Sitelock

SiteLock is a full-stack website security platform. It runs daily scans to detect vulnerabilities and malware, automatically removes infections, patches CMS/plugin issues, and adds always-on protection with a Web Application Firewall (WAF) and global Content Delivery Network (CDN).

Yes. SSL encrypts data in transit between the browser and your site; it doesn’t stop attacks on your site. SiteLock protects your code, database, and applications from malware and exploits while SSL handles encryption.

SMART (Secure Malware Alert & Removal Tool) performs automated daily scans to find malware in your files (and, on higher plans, your database) and removes it automatically. You’ll get alerts and reports when action is taken.

TrueShield is SiteLock’s WAF with an integrated CDN. It filters malicious traffic (bots, SQLi/XSS, OWASP Top 10), blocks DDoS patterns, and accelerates your site globally via cached delivery.

Plans include a mix of: SSL monitor, webpage (outside-in) scans, email/IP reputation checks, site health, SQL injection and cross-site scripting (XSS) tests. Higher tiers add daily code & database scanning and automatic patching of known CMS/plugin vulnerabilities.

Yes. Automatic malware removal runs continuously, and selected plans include expert-assisted cleanup for complex cases.

SiteLock monitors for malware and reputation/blacklist issues and alerts you quickly so problems can be fixed before search engines flag your site. After your site is clean, you can display the SiteLock Trust Seal to build visitor confidence.

For inside-out scanning, malware removal, CMS patching, database cleaning, and backups/restores, SiteLock needs FTP/SFTP credentials so it can access and remediate your files securely.

No—when the CDN/WAF is enabled, traffic is optimized and cached at the edge, which can improve performance and reduce downtime during traffic spikes or attack attempts.