Security that works inside your website.
Our platform protects the server your site runs on. This scans the site itself, every day, and takes the malware back out when it finds it.
Automated setup. Nothing to install on your site.
Start here
Two different jobs.
Every hosting plan already includes protection at the platform level: DDoS mitigation, a firewall in front of the servers, and platform-side malware scanning. That guards the infrastructure your site sits on. It does not read your website’s own files, and it cannot clean an infection out of your code.
Included with your hosting
Anti-DDoS protection, the platform firewall, platform malware scanning and two-factor authentication on your account. Protection for the environment your site runs in, at no extra cost.
See what is included →What this adds
Daily scanning of your own files and database, automatic removal of malware that is found, vulnerability patching for your CMS, a public trust seal, and a human emergency service if the worst happens.
What it does
Find it, fix it, keep it out.
Which of these you get depends on the plan. The comparison below sets out exactly what is in each one.
Malware scanning
Monitors your website daily and alerts you to any malware found in your files.
Automatic malware removal
When a scan finds known malware, it is removed automatically rather than waiting for you to act.
Vulnerability scanning
Checks your applications are up to date and secured against known vulnerabilities, and can patch found vulnerabilities on CMS sites automatically.
OWASP Top 10 protection
Protection against the ten web application security flaws recognised by the Open Web Application Security Project.
Web application firewall
The TrueShield firewall sits in front of your website and filters attacks before they reach it. Included on the Defend plan.
Trust seal
A seal you can display on your site showing visitors it is scanned and protected.
Protects your search ranking
Daily scans catch malware early, before search engines find it and blacklist your site, which is far harder to recover from than the infection itself.
Content delivery network
The Defend plan adds a CDN that serves your site from the location closest to each visitor.
Automated setup
Instant, fully automated setup. There is nothing to install and protection starts immediately.
Plans
Three levels of protection.
Find tells you what is wrong. Fix cleans it up for you. Defend adds a firewall and CDN in front of the site. Prices exclude VAT, and two and three-year terms are available at checkout.
Scans your site and tells you what it finds.
£18.92
per year
or £34.82 for 2 years
- 25 pages scanned
- Daily malware scanning
- One-time application scans
- Trust seal
Finds malware and removes it automatically.
£6.31
per month, billed £75.71 a year
£5.68
per month, billed £136.28 every 2 years
£11.35
per month
- 500 pages scanned
- Daily application scans
- Automatic malware removal
- TrueShield protection
Adds a firewall and CDN to keep threats out and speed the site up.
£18.93
per month, billed £227.14 a year
£17.35
per month, billed £416.42 every 2 years
£37.85
per month
- Everything in Fix
- Web application firewall
- Global CDN
- Content acceleration
| Feature | Find | Fix | Defend |
|---|---|---|---|
| Daily malware scanning | Yes | Yes | Yes |
| Pages scanned | 25 | 500 | 500 |
| Risk score | Yes | Yes | Yes |
| Application, SQL injection and XSS scans | One time | Daily | Daily |
| Trust seal | Yes | Yes | Yes |
| SMART file and database scans | – | Daily | Daily |
| Automatic malware removal | – | Yes | Yes |
| WordPress scan | – | Yes | Yes |
| TrueShield web application firewall | – | Yes | Yes |
| Global CDN and content acceleration | – | – | Yes |
Already compromised
Website hacked? Start here.
Emergency Response is a one-off service for sites that have already been attacked, rather than a subscription. It costs £151.42 as a single payment and covers seven days of protection while your site is recovered. Order emergency response →
Response within 30 minutes
Analysis and recovery work begin within 30 minutes, the fastest response offered.
Complete malware removal
Where automated tools cannot remove the malicious content, it is cleaned manually.
Priority treatment
Emergency cases go straight to the top of the queue rather than joining the normal order.
Seven days of aftercare
Your site continues to be monitored for seven days afterwards to confirm it stays clean.
Real-time updates
You can follow progress throughout the cleaning and recovery process rather than waiting for a result.
One-off payment
A single fee for the service. There is no subscription and no recurring charge afterwards.
FAQ
Security questions
My hosting already includes security. Why add this?
Platform security protects the servers your site runs on: DDoS mitigation, the firewall in front of the platform, and platform-side scanning. It does not read your website’s own code. This product scans your files and database daily, removes malware it finds, and can patch vulnerabilities in your CMS.
What is SiteLock?
SiteLock provides website security to sites of all sizes. Founded in 2008, it protects over 12 million websites worldwide, with automated vulnerability detection, malware removal, website acceleration and risk assessment.
What does it actually scan for?
It scans your website’s files daily for malware, and your applications for common vulnerabilities that could lead to a compromise. When something is found you are alerted immediately, and on the Fix and Defend plans known malware is removed automatically.
Which plan should I choose?
Find if you want to know whether there is a problem. Fix if you want problems cleaned up without your involvement, which suits most business sites. Defend if you also want a firewall and CDN in front of the site.
My site has already been hacked. What now?
Use Emergency Response rather than a standard plan. It is a one-off service with work starting within 30 minutes, manual cleaning where automation cannot cope, and seven days of monitoring afterwards.
Do I need to install anything?
No. Setup is automated and protection begins immediately, with nothing to install on your website.
24/7 UK-based support, no AI
Real people, based in the UK, every time you get in touch.
No upsells on essential features
All customers get the same pricing and treatment, regardless of size.
100% renewable hosting, verified
Every server we host runs on renewable energy, verified by the Green Web Foundation.