Website Malware Scanning

The malicious software- popularly known as malware, can be easily installed on your website by hackers who find weaknesses on your web server. A website can have thousand potential vulnerabilities for the malware injection.

Once the malware is placed on a website, it can then be used to spread viruses, steal personal or financial data, and even hijack computers. Since it is not easily detected, your customer's computers may be infected, once they visit your website. Ultimately, this negatively affects your company's reputation and can result in lost business.

After reviewing all the files and applications on your website, the SiteLock's malware scanning technology compares them against industry standards to detect any malware that has been inserted in your website code. You immediately get an email notification once a malware is identified. Your SiteLock dashboard will show a list of infected pages.

The devices on the network servers are known as ports. Each port is set up to understand a certain type of language. There are ports, for instance, for database applications, website content, email, instant messaging/chat, etc. These ports are like channels on television or a CB radio. Each port is either open or closed to the outside world, meaning it will "listen" to requests for that type of service. An open port is an opportunity for a hacker to access data or files on that server. Some ports need to be open, such as the port for web content on your Internet server. Others should not be (like the email or database ports on the same server). Opening unnecessary ports can expose sensitive data and systems to hackers.

Once your network is hacked, the damage caused is extensive. Depending on what part of the server/network the hackers reach, they can steal data, deface your website, or even worse.

After checking each and every port (thousands) on your servers, SiteLock makes sure that only the appropriate ones are open for the type of server you are using (email ports for email servers, web ports for web servers, etc.). You get a notification if anything looks suspicious.

Application scanning verifies the applications installed on your website against the known vulnerabilities. As application versions age (like Windows 2000 or WordPress 1.0), hackers will find ways to attack these programs. The publishers then update them with newer versions, which you need to upgrade to in order to stay safe. SiteLock verifies your version against list of vulnerabilities to ensure that the software running on your site is safe.

Outdated applications are the best way for criminals to gain access to your website and data. The impacts of this type of attack are wide-ranging, as it depends a great deal on the type of application. For most web applications, the vulnerabilities are likely to be Cross-Site Scripting or SQL injection.

SiteLock's scanners identify the installed applications and their respective versions. SiteLock's comprehensive scanning eliminates "false positive" reports that are not actually dangerous to your business. You are reported immediately, if any vulnerability is detected.

Make sure any applications you use are kept up-to-date and limit the use of third-party plug-ins where possible as they can be a source of many issues and may be updated less frequently or created by unscrupulous publishers.

A Web Application Firewall (WAF) protects websites from attempts by hackers to break in to your website. Your blog and shopping cart applications have become the leading ways for hackers and cybercriminals to bypass traditional security measure and steal data or traffic. Thousands of websites are compromised every day in this manner.

If your sensitive information is accessible by the hackers, they can do extensive damage by stealing your data. This inturn can deface and destroy your website, use your server to launch attacks on other sites, or even worse.

TrueShield WAF protects your website from malicious traffic and blocks the harmful requests. Protecting your site from bots and targeted attacks with TrueShield is just a 5-minute task. It requires no installation, just a simple DNS change, and all of the OWASP's top 10 threats are blocked. Additionally, TrueShield will eliminate spammers and scrapers from attacking your website.

A content delivery network (CDN) is a large system of servers deployed in different data centers across the world. This system delivers webpages and other web content to a user based on the geographic locations of the user, the origin of the webpage, and where the content delivery server is located. Closer is the CDN server to the user's location, faster is the content delivered.

Since most of the aspects of daily life are getting online, organizations use CDN to accelerate content delivery to their customers globally. A tightly integrated web caching, server-load balancing and request routing used by CDN allows website to deliver the best experience for visitors. This in turn results in a great user experience, decreased bounce rates, increased conversion rates, and also boosts your search engine rankings (SEO).

SiteLock offers the TrueSpeed CDN as an additional feature coupled with TrueShield firewall. By coupling TrueSpeed with TrueShield, your customers get the fastest and most secure experience when visiting your website.

Protect your website from SQL injection that gives hackers access to your website and customer database. SiteLock probes your website just like a hacker would to find weak spots.

XSS flaws occur whenever an application takes user supplied data and sends it to a web browser without first validating or encoding that content. XSS allows attackers to execute scripts in the victim's browser which can hijack user sessions or deface websites.

The SiteLock Secure Malware Alert & Removal Tool (SMART) performs extensive website scans along with giving you full visibility to all activity on your site. The SMART scan takes a comprehensive look at the surface of your website from inside-out to detect hidden malware. If detected, the automated tool quickly removes it so that your site does not become blacklisted or incur any downtime. The SMART technology ensures that your customers receive a secure experience every time they visit your website.

Daily FTP scanning detects website issues from the inside-out, as well as from the outside-in, to go beyond surface scans, identifying any modifications or defacements made on your website, along with any malicious or suspicious files.

In-depth website scans tell you when any file on your website changes, giving you full visibility to all of the activities on you site.

If your website has been blacklisted by search engines, your website visitor gets an instant red warning when he/she visits your website. SiteLock monitors the following:

Website Blacklist Monitoring - Protect your website from landing on search engine and email blacklists with monitoring and reputation management.

Email Spam - SiteLock ensures that your email ids are not black listed, thus making sure that your communications reach the customers, and not their spam filters or anti-virus software.

SSL Scanning - If you use an SSL certificate on your website, SiteLock ensures that your certificate has not expired, and notifies you timely if it does.

SiteLock verifies your business e-mail, phone number, address and makes it visible on your website. This validates your site and inturn gives your customers the confidence that they can reach you in the case of any question or concern.