What to do When SiteLock Finds a Vulnerability
What is a vulnerability?
A website vulnerability is a weakness in coding that cybercriminals can exploit to gain some level of control of your site.
If your SiteLock scanner finds a vulnerability on your website:
- You will receive an email letting you know a vulnerability was detected.
- There will be a notification in your SiteLock dashboard.
- Your SiteLock dashboard will display a failed status for the specific scan that found the issue.
Follow the instructions in the notification and contact SiteLock's Support team for more information about the vulnerability and to resolve the issue.
What will happen to my website and SiteLock Trust Seal?
Your website will remain live, and your visitors will not be alerted to any problems. Your SiteLock Trust Seal will remain live and continue to display the date of the last clean scan of your site. If the issue is not resolved within a few days, your Trust Seal will be removed and replaced with a single-pixel transparent image.
If you do not have a SiteLock account and are interested in securing your website against malware and vulnerabilities, check out the following article to order SiteLock.
Where can I find my vulnerability scan reports?
The SiteLock Dashboard provides security scan reports that offer both summarized and detailed information about your website scans.
To access these reports, go to the Security Report tab in your SiteLock Dashboard. If you have only one website in your account, you will also find the Security Scans option in the Overview tab. Click the "+" button or the Details button to view the Security Scans report.
Clicking Security Scans will open a page under the Security Report tab, where you can also see the Site Settings and Setup Wizard options.
The Vulnerability scan provides an overview of detected vulnerabilities. Click the View Details button to view the following information:
- Scan time - This shows the latest scan date in the Central Time Zone.
- Status - This indicates the current scan status: "OK" or "Failed"
- Platform vulnerabilities found - This shows the number of platform (CMS) vulnerabilities detected.
- XSS pages scanned - The number of web pages scanned for XSS vulnerabilities.
- XSS issues found - The number of XSS vulnerabilities detected.
- SQL injection pages scanned - The number of web pages scanned for SQL injection vulnerabilities.
- SQL injection issues found - The number of SQL injection vulnerabilities detected.
For a detailed navigation overview of the SiteLock Dashboard, please check out the following article: