SiteLock
SiteLock is a Scottsdale-based cloud website-security SaaS that scans, patches, firewalls, backs up, and accelerates SMB and e-commerce sites across 16M+ monitored websites, distributed via self-serve plans and a global hosting-partner channel under parent Sectigo.
- Company typePrivate
- Founded2008
- HeadquartersScottsdale, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What SiteLock does
SiteLock, founded in 2008 and headquartered in Scottsdale, Arizona, is a cloud-based website security platform that protects SMB and mid-market websites from malware, vulnerabilities, and application-layer attacks. The company monitors 16M+ websites and blocks 567M+ threats per month across a customer base of 14,000+ companies, delivering its service through a tiered subscription stack (Basic $19.99, Pro $29.99, Business $44.99 per month) plus a $199 SiteLock 911 emergency cleanup. Core technology centers on off-server SMART scanning via FTP/SFTP — reaching files and database entries that plugin-based scanners cannot — combined with automatic CMS patching, machine-learning-driven WAF/CDN on an Anycast network of 44+ data centers, off-site encrypted backup (SOC 2 Type II, HIPAA), and a unified Site Health scoring dashboard.
The business model is recurring subscription revenue augmented by one-time emergency services and volume discounts for multi-domain customers. Go-to-market is hybrid: a self-serve PLG motion anchored by a free website scanner and SEO/content marketing targets SMBs directly, while a channel-partner program embeds SiteLock inside the largest global hosting providers — Endurance, Web.com, IONOS, Strato, InMotion, One.com, Team Blue — through WHM/cPanel/WHMCS/APS integrations and a partner API. An inside sales team handles enterprise and volume inquiries. SiteLock operates as a wholly-owned subsidiary of Sectigo, the certificate authority, which is reflected in shared branding, social channels (@SectigoHQ), and aligned go-to-market in the certificate and security stack.
The product portfolio is horizontal across SMB CMS and e-commerce platforms — WordPress, WooCommerce, Magento, Drupal, Microsoft IIS/.NET — with differentiated features including the Site Health score, prioritized action queue, and Trust Seal conversion badge. Strategically, SiteLock is in a mature operating phase: the 2024 SiteLock 2.0 platform refresh consolidated scanning, patching, WAF, and CDN into a single dashboard; the 2017 Patchman acquisition brought automated patching in-house; and a refreshed leadership bench (CEO Damon Fieldgate, CCO Tom Serani, VPs of product and marketing) is steering an international push via European hosting partners and multi-currency pricing.
SiteLock firmographics
Firmographics- Name
- SiteLock
- Legal name
- SiteLock
- Website
- https://sitelock.com
- Company type
- Private
- Founded year
- 2008
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- SiteLock is a Scottsdale-based cloud website-security SaaS that scans, patches, firewalls, backs up, and accelerates SMB and e-commerce sites across 16M+ monitored websites, distributed via self-serve plans and a global hosting-partner channel under parent Sectigo.
- Ownership category
- akta.pro rank
SiteLock industry classification
Industry- Product category
- Website Security
- NAICS
- Software Publishers (5132)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Cloud Network Security (Microsegmentation, Cloud Firewall, WAF, DDoS) (HDABAHAJ)
- akta.pro secondary industries
- Cloud Network Security (Microsegmentation, Cloud Firewall) (HDADADAH), Cloud Security Managed Services (CSPM/CWPP/CNAPP) (BPAEADAF), Data Security & Privacy for Cloud (DLP, DSPM, Tokenization) (HDABAHAK)
Keywords
Where SiteLock is headquartered
LocationHeadquarters
- HQ city
- Scottsdale
- HQ country
- United States
- HQ region
- North America
Markets served
SiteLock business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Infrastructure, Operations
Revenue model
- Subscription Plans (Monthly/Annual): Recurring subscription revenue from three tiered security plans (Basic, Pro, Business) with monthly or annual billing. Annual plans offer up to 17% savings. Plans include malware scanning, vulnerability patching, WAF/CDN, and backup services at varying levels.
- SiteLock 911 Emergency Service: One-time emergency malware removal service priced at $199 for fast expert cleanup after a hack. Includes priority access, 6-hour response time, guaranteed removal, and one year of external monitoring.
- Volume Pricing: Discounted pricing for customers protecting multiple domains/sites, offered through volume pricing page.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Monthly | Basic Plan - $19.99/month - Basic scanning and backup for budget-conscious websites |
| Subscription | Monthly | Pro Plan - $29.99/month - Enhanced protection with automatic patching and CDN/WAF |
| Subscription | Monthly | Business Plan - $44.99/month - Highest level protection for business and ecommerce sites |
| One time/ perpetual license | Pay-as-you-go | SiteLock 911 Emergency - $199 one-time - Fast expert malware cleanup after hack |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels5 records
SiteLock product offering
Product offeringCore offering
SiteLock sells a cloud-based, automated website security and health management SaaS platform delivered through tiered subscription plans (Basic, Pro, Business). The platform combines continuous malware scanning, automated vulnerability patching, a DNS-level Web Application Firewall, a global CDN, off-server backups, and emergency malware cleanup into a single Site Health-scored dashboard aimed at non-technical website owners and small businesses.
