Home / Security / Website Security
Website security that finds malware
Daily malware scanning and SSL scans on every plan. Enterprise adds vulnerability and blacklist scans, a site seal, and a web application firewall with CDN. Works with any host.
- Daily malware and vulnerability scans
- Blacklist monitoring
- Firewall and CDN on Enterprise
Plans with clear specs
Request on demand
Order via support ticket
Move up when you need toWebsite security plans are on the way
Loading plans…
Why an SSL certificate isn't enough
An SSL certificate protects data while it travels between a visitor and your site. It does nothing about what's stored on the site: an outdated plugin, a stolen FTP password, or a malicious script injected into a page. Website security watches the site itself, so you hear about a problem before your visitors, your search rankings, or your email reputation do.
What gets scanned
- Daily malware scanning. Your pages are checked for malicious code every day.
- File scan over FTP. Your site's files are scanned directly, which catches malware a page scan can miss.
- SSL certificate scan. Get warned if your certificate has a problem or is about to expire.
- Blacklist monitoring. Find out if search engines have flagged your site as dangerous. (Enterprise)
- Spam blacklist scan. Find out if your server's IP address has been listed as a source of spam, which stops your email from being delivered.
- Application scan. Your web apps are compared against known vulnerable versions, so you know when to update.
- SQL injection and cross-site scripting (XSS) scans. Find the flaws attackers use to steal data or hijack sessions. (Enterprise)
- OWASP Top 10 scan. Checks against the most common web application security risks. (Enterprise)
- Network scan. Your server's ports are checked to make sure the ones that should be closed are closed.
When something is found
Issues are reported on your dashboard, and you can set up alerts so you hear about problems as soon as they're found.
Firewall and CDN
The Enterprise plan adds a web application firewall that blocks malicious traffic and bad bots, adds CAPTCHA challenges for suspicious visitors, and shows you where attacks come from. It also includes a content delivery network that serves your pages from locations closer to your visitors. Firewall and CDN are not included on Basic, Professional, or Business.
Show visitors your site is checked
The Enterprise plan includes a site seal you can add as a trust badge. The seal updates every day and only appears when your site has passed its daily scans.
Setting it up
- Choose a plan and complete your order.
- In the security dashboard, enter your site's FTP details and verify that you own the website.
- The first scan starts straight away.
- If your plan includes the site seal, paste the short code snippet into your site's footer.
Website security and our hosting plans
Our hosting plans include daily malware scanning. Website security adds daily external scanning on every plan and, on Enterprise, vulnerability scans, blacklist monitoring, a site seal, and a firewall with CDN. It works on sites hosted anywhere, not just with us.
What is website security?
Website security is a cloud-based service that scans your website for malware and vulnerabilities and warns you about problems. The Enterprise plan also blocks attacks with a firewall and includes a CDN.
Do I need website security if I have an SSL certificate?
Yes, if you want to protect the site itself. SSL encrypts data in transit. Website security checks the files, pages, and applications stored on your site for malware and weaknesses.
Will it slow my site down?
Scans run from outside your site and over FTP, so visitors shouldn't notice them. On the Enterprise plan, the CDN can make pages load faster.
What do I need to set it up?
Your site's FTP details and access to verify that you own the domain. Adding the site seal takes one code snippet in your footer.
How is website security billed?
Yearly, per website.
Can I get a refund on website security?
No. Website security plans have no money-back period and are non-refundable. Compare the plans before you buy, and see our Refund Policy for details. See refunds
Find malware before your visitors do.
Website security is launching soon. Tell us about your site and we'll let you know when plans go live.