the input fields on your site by inserting code into them, just as hackers would (except SiteLock's code is completely harmless).

To avoid an XSS attack, make sure all your applications and scripts are up to date and, where possible, reduce your risk of third-party plugins. If the SiteLock Scan finds a vulnerability, you'll need to quickly verify and harden your code for security.

Hackers use an SQL injection attack to attempt to access your website databases. They may be after customer data, user IDs, passwords, credit card numbers, or other sensitive information.

Structured Query Language (SQL) is specifically understood by databases. Hackers insert commands from this programming language into input fields on your site and, if your site is vulnerable, these commands will open the database so that the hacker can steal the information stored inside. This can be devastating to an online business.

It is critical that you use the latest versions of all applications and that you limit the use of third-party plugins where possible. Your SiteLock Deep 360-Degree Site Scan will verify the safety of each input data box and, if a vulnerability is detected, you will be notified.

As applications age, hackers tend to find ways to attack them and access your website files. It is important you update your applications regularly to ensure the latest safety measures are in place.

A SiteLock Deep 360-Degree Site Scan will verify the version of applications you are running against catalogues of known vulnerabilities to ensure the software you are running is safe. If a problem is located, you will be notified. You may then update your software accordingly.

A virus on your website is serious. If hackers have compromised your site, they may be using it to distribute virus-infected software to your visitors. You may never know that you are actually infecting the computers of your website visitors and customers. This can ruin your reputation with customers forever!

Virus scanning is a vital part of SiteLock's Deep 360-Degree Site Scan. It will review all files and applications on your site against constantly updated industry databases of virus software. If a virus is found on your site, you will be notified quickly. Log in to your SiteLock dashboard for specific details and advice.