Product overview
SiteLock is a website security platform offering a tiered subscription model with three core security plans (Basic, Pro, Business) plus emergency and add-on services. The core platform centers on a unified security dashboard with Site Health scoring that aggregates findings from 10+ security scans. The product suite includes SMART File Scan and SMART Database Scan for automated malware detection/removal, SMART Patch for automatic CMS vulnerability patching, Website Backup & Restore for off-server encrypted backups, and a Web Application Firewall (WAF) paired with Content Delivery Network (CDN) for attack prevention and performance optimization. Emergency remediation is available through SiteLock 911 one-time cleanup service. The platform integrates with major CMS platforms (WordPress, WooCommerce, Magento, Drupal, Microsoft IIS/.NET) and offers control panel plugins (WHM/cPanel, WHMCS, APS) for partner provisioning. Security features include bot detection via machine learning, DDoS mitigation, SQL injection/XSS prevention, virtual patching, and backdoor protection. Pricing ranges from $19.99/month (Basic) through $44.99/month (Business) with annual discounts.
Differentiator
Problem solved
Functional benefit
Products and services
- SiteLock Basic Plan Entry-level website security subscription ($19.99/month) providing daily malware, vulnerability, SSL, and email reputation scans, up to 2GB daily backup, 30-hour expert response, and unlimited automated malware removal for personal websites and blogs with light traffic.
- SiteLock Pro Plan Mid-tier website security subscription ($29.99/month) that includes all Basic features plus automatic CMS vulnerability patching, CDN, Web Application Firewall with bad bot blocking and DDoS protection, up to 5GB daily backup, and 24-hour expert response, suited to high-traffic websites needing an extra layer of protection.
- SiteLock Business Plan Premium website security subscription ($44.99/month) for business and e-commerce sites that adds backdoor protection, advanced caching, 2-factor authentication via SMS/email, firewall PCI reporting, custom WAF rules editing, up to 10GB daily backup, and 12-hour expert response.
- SiteLock 911 Emergency Malware Cleanup One-time emergency malware remediation service ($199) with priority access to the expert team, response within 6 hours, most sites cleaned within 4-6 hours, guaranteed removal of malware/SEO spam/backdoors/blocklist warnings, and one year of external monitoring.
- Malware Detection (SMART File Scan and SMART Database Scan) Continuous automated scanning of website files and CMS databases via FTP/SFTP that detects malware, malicious scripts, backdoors, injected redirect code, spam content, and phishing payloads, with automatic removal when threats are found.
- Malware Removal Service Surgical malware cleanup service that removes only the infected code while preserving legitimate files, including backdoor removal and re-infection prevention, with expert team support for complex infections.
- Vulnerability Patching (SMART Patch) Automatic CMS vulnerability patching that detects known vulnerabilities in plugins, themes, and CMS core files and applies targeted fixes without requiring full plugin upgrades, including one-click rollback capability.
- Web Application Firewall (WAF) DNS-level Web Application Firewall that uses machine learning, bot behavioral analysis, and IP reputation scoring to block OWASP Top 10 threats, bad bots, SQL injection, XSS, DDoS attacks, and credential stuffing, with virtual patching for known vulnerabilities.
- Content Delivery Network (CDN) Global content delivery network with 44+ data centers providing up to 50% faster page load times, smart caching for dynamic and static content, automatic compression and minification, and integrated security filtering on the Anycast network.
- Website Backup and Restore Automated encrypted backup of website files and databases with one-click restore, stored off-server in a SOC 2 Type II and HIPAA-compliant cloud environment independent of the hosting provider.
- Free Website Security Scanner Free one-time external domain scanner that checks a website for known malware, malicious code, vulnerabilities, blacklist warnings, and CDN detection without requiring server-side access, serving as a lead generation tool for paid plans.
- SiteLock Trust Seal Security verification badge displayed on protected websites to signal malware-free status and increase visitor trust, conversion rates, and ROI for the site owner.
- SiteLock VPN VPN service for secure browsing offered under the SiteLock brand, referenced as an active offering alongside the core website security portfolio.
Quantifiable outcome
- 567 million threats blocked per month across SiteLock's network
- +3 more outcomes
Companies that use SiteLock
Customer profileNamed customers1 record
Segments4 records
Ideal customer profiles4 records
SiteLock technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Integration10 records
AI capability4 records
Feature7 records
SiteLock partnerships and signals
Strategic signalPartnerships
Ten partnerships are on record, tiered core.
- Endurance ( Endurance International Group)coreEndurance (part of Endurance International Group) is a hosting company partner that resells SiteLock security services to their customer base of small business websites.
- Web.comcoreWeb.com is a channel partner offering SiteLock website security services to their web hosting and website builder customers.
- 1&1 (IONOS)core1&1 (now IONOS) is a major European hosting provider partner distributing SiteLock security services to their customer base.
- StratocoreStrato is a German hosting company partner reselling SiteLock website security to their European customer base.
- InMotion HostingcoreInMotion Hosting is a US-based hosting partner offering SiteLock security services to their managed hosting customers.
- One.comcoreOne.com is a Scandinavian web hosting provider partner reselling SiteLock security services in Europe.
- Team BluecoreTeam Blue is a European hosting company partner distributing SiteLock services to their small business customers.
- cPanelcoreSiteLock offers integration plugins for cPanel, one of the most widely used web hosting control panels, allowing hosting providers to easily provision SiteLock services.
- WHMCScoreSiteLock provides integration with WHMCS, a popular automated billing and support platform used by hosting companies to manage customer accounts and provisioning.
- WHM (WebHost Manager)coreSiteLock integrates with WHM (WebHost Manager), the server administration interface commonly used alongside cPanel for managing hosting accounts and security services.
Scale indicators6 records
Recent moves5 records
Expansion highlights5 records
SiteLock competitors and assessment
Company assessmentBroad incumbents
- StackPath: StackPath offers CDN, WAF, and edge security services to SMB and mid-market websites. Its product set closely mirrors SiteLock's WAF/CDN offering and it competes for similar customer segments, though with a smaller ecosystem of integrated scanning tools.
- Cloudflare: Cloudflare operates a global edge network providing CDN, WAF, DDoS protection, and bot management. Its free and low-cost tiers directly overlap with SiteLock's offerings, and its scale allows it to bundle website security with broader performance and developer services that SiteLock cannot match.
- Fastly: Fastly operates a global edge cloud platform providing CDN, WAF, and bot mitigation. While primarily developer-focused, its security offerings compete with SiteLock's CDN/WAF bundle for performance-sensitive SMB and mid-market websites.
- Imperva: Imperva provides application security including WAF, bot management, and DDoS protection, primarily targeting mid-market and enterprise. Its Cloud WAF competes with SiteLock's WAF in the Business tier and for higher-end e-commerce customers.
- Akamai: Akamai is a global CDN and cloud security provider with web application firewall, bot management, and DDoS protection products. While Akamai targets larger enterprises, its App & API Protector and Kona Site Defender compete with SiteLock in the e-commerce and business tiers.
Direct peers
- Wordfence: Wordfence is the most widely deployed WordPress security plugin, providing malware scanning, WAF, and login security to millions of WordPress sites. It directly competes with SiteLock in the WordPress segment, with a freemium model that pressures SiteLock's entry-tier pricing.
- Sucuri: Sucuri is a website security platform offering malware detection, removal, WAF, and CDN for websites. It is the closest direct competitor to SiteLock, serving the same SMB and mid-market segments with a similar product set and comparable pricing tiers.
- MalCare: MalCare is a WordPress-focused malware scanning and removal service with one-click cleanup and a firewall add-on. It competes head-to-head with SiteLock's WordPress-focused SMART scanning and malware removal capabilities.
- Patchstack: Patchstack provides vulnerability intelligence and virtual patching for WordPress plugins and themes, overlapping with SiteLock's SMART Patch capability. Patchstack is a more focused competitor on the patching side of SiteLock's product suite.
- Astra Security: Astra Security provides website malware scanning, WAF, vulnerability patching, and security audits for WordPress, Magento, and other CMS platforms. It targets the same SMB and e-commerce segments as SiteLock with comparable subscription pricing.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key highlights7 records
Customer concentration
SiteLock social profiles
Digital presenceSiteLock compliance and trust
Trust signalCompliance2 records
SiteLock financial estimates
Financial estimateRevenue estimate
Valuation estimate
SiteLock leadership team
Management profileNumber of profiles
Profiles6 records
SiteLock funding detail
Funding detailFunding overview
Funding rounds1 record
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SiteLock M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SiteLock
What does SiteLock do?
SiteLock sells a cloud-based, automated website security and health management SaaS platform delivered through tiered subscription plans (Basic, Pro, Business). The platform combines continuous malware scanning, automated vulnerability patching, a DNS-level Web Application Firewall, a global CDN, off-server backups, and emergency malware cleanup into a single Site Health-scored dashboard aimed