Frequently asked questions related to SiteLock

SiteLock is a SAAS (Software delivered as a Service) based website security system which is designed to protect websites from hackers and miscreants. It works to serve as an early detection alarm and protects your website from online threats such as viruses, hackers, bot attacks and identity theft.

SiteLock is also capable of logging into your website server to remove already introduced malware sitting in your hosting server.

Website owners are often confused how the SiteLock system works to protect your website from threats and attacks. Hence, in this article I am answering some of the most commonly asked questions related to this software system.

Also read - How to secure your website from attack?.

What is SiteLock and what does it do?

SiteLock is a service that performs daily scans of your website to identify vulnerabilities and protect against threats like viruses, cross-site scripting, SQL injection and even email blacklisting. SiteLock� also provides you with a Trust Seal that provides customer confidence and helps increase your sales and conversions.

What types of problems does SiteLock scan for?

SiteLock performs a Deep 360 Scan that encompasses:

• Reputation monitoring: ensures that the reputation of your website is intact and communication to visitors and customers is uninterrupted.
• Malware blacklist: monitors search engine and proprietary malware lists to make sure your website is not blocked by search engines and browsers.
• Spam blacklist: ensures that your emails reach your customer's inbox (not their Spam folder). SiteLock verifies email addresses, domains, and email servers against lists used by popular email tools to identify spam.
• SSL Verification: ensures that users do not see a certificate warning or error when visiting your website.
• Network security: validates the security of the network on which your website is hosted by making sure that there is no opportunity for hackers to access the hosting server.
• Drive-by-downloads: scans your website to ensure that visitors are not being infected with viruses often placed on websites by hackers.
• Customer data protection (SQL & XSS): performs forward and backward-looking scans to make sure current and future visitor/customer data on your website is secure.
• Application security: certifies the validity of your business and provides a certification badge to display to website visitors to let them know that your business or website is legitimate.
• Business Verification: ensures that the reputation of your website is intact and communication to visitors and customers is uninterrupted.
• Domain ownership: ensures that the domain owner is in control of the website domain.
• Postal Address: verifies that the website owner can receive and respond to postal mail, such as customer payments or inquiries.
• Phone Verification: ensures that there is a phone number listed on your website where your customers can report issues or request additional products or services.

How is SiteLock billed?

SiteLock is a subscription service which is billed for in advance and available in one-year terms.

How does SiteLock notify you when it finds an issue?

Your website visitors will not be alerted of any problem. The SiteLock seal will simply continue to display the date of the last good scan of your website. SiteLock will send you emails to notify you of the problems and what you need to rectify. If you fail to rectify the problem, within a few days SiteLock will remove the seal from your website and replace it with a single pixel transparent image. At no point will SiteLock display any indication to your website visitors that your website has failed a scan.

Emails that are sent, come from - support@sitelock.com, customerservice@sitelock.com and sales@sitelock.com.

Will SiteLock impact website performance?

No. SiteLock scans won't impact the performance of your website. Also, the SiteLock seal has no impact on load times.

How does the Virus Scan work?

The SiteLock Virus scanner works by pulling website files from daily scans and comparing them to an industry-leading database of virus signatures to determine if there is any match between your website and known malicious code. Because this is an intensive process and it is important to avoid an impact to your website performance, the scan is done on a rolling basis, downloading a piece of your website each day. For most websites, this process completes within 30 days.

How do I install the SiteLock seal?

SiteLock provides a small JavaScript code snippet which you simply need to included in the footer area of your website.

How to I sign-Up to subscribe for SiteLock?

You can buy the SiteLock subscription from WebServicesWorldwide.com at a lower rate than what you would get if directly purchasing from SiteLock company. After you have purchased the product and made the payment, you will be prompted to enter relevant account information using which the service will get auto configured.

• A welcome email will be sent out from SiteLock. The email will contain instructions for installing the SiteLock certificate on your website.
• Phone verification is attempted within 1 hour.
  • This is an automated call that informs you of the 4 digit pin for your account.
  • You then need to log in to your SiteLock dashboard and enter the code for verification to be completed.
  • If you fail to answer the call, you can request another call from your dashboard.
• A scan of your website will take place within 24 hours.
  • Scans run late at night so typically by midnight, your website will be scanned.
  • If vulnerabilities are found, you will be notified via email and message alert within your dashboard.

After the scan has completed, you can add the SiteLock seal to your website.