SiteLock Malware Scanning

What Is SiteLock?

SiteLock is a cloud-based website security solution that automatically scans your site for malware, vulnerabilities, and other threats. It works with any website platform — WordPress, Joomla, Drupal, custom-built sites, and more — and does not require server-level access to perform its scans.

When SiteLock detects a problem, it alerts you immediately and, depending on your plan, can automatically remove the malicious code.

How SiteLock Scanning Works

Daily Automated Scans

SiteLock performs daily scans of your website files, database, and applications. It checks for:

Known malware signatures and suspicious code patterns
Backdoors and web shells
SQL injection vulnerabilities
Cross-site scripting (XSS) flaws
Spam injections and phishing pages

Outside-In and Inside-Out Scanning

Outside-in scanning examines your site from the visitor’s perspective, checking pages for malware that could infect browsers.
Inside-out scanning (available on higher-tier plans) connects to your server via FTP or SFTP to inspect files directly, offering deeper detection capabilities.

Key Features

Feature	Description
Malware Detection	Identifies malicious code in files and databases
Automatic Removal	Cleans infected files without manual intervention
Vulnerability Patching	Scans for known CMS and plugin vulnerabilities
Trust Seal	Displays a verified badge on your site to build visitor confidence
Spam Monitoring	Checks if your site or IP is on email blacklists
Firewall (WAF)	Blocks malicious traffic before it reaches your site

SiteLock Plans

10Corp offers several SiteLock tiers to match your needs:

SiteLock Basic — Daily external malware scanning and the SiteLock Trust Seal.
SiteLock Professional — Adds automatic malware removal and database scanning.
SiteLock Premium — Includes a web application firewall (WAF) and CDN for added performance and protection.

Setting Up SiteLock

Purchase a SiteLock plan through your 10Corp account dashboard.
Verify your website ownership via DNS or provided methods.
For inside-out scanning, provide your FTP/SFTP credentials in the SiteLock dashboard.
SiteLock begins scanning automatically — results appear within 24 hours.

What to Do If Malware Is Found

If SiteLock detects malware on your site, take the following steps:

Review the scan report for details on affected files and threat types.
If automatic removal is included in your plan, SiteLock will clean the files for you.
Update all CMS software, plugins, and themes to their latest versions.
Change all passwords associated with your hosting, CMS, and FTP accounts.
Contact 10Corp support if you need further assistance resolving the issue.