Site Scan from SiteLock is a cloud-based service that scans websites for vulnerabilities and malware similar to an antivirus program, and the Repair version automatically removes them as well.

Site Scan

The included malware scanner for all of your websites

The basic version of Site Scan included with your contract scans all websites connected to a domain in your contract for malware and alerts you via email if a threat is found.

Included Features:

  • Daily Malware Scan (maximum 20 seconds per domain, equivalent to about 5 pages)
  • Reputation Monitoring
  • Daily Spam and Blocked Senders List Monitoring
  • Platform Scan for WordPress

Site Scan & Repair

Our optional professional protection with automatic malware removal for one domain

Site Scan & Repair scans your website daily and fixes threats on its own. No action on your part is required.

Included Features:

  • Daily Malware Scan (up to 500 pages per domain)
  • Reputation Monitoring
  • Spam and Blocked Senders List Monitoring
  • Platform Scan for WordPress
  • Automatic Malware Removal
  • Automated Fix of vulnerabilities for CMS WordPress, Drupal, and Joomla!
  • Monthly Vulnerability Check
  • SiteLock Seal of Approval
  • Access to the Sitelock Dashboard


The individual functions of Site Scan and Site Scan + Repair are described below.

Malware Scan

Malware Scan detects malware (malware) such as external redirects, hidden links, or links to known malware websites. This allows you to protect your website visitors from viruses and Trojans on their computers.

Reputation Monitoring

Reputation Monitoring tracks your online reputation and ensures that you are not added to a Blocked List or penalised by search engines like Google.

Spam and Blocked List (Blacklist) Monitoring

Search engines such as Google maintain their own Blocked Senders Lists. A website is blocked if a virus or similar malware is loaded in the background. If the visitor has activated Blocked List filtering in his browser, they will receive a corresponding warning page from Google when attempting to access the website. The actual website (and thus also the malware) is then not loaded.

Spam and Blocked Senders List monitoring compares search engine Blocked Lists with your website or assigned domain name. If the domain name is listed, you will automatically be notified by email and can react immediately.

  • Platform Scan for WordPress

The platform scan for WordPress checks plugins, themes and core files of WordPress installations for known vulnerabilities.

Vulnerability Scan (Site Scan + Repair only)
  • SQL Injection Scan: This feature performs an SQL Injection Scan, attempting to identify risks associated with accessing the database through scripting applications. This identifies the infiltration of foreign database commands, data spying and other foreign database accesses.
  • Cross-Site Scripting (XSS) Scan: In cross-site scripting (XSS), attackers exploit the lack of input and output checks in the scripts. For example, the attacker can use stolen credentials to manipulate a user profile by adding script code. Visitors are not only redirected to external websites. Keyloggers, Trojans or other malicious software are often reloaded in the background. The cross-site scripting scan detects potential security vulnerabilities in this area and notifies you of them.
  • Application Scan: The Application Scan informs you about security gaps in web applications such as Drupal, Joomla, or Wordpress. This checks whether new updates or security relevant patches are available for your web application. For WordPress, Drupal and Joomla, Site Scan + Repair can automatically patch detected vulnerabilities.
Automatic Malware Removal (SMART) (Site Scan + Repair only)

The Secure Malware Alert & Removal Tool (SMART) is able to automatically remove malware from your website. This also ensures that search engines don't block your site and your website stays online.

Sitelock Seal of Approval (Site Scan + Repair only)

Add SiteLock's seal of trust to your website and show your visitors that your pages are safe and free from viruses or other malware.

Risk Score (Site Scan + Repair only)

Your website is analysed based on various characteristics such as reach, complexity and technology to proactively assess and predict the risk of a website being compromised. In this way, high-risk websites can be identified with great accuracy before vulnerabilities become known. The risk factors are broken down by the above areas to give you a more comprehensive view of the health and security of your site.

Sitelock Dashboard (Site Scan + Repair only)

The SiteLock Dashboard provides an overview of all scans performed on the website/domain and provides a detailed view of the scan results.