Home / Security / Website Security
Website security that finds and removes malware
Daily scans of your site's files and pages for malware, vulnerabilities, and blacklisting, with automatic malware removal and a web application firewall on higher plans. Works with any host.
- Daily malware and vulnerability scans
- Blacklist monitoring
- Automatic malware removal on eligible plans
Plans with clear specs
Request on demand
Order via support ticket
Move up when you need toWebsite security plans are on the way
Loading plans…
Why an SSL certificate isn't enough
An SSL certificate protects data while it travels between a visitor and your site. It does nothing about what's stored on the site: an outdated plugin, a stolen FTP password, or a malicious script injected into a page. Website security watches the site itself, so you hear about a problem before your visitors, your search rankings, or your email reputation do.
What gets scanned
- Daily malware scan. Your pages are checked for malicious code every day.
- File scan over FTP. Your site's files are scanned directly, which catches malware a page scan can miss.
- SSL certificate scan. Get warned if your certificate has a problem or is about to expire.
- Blacklist monitoring. Find out if search engines have flagged your site as dangerous.
- Spam blacklist scan. Find out if your server's IP address has been listed as a source of spam, which stops your email from being delivered.
- Application scan. Your web apps are compared against known vulnerable versions, so you know when to update.
- SQL injection and cross-site scripting (XSS) scans. Find the flaws attackers use to steal data or hijack sessions.
- OWASP Top 10 scan. Checks against the most common web application security risks.
- Network scan. Your server's ports are checked to make sure the ones that should be closed are closed.
When something is found
On plans with automatic malware removal, malicious code found in your files is removed automatically. Other issues are reported on your dashboard, and you can set up alerts so you hear about problems as soon as they're found.
Show visitors your site is checked
Plans with a site seal let you add a trust badge to your site. The seal updates every day and only appears when your site has passed its daily scans.
Setting it up
- Choose a plan and complete your order.
- In the security dashboard, enter your site's FTP details and verify that you own the website.
- The first scan starts straight away.
- If your plan includes the site seal, paste the short code snippet into your site's footer.
Website security and our hosting plans
Our hosting plans include malware protection: basic on Starter and advanced from Business up. Website security adds automatic malware removal from the Professional plan up and, on Enterprise, vulnerability scans, blacklist monitoring, a site seal. It works on sites hosted anywhere, not just with us.
What is website security?
Website security is a cloud-based service that scans your website for malware and vulnerabilities, warns you about problems, and on higher plans removes malware automatically on higher plans.
Do I need website security if I have an SSL certificate?
Yes, if you want to protect the site itself. SSL encrypts data in transit. Website security checks the files, pages, and applications stored on your site for malware and weaknesses.
Will it slow my site down?
Scans run from outside your site and over FTP, so visitors shouldn't notice them.
What do I need to set it up?
Your site's FTP details and access to verify that you own the domain. Adding the site seal takes one code snippet in your footer.
How is website security billed?
Yearly, per website.
Find malware before your visitors do.
Website security is Coming soon / Request on demand. Tell us about your site and we'll let you know when plans go live.