Knowledgebase

Major components of SiteLock Plans

Domain Verification

• Upon purchasing a SiteLock Order, the associated domain name needs to be verified, in order to ascertain that the user indeed owns and controls this website.

• Domain names registered under YouHost will be automatically verified.

• For other domain names, the verification process can be completed in one of the following ways:

  • Add DNS Records for the TrueShield setup

  • Add a meta tag to your website page

  • Upload a file to your website

  Instructions for these options are available in the SiteLock Dashboard.

Website Scanning

SiteLock performs two types of scans to detect malware and vulnerabilities on the website:

• Outside-In scan: A basic scan that checks for malware present on the website pages, like external redirects, hidden links, obfuscated JavaScript, links to known malware sites, etc.

• Inside-Out scan (FTP scan): An in-depth scan that downloads the website files on SiteLock's servers and checks for malicious code.

  Note

  • This scan is not available in the lowest Plan.

  • FTP details of the website need to be provided in order to run this scan.

Secure Malware Alert and Removal Tool (SMART)

• Using the FTP scan, SMART can automatically remove malicious code found on the website.

• The user has the option of enabling or disabling automatic malware removal.

• If enabled, SiteLock maintains the website's change logs for a month.

Security Badge or TrustSeal

Website owners can choose to install and display a Security Badge or TrustSeal on their website to assure users that their website is secure and malware-free. Since SiteLock performs all scans daily, the TrustSeal is update everyday to indicate that all scans have passed.

Business Verification

• Business verification is conducted by the SiteLock team, where the website owner is ratified for his actual physical presence and includes

  • Postal Address Verification, which ensures that the site owner can receive and respond to postal mail, such as customer payments or inquiries, and

  • Phone Verification, which ensures that the number mentioned is actually manned by a team and customers can report issues or request additional products or services.

• The business verification is required in order to display your physical address and phone number on the TrustSeal.

Application Scanning

• Scans applications above the level of operating system, that have been installed by the website owner, like Drupal, Joomla!, Wordpress, PHP Nuke, vBulletin, etc.

• Checks for vulnerabilities in the software and recommends upgrades, if older versions, which are known to have security loopholes, are being used.

TrueShield Firewall

• It protects websites from malicious traffic and blocks harmful requests.

• Website owners need to add an A record to point to SiteLock’s firewall so that all traffic is routed through the firewall.

Reputation Monitoring

SiteLock's Reputation Monitoring scans consists of the following components:

• Search Engine Blacklists: SiteLock monitors if any page or link on the website is listed in the blacklists maintained by search engines or matches with their database of over 7000 known malware sites.

• Spam Blacklists: SiteLock checks if the email server is listed as a spammer on leading blacklists so as to prevent emails from being marked as spam.

• SSL Verification: SiteLock examines the site's SSL certificate to verify

  • Encryption strength

  • Certification Authority

  • Certificate expiry

  • Validity of name / domain name

TrueSpeed CDN

• A Content Delivery Network is a system of globally distributed servers that cache website content and serve it from the nearest server to a visitor.

• A CDN is effective in speeding up load time and performance of a site. This also helps to boost organic ranking.

• Website owners need to add a CNAME record to a subdomain to redirect traffic through SiteLock’s CDN.