SiteLock Website Security

SiteLock is a service that performs daily scans of a website to identify vulnerabilities and protect against threats like viruses, cross-site scripting, SQL injection, and even email blacklisting.

SiteLock performs, what they call, a Deep 360 Scan that includes:

• Reputation Monitoring: Ensuring the reputation of the website is intact and communication to visitors and customers is uninterrupted.
• Malware Blacklist: Monitors search engine and proprietary malware lists to make sure the site is not blocked by search engines and browsers.
• Spam Blacklist: Ensures that emails reach recipients inbox (not their Spam folder). SiteLock verifies email addresses, domain names, and mail servers against lists used by popular email tools to identify spam.
• SSL Verification: Make certain that users do not see a certificate warning or error when visiting your site.
• Network Security: Validates the security of the network where your server resides by making sure there are no opportunities for hackers to access the server.
• Drive-By-Downloads: Scans the website to ensure visitors are not being infected with viruses often placed on sites by hackers.
• Customer Data Protection (SQL & XSS): Performs forward and reverse scans to make sure current and future visitor/customer data on the site is secure.
• Application Security: Verifies that any 3rd-party applications installed on your website are secure and up-to-date.
• Business Verification: Certifies the validity of the business and provides a certification badge to display to website visitors to let them know the business or website is legitimate.
• Domain Ownership: Confirms that the domain owner is in control of the website domain.
• Postal Address: Verifies that the site owner can receive and respond to postal mail, such as customer payments or inquiries.
• Phone Verification: Affirms that there is a phone number where customers can report issues or request additional products or services.

SiteLock is a subscription service that will be included on your monthly Windstream bill.

Yes.

No. SiteLock scans won't impact the performance of a website.

For multiple domains or websites, please contact Windstream at 800.316.4581 option 1 to speak with a hosting support representative and discuss the additional services needed.

Once you sign up we will configure your domain for the SiteLock service and it will immediately begin scanning your site. There is no need for you to install or run any special software. You will need to go through three verification steps, which includes phone verification, domain verification, and mailing address verification

After the 30-day free trial ends, we will automatically begin billing your account. Should you decide, durring the 30-day trial, that you prefer not having the service, just give us a call and we can get it removed.

Yes. Customers can upgrade from SiteLock Basic to SiteLock Premium. Downgrades are not possible. When a subscription is upgraded, the expiry date for the subscription is reset to one year from when the order is submitted.

windstreamhosting.com has an extensive glossary available.
- Click Here -
to go to the glossary page.

You need to complete the verification process for each of those items.

Verify Domain
In order to verify your domain ownership, you will need to create a .html number file that will need to contain a verification code that will be found on your SiteLock Dashboard. Once that is done, you will have to request for the system to scan for that file.

Phone Verification
This call will come from SiteLock's automated system at : 877-257-9263. The system will call and give you a code, or if you don't answer, it will leave a message including the code. Once you have the code, enter it in the 'submit code' options on your SiteLock Dashboard. This will complete the phone verification process.

Mailing Address Verification
A code will be sent to you via standard mail. Once you recieve this, enter it on your SiteLock Dashboard. This will complete the verification process.

Now, when a visitor clicks on your SiteLock badge, they will see that these items have been verified.

We are currently in the process of scanning your website, servers, and other hardware for vulnerabilities. This initial scan can take up to 24 hours. Please check back throughout the day. If you are still seeing this message after 24 hours, please contact support.

You can manage your SiteLock via logging in on their website at www.sitelock.com or simply click HERE

We will make the shield available as soon as all of your security scans are complete and verified. This may take up to 24 hours. Once complete, you can copy and paste the shield code from your Dashboard. You will know that your steps are complete based on the Green/Yellow/Red indicators on each line in your scan details. Your overall status is also shown at the top of the dashboard.

Users simply include the JavaScript snippet that SiteLock provides in the footer area of their site or template.

If, after 30 minutes, you have not received this email, check the 'Current status' box to make sure it is displaying your correct email address. If necessary, edit the address by clicking on the pencil icon. If it is correct, click re-send to have the message re-sent. If the second attempt is still unsuccessful, check your spam filter to make sure the email has not been flagged as spam, since we'll be a new sender. If it has, make sure to add support@sitelock.com to your contacts to ensure future communications are received. If none of these solutions works, please contact support to further research the issue.

First, we need to determine where you are installing your shield. Are you trying it on a page stored on your local computer or on a live website?

If you are using a local computer for development, then you need to add http: before the several instances of '//shield.sitelock.com' in the code so that it looks like http://shield.sitelock.com. The original code should work on any live website and any major browser, but you need to make the adjustment above to display it on your computer.

