Daily scanning for malware and vulnerabilities, automatic removal on the paid tiers, and a firewall in front of it on the top one. There is a free tier - start there.
A cross means the tier does not include it. We would rather show you that than leave the row out and let you assume.
The free one. A scan on up to five pages, so you can see what is actually on your site before deciding anything.
Free
Up to 5 pages, no card needed
Scanning and alerting. It tells you what is wrong; fixing it is still your job.
billed yearly
Finds it and takes it out on its own. The one most sites should be on.
or $14.99 a month
Adds the firewall in front, so most of it never reaches the site in the first place.
or $49.99 a month
Prices come from our billing system, so this page cannot disagree with your invoice. Scanning works on sites hosted anywhere, not only ours.
The plans above are for keeping it from happening. If your site is compromised right now, the Emergency service is immediate assistance to recover it - a different thing, bought at a different moment.
From $199.99
Most sites are compromised for weeks before anyone notices. Daily scanning is mainly about shortening that.
A deep FTP scan across everything you have uploaded, not just what is reachable from the homepage.
WordPress, its plugins and themes, and the other software running your site - which is where most compromises actually start.
Outbound mail, because a compromised site sending spam is usually how a business finds out it has a problem.
Requests hitting the site, looking for the patterns that come before an attack rather than after it.
Anything that changed since the last scan. A file you did not edit changing on its own is the clearest early signal there is.
Whether search engines have flagged the site - so you hear it from us rather than from a customer who could not reach you.
Not exotic attacks. These are the common ones, and they are common because they keep working.
Input that is passed to the database unchecked, letting an attacker read or change data they should never reach.
Malicious script served to your visitors from your own domain, which is what makes it effective.
Code pulled in from somewhere else and executed by your site as though you had written it.
Weak session or login handling that lets somebody become another user, often an administrator.
Your domain used to bounce visitors to a phishing or malware page, borrowing your reputation to do it.
Not sure whether you need this? Run the free scan first - it costs nothing and it answers the question.
Yes. Lite scans up to five pages at no cost, which is enough to tell you whether there is a problem worth paying to fix. It is the sensible place to start.
Find tells you. Fix does something about it. If nobody on your side is going to log in and clean malware by hand, Find will only ever give you bad news you cannot act on.
Defend puts a web application firewall in front of the site, so a lot of attack traffic never reaches it. Scanning finds what got in; the firewall reduces what gets the chance.
Alerts go out by email and SMS as soon as something is detected, rather than in a weekly summary. On the tiers with automatic removal it will often have dealt with it before you read the message.
A badge you can display showing the site is scanned and clean. Whether it moves your conversion rate is not something we will put a number on - the honest reason to buy this is the scanning, not the badge.
That is what the Emergency service is for - it is immediate assistance to recover a site that has already been compromised, rather than a monitoring plan. Talk to us and we will get it started.
No, and nothing does. Backups get you back after something goes wrong; this reduces how often that happens and how long it goes unnoticed. Daily offsite backups are already on our hosting plans.
Yes. SiteLock works over FTP and DNS rather than needing to be on our servers, so it does not require you to move the site to us.
The free scan covers five pages and takes a few minutes. If it comes back clean, that is a useful thing to know too.
