Protect yourself from hackers!
Secure your website with SiteLock

  • Have dangerous malware removed from your website automatically
  • Inspire confidence that your website is secure with the trusted SiteLock Seal
  • Lock hackers out of your website entirely with industry-leading firewall protection
  • Instantly know if your website has malware

Protect Your Website

Watch the video

HostPapa makes SiteLock's protection simple and affordable

Which level of protection is right for your website?

What do our customers say?

Website owners from across the world are talking about how we're helping them reach their business goals. Check out some of their reviews.

100% satisfaction guarantee seal

Satisfaction is our priority, and we back it up with our guarantee.

Industry-leading security technology for websites of all sizes!

Protect your reputation

Your online reputation is vital to your business' success. SiteLock monitors your reputation to ensure you're not blacklisted or penalized by search engines such as Google.

Verifiable Trust Seal

Did you know 70% of web visitors look for proof that a site is secure before submitting their personal data? The SiteLock Trust Seal reassures customers that your website is a safe environment.

SiteLock Seal

Stop hackers in their tracks

SiteLock is constantly on the lookout for malware, SQL injections, cross-site scripting and other threats using advanced scanning tools.

Keep your website safe from threats

Keep your website safe using SiteLock's innovative 360-Degree Site Scan. It examines your website files, searching for vulnerabilities or deeply-rooted security issues.

Automatic malware removal

If your website does get infected with malware, SiteLock takes care of the dirty work by going in and cleaning out all the malicious code from the backend of your website.

Prevent future attacks

SiteLock's Website Application Firewall (WAF) acts like a shield around your website, preventing attacks before they even happen.

Added layers of security with SSL support

If your website uses SSL certificates to secure your online forms, customer accounts and eCommerce purchases, don't worry! SiteLock has full SSL certificate support.

FTP monitoring

No more worries about infected files and images being added to your website. SiteLock keeps a close eye on all FTP file transfers to ensure your website’s ongoing safety.

Need help? The PapaSquad is here
when you need it.

Whether it’s helping you with SiteLock, walking you through our website builder, or configuring your cloud email system for your business, our PapaSquad experts are here to help. Please don’t hesitate to contact us with your questions!

Buy now

It's not just big banks and corporate websites that get hacked.

In fact, reports by the U.S. Secret Service and Verizon Wireless prove that 64% of website data breaches hit companies with 100 employees or less. You don’t want your customers to visit your website and see Google’s dreaded malware screen. Your reputation will plummet and you’ll lose out on valuable sales. It’s time to fight back. It’s time for SiteLock.

Has your website just been hacked?

If your website has been infected with malware, it can really slow your business down and cost you money. But thanks to SiteLock 911, cleaning your website and getting it back online is easy.

SiteLock 911 downloads all your website files, scans them, and removes any malicious code; it then uploads the clean files back to your server, so you can get back to business!

Clean Your Website Now

Let the PapaSquad take care of you.

Including our exclusive 30-minute one-on-one coaching to get you started right!

Frequently Asked Questions

Introducing SiteLock

The SiteLock Security Seal is a widely-recognized emblem you can display on your website. It is a clear indication that you've taken the necessary steps to protect your website and your website’s visitors. You may only display the SiteLock seal if you have been given the "all clear" after the SiteLock Scan.

The SiteLock Security Seal has proven to be a benefit to businesses, increasing customer trust, website traffic, and sales.

Please note: If a SiteLock scan discovers a vulnerability or security issue with your website, you will be given a specific amount of time to fix the problem. If the appropriate action is not taken, the SiteLock seal will not be visible on your website. It will be restored as soon as your website is deemed safe again.

SiteLock is a website security tool that will protect your website, network, and business. It's one of the most comprehensive online security services available today.

Once installed, SiteLock will scan your website regularly to look for vulnerabilities or threats. From malware removal to database security, ongoing security assurance to reputation monitoring, SiteLock is a valuable protector of your website and, with it, your website’s reputation.

The SiteLock Security Seal from HostPapa has a couple of key advantages: We make it simple and affordable to protect your website with this high-level security service. It's easy to add the service to your HostPapa account, whether you're a new or existing customer.

Buying SiteLock through HostPapa also means that you’ll receive HostPapa around-the-clock, award-winning support in four different languages so that if you have any issues with your SiteLock account, we’ll be standing by to help you out.

SiteLock performs daily scans of your website, identifying any vulnerabilities and protecting against threats like viruses, malware and cross-site scripting. It will identify if your site has been "blacklisted" or blocked by servers.

SiteLock will verify your credentials and contact information, demonstrating to your website visitors that you are a trustworthy and reputable business. SiteLock will also ensure email from you is not marked spam, so it will land in your customers' inboxes – not their spam or junk folders. It all starts with SiteLock's Deep 360-Degree Site Scan: a deep look at your website that will find any hidden malicious code or vulnerabilities.

There are hundreds of thousands of cyber threats to your website and network stability. New ones are being discovered every day. If your website is infected by any one of these, your business may suffer, not only due to website downtime, but also by a loss of consumer confidence.

SiteLock will help you discover and deal with vulnerabilities and cyber dangers effectively and efficiently. It will secure your network, protect your databases, extract malware and preserve your reputation.

You will receive a long list of benefits by being a SiteLock subscriber, both in the short and long-term. To simplify, SiteLock:

  • Protects your website: SiteLock will scan your website regularly for vulnerabilities and malware, protecting against threats and ensuring you are not being blocked or blacklisted. Remove and Shield plans include a full scan of your site, every day.
  • Builds business: Displaying the SiteLock seal on your website shows you are a trustworthy business; this increases confidence, traffic, sales and conversions.
  • Speeds recovery: If your website is infiltrated or damaged, SiteLock will identify the problem and help you find a fast solution. You'll be back up and running with barely a blip.

Most website security systems don't look deep enough to find all potential issues with a site. They may miss .css (cascading style sheets) files, .js (javascript) files, .jpg, .png and other image files. Today's hackers often hide malicious code within these file types.

The SiteLock Deep 360-Degree Site Scan will delve into all files susceptible to threats, including those listed above, searching deep for anything that could turn into a security issue. The patent-pending Deep 360-Degree Site Scan sets SiteLock apart from other website security services. The SiteLock Deep 360-Degree Site Scan will scan for a wide range of potential threats.

You will be notified immediately by email. An alert will also be posted in the SiteLock dashboard, which you can access by logging in to your HostPapa customer area.

There are resources available to help you address the issue. If you receive a notification, it is important that you log into your SiteLock dashboard as soon as possible. There, you will find additional details on the particular issue your site is encountering. You may also search HostPapa's Knowledge Base for tips and additional information.

SiteLock Plans and Installation

All SiteLock plans offer unparalleled online protection for your website and business. HostPapa offers three SiteLock packages (Detect, Remove, and Shield), so there's sure to be one to suit your needs. All SiteLock plans include the SiteLock Security Seal. The plan you choose will depend on the size of your site, as well as the type of information you collect from your visitors.

Compare all plans

The best SiteLock plan will depend on the type of website you manage, as well as your business requirements. Below are some guidelines; please contact HostPapa sales if you have any questions:

This plan is ideal if you maintain a fairly simple (25 pages or less), content-only website. If you don't collect personal information, store data, or sell products or services, this package is an affordable way to keep hackers out and your site safe.

The SiteLock Detect package offers a Deep 360-Degree Site Scan and basic daily malware scanning to alert you of any malicious activity on your website.

Consider a SiteLock Remove package if you run a dynamic site (up to 500 pages): perhaps you collect non-public information, encourage interaction or comments (such as social networking or blogging), or run a special interest site. SiteLock Remove protects the information shared with you, and offers database security and detection tools. Ideal for business websites that do not collect credit card or payment information.

SiteLock Remove security includes SMART (Smart Malware Alert & Removal Tool) to scan files, directories and code for daily malware removal.

If your business relies heavily on your website for its daily operation, you should consider the Shield package. Not only do you get the full benefits of SMART (like Remove), but you get ongoing vulnerability scans. And you get the full protection of a Web Application Firewall, which means that your website actually resides behind a dedicated, powerful wall of protection.

Yes. You may upgrade from Detect to Remove, or even Shield at any time.

To add the SiteLock seal on your site, a piece of Javascript code must be installed in the footer of your site template.

You will find step-by-step installation instructions in the HostPapa knowledge base.

Threats and Recovery

The SiteLock Deep 360-Degree Site Scan is extremely comprehensive. It will look for a vast and constantly updated list of website security issues, including:

Your online reputation is vital to your business’ success. There are three key components of SiteLock's reputation monitoring scans:

  1. Monitor malware blacklists: SiteLock carefully monitors proprietary lists of sites reported as having malware to ensure your site does not appear on them, and that when visitors do arrive on your site, they are not presented with a malware warning screen.
  2. Monitor email spam blacklists: In much the same way, SiteLock keeps a watch on lists of email addresses and domain names reported as spam. This keeps the emails you send out of spam folders.
  3. Scan SSL: Be sure your SSL certificate (if you have one) is up to date. This ensures your customers do not encounter warnings when they try to buy from you.

SiteLock’s Deep 360-Degree Site Scan will keep an eye on all of these items for you, ensuring smooth and consistent communication with all your website visitors and customers.

All network servers have ports (kind of like channels on a television) that can be open or closed. Some ports, like the one you need to access the Internet, need to be open. Others, such as those for email or your secure databases, should be closed. If ports that should be closed to outsiders are actually open, your data and servers are vulnerable. A hacker can take advantage of this weakness to steal data, infect your website, or worse.

As part of the Deep 360-Degree Site Scan, SiteLock will check every single port on your servers, making sure the ones that are supposed to be closed are actually closed. If anything looks out of the ordinary, you will be alerted, so you can take action before a hacker does.

Hackers use cross-site scripting, also known as XSS, to gain control of the content of your web pages. They do this by entering a piece of malicious code into your site, usually through an existing input field, such as a search box or name/address box. If your website is not set up to fight off this sort of invasion, the hacker will be able to take control of your site, even gathering personal information from your trusting customers.

The SiteLock Deep 360-Degree Site Scan will test each and every one of the input fields on your site by inserting code into them, just as hackers would (but SiteLock's code is harmless!).

To avoid an XSS attack, make sure all your applications and scripts are up to date and, where possible, reduce your risk of third-party plugins. If the SiteLock scan finds a vulnerability, you'll need to quickly verify and harden your code for security.

Hackers use an SQL injection attack to attempt to access your website databases. They may be after customer data, user IDs, passwords, credit card numbers, or other sensitive information.

SQL (Structured Query Language) is specifically understood by databases. Hackers insert commands from this programming language into input fields on your site and, if your site is vulnerable, these commands will open the database, so the hacker can steal the information stored inside. This can be devastating to an online business.

It is critical that you use the latest versions of all applications, and that you limit the use of third-party plug-ins where possible. Your SiteLock Deep 360-Degree Site Scan will verify the safety of each input data box and, if a vulnerability is detected, you will be notified.

As applications age, hackers tend to find ways to attack them and access your website files. It is important you update your applications regularly to ensure the latest safety measures are in place.

A SiteLock Deep 360-Degree Site Scan will verify the version of applications you are running against catalogues of known vulnerabilities to ensure the software you are running is safe. If a problem is located, you will be notified. You may then update your software accordingly.

A virus on your website is serious. If hackers have compromised your site, they may be using it to distribute virus-infected software to your visitors. You may never know that you are actually infecting the computers of your website visitors and customers. This can destroy customer relations quickly!

Virus scanning is a vital part of SiteLock's Deep 360-Degree Site Scan. It will review all files and applications on your site against constantly updated industry databases of virus software. If a virus is found on your site, you will be notified quickly. Log in to your SiteLock dashboard for specific details and advice.

After running your Deep 360-Degree Daily Malware Scan, any website malware that is found is automatically removed from your system. This quick removal keeps your website safe and secure, and prevents it from being blacklisted or incurring any downtime.

Having a log of file changes gives you full access to what’s happening inside your website. Any suspicious behaviour can be seen and you’ll be able to take action before it’s too late.

A Website Application Firewall (WAF) creates a custom set of rules that limits access to website applications to specific, trusted sources. Attacks that are prevented include cross-site scripting (XSS), SQL injection and more.

The 360-Degree Vulnerability Scan includes a deep network scan, website application scan, and checks for weaknesses in the SQL injection and cross-site scripting areas. You are also notified of any vulnerabilities so that action can be taken before any weaknesses can be exploited.