To show the SiteLock badge on your site, please log in to your dashboard by visiting sitelock.com. At the bottom of the dashboard is the badge section. Choose a badge format, save your preference, and then copy and paste the code into your site wherever you want the badge to display.

If you are using Windstream's EasySiteWizard Pro for your website, login to the application and select the Advanced Options button at top that looks like two gears, then select 'Edit HTML source'. This is where you will paste the code for the SiteLock badge. You may need to try placing the code in several spots before you find a place you like. Should you have any question or problems when entering this, please call the Windstream Hosting team at 800.316.4581 option 1.

The postal verification can take up to 7-10 business days, based on the postal service's delivery. The letter you get looks like non-descript, so please keep an eye out for it so you are sure to open it on arrival. Once you have it, the code is enclosed on the letter.

This will happen when you are subscribed to one of our basic packages. If any part of the dashboard does not apply to your site or package, it will appear grayed-out. Upgrade to see the details of any of these areas.

The phone verification can take up to one hour to be sent, depending on volume. If it has been more than an hour and you have not been contacted, verify that your number is correct in the 'Current Status' box, then click the re-send link to have the system contact you again. If you've already done this without success, you can contact support to perform a manual verification.

SiteLock will inform the site owner by both email and with an alert in the SiteLock Dashboard. The report will provide complete information about the issue that is found along with help to remove it.

Site visitors will not be alerted to any problem. The SiteLock seal will simply continue to display the date of the last good scan of the website site. If the site owner fails to rectify the problem, within a few days, SiteLock will remove the seal from the site and replace it with a single pixel transparent image. At no point will SiteLock display any indication to visitors that a website has failed a scan.

You have several options to remedy network vulnerabilities. When you open the detail section, you will see a list of all open ports. If you believe that we have identified these ports in error, click the 'Report False Positive' link at the top of the box. The resulting page will allow you to mark any ports as false positive, or mark lower priority ports, to ignore them. You can also take advantage of our Expert Services team, who can help you resolve security issues.

The malware scan will notify you of any pages or links on your site that have been listed as distributors of malware (viruses, spyware, identity theft scams, etc.). If you are on these lists, many browsers and search engines will 'blacklist' your site, meaning Internet users will not be able to see it in search results and it will be flagged if they navigate to your site. To get your site cleaned up and off of these lists, remove offending links and clean your website to make sure there are no viruses or spyware present. Another option is to let us help you. SiteLock offers its Expert Services to help you remedy these issues. If you believe your site has been listed in error, click the 'Report False Positive' link at the top of the box and you'll be taken to a page with instructions to initiate the process of getting your site removed from the malware list.

The email scan will notify you if your website or servers are sending or referenced in spam emails. If you are identified on these lists, many email programs will ignore or classify emails from your site as spam. This means your customers and users will not get email from you in many cases. To get your site off these lists and re-open communication with your customers, you must get off of these email 'blacklists'.

If your business requires SSL encryption of data, you need an up-to-date certificate to ensure that your customers' data is safe. The SSL scan will show as failed if your certificate is out of date. You need to renew your certificate with your SSL provider.

There are two possible explanations. First, check the limits of the package you have purchased. Certain limits apply to our packages. If that is not the reason, it may be that our 'spider' cannot find all of the pages on your site. In many cases, this can occur if there are portions of your site not linked in some way to your home page. Since our spider works primarily by 'crawling' from link to link on your site, unlinked pages are sometimes missed. To help us get a more comprehensive scan, you can place a 'sitemap' file on your site, which will tell our spider where to look. For details on how to create this file, please visit http://www.sitemaps.org

Click settings at the top of the page and you can modify your preferences based on criticality and/or type of message.

Check the status at the top of the site. It's possible that something has changed and your site is no longer compliant. Review the areas with yellow or red status and correct any issues. Your shield will be available again after our next scan.

Click the 'Users' link at the top of the page. There you will see an 'Add Users' button. Fill in the information presented and the new user will have access to the site.

Click the 'Users' link on the top of the page. Next to each user's ID are modify and remove buttons. Click on the appropriate button to perform the desired action.

Click on the 'Account' link at the top of the page. There you can choose the edit option to modify your business information. For billing information, please call Windstream's billing department at 800.843.9214.

From any point in the dashboard, you can drill to details. If you see a 'Details' icon, clicking it will show a detailed list of issues. If you are in a graph, clicking any element of the graph will show a detailed list of issues in that grouping.

Of course. SiteLock has U.S.-based representatives at offices in Scottsdale, AZ; Jacksonville, FL; and Boston, MA. Reach us any time toll-free at (877) 257-9263 or from outside the U.S. at 415.390.2500. Or, e-mail us 24-hours at support@sitelock.com