SiteLock is a cloud-based, website security solution for small businesses. It works as an early detection alarm for common online threats like malware injections, bot attacks etc. It not only protects websites from potential online threats, but also fixes vulnerabilities. Features include:
Note SiteLock is only designed to check the security for websites ,its not designed for a personal computer .
An SSL certificate is used only to encrypt a connection between the browser and server to safely transmit sensitive information and prevent any monitor while transmitting data . However, SiteLock actually protects the database where this information is stored, scans your website files and applications, protects from data breaches and spreading of viruses/malware. These functionalities are not provided by an SSL certificate.
SiteLock is a cloud-based service and does not require any installation on your host or on your website . Once provisioned for your website, it automatically starts scanning your website using the basic scans.
To use the advance features, some amount of configuration is required:
SiteLock badge or TrustSeal is a image that can be displayed on your website to assure users that your website is secure and malware-free. Since SiteLock performs all scans daily, the TrustSeal is update everyday to indicate that all scans have passed.
Deep 360-Degree Site Scan checks all files susceptible to threats, including .css files, .js files, .jpg, .png and other image files and others. It performs a deep scan checking for anything that could turn into a security issue.
Available types of scan include:
All these scans are part of the Deep 360-Degree Site Scan. The availability and frequency (daily or one-time)
If a scan fails, site visitors will not be alerted to any problem. The TrustSeal will simply continue to display the last date when all scans were passed. If the site owner fails to rectify the problem, within a few days SiteLock will remove the TrustSeal from the site. The TrustSeal will never indicate that a website has failed a scan.
Secure Malware Alert and Removal Tool (SMART), if enabled, performs an in-depth site scan and automatically removes malicious code from files on the site. SiteLock makes calls to the web server and replicates the website files on their secure servers and scans the contents thoroughly to identify malicious code or vulnerabilities. In the course of doing this, it can also remove the malicious code from the files, to prevent further damage.
You can choose to not allow SMART to remove any code. In that case, you will only be notified of the vulnerability identified, and you will need to manually check / remove it.
Note
SiteLock provides a month’s worth of change logs for your website. You can always restore the previous version of the page / website. You then need to manually check the highlighted code for any malicious components and remove them yourself.
It might be happen that certain code on the website looks vulnerable but it is still doing what you intended it to do. If so, you can use the Report a False Positive option in the SiteLock Panel and SiteLock will ignore that vulnerability moving forward.
The purpose of this verification is to ensure that the user indeed owns and controls the website.
Instructions for these options are available in the SiteLock Dashboard.
Business verification is a service offered by SiteLock where it verifies the phone number and physical presence of a business. This is typically conducted to assure online users that a business actually exists and it is not a fly-by-night setup. This consists of:
Note
If you want to display your contact information on the TrustSeal, it is necessary to verify your business details.
SiteLock’s Reputation Monitoring consists of the following components:
SiteLock offers a basic firewall to help block bot traffic which may harm the website. On logging into the SiteLock Dashboard, you can see a graph of your website’s traffic which reports human visits and bot visits.
To use SiteLock’s Firewall, you need to add an A record to your domain name in order to point to SiteLock’s servers where the Firewall is installed. This way, all traffic coming to the website is routed through the Firewall.
You are required to specify the IP address of your website in the SiteLock Panel so that after routing your traffic through the Firewall, SiteLock can divert it back to your website.
The Firewall is pre-configured, and no options are available within the SiteLock Panel to manage it. However, in the higher end Plans, users can configure certain aspects of the Firewall.
Search engines use spiders to crawl and index websites. SiteLock’s Firewall can distinguish good bots from bad bots and hence will not block search engines from indexing the site.
A Content Delivery Network is a set of servers, spread across the world that cache your website. When a user requests your website, the server closest to the user’s location will serve those requests. This in turn serves the website faster, thus speeding up its performance.
Note
Faster load times not only improve user experience but also contribute to better website ranking, as search engines take load time into account while ranking a website.
You need to add a CNAME record to a sub-domain (www.mysite.com) to redirect to SiteLock’s CDN.
Note
A CNAME record should always be added to a sub-domain and not the primary domain, as it might clash with an MX record set up on the primary domain, thus hampering the email.
SiteLock is compatible with all types of hosting purchased either from XsoftHost or elsewhere.
No. A single SiteLock Order can be used for only a single domain name. Hence, separate SiteLock Orders need to purchased for domain names individually. However, all SiteLock Orders belonging to the same user can be managed from a single SiteLock Panel.
There is no way to access the SiteLock Panel directly through any URL. It can only be accessed from the SiteLock Management page from within the Reseller / Customer Control Panel.
On receiving a threat alert, login to the SiteLock Panel and view the details of the threat. Then, you may:
SiteLock probes your site to determine if fields and forms on your site are vulnerable to attempts by hackers looking to exploit these forms to gain access to your data. This will result in attempts to submit forms on your website with encoded data.
If you wish to stop receiving these e-mails or entries, you may want to do some validation on the fields within your form to ensure that data is being submitted in the correct formats before triggering e-mails or database inputs. Since SiteLock inserts data that would not likely be valid for any fields on your site, these validation measures should stop you from getting these empty e- mails or entries. It is also a good coding and security practice to make sure your website visitors are providing the correct data in the expected formats.
Each failover IP address will need its own line in the configuration file. The configuration…
What is mdadm? The mdadm utility can be used to create and manage storage arrays…
There are several scenarios that you might need to increase or decrease your php maximum…
What is Let’s Encrypt? Let’s Encrypt is a free certificate authority provided by the Internet…
Python normally installed on all cPanel hosting server because most of Centos/red hat update system…
Usually CentOS 7 comes in a numbers of variants, For most users, there are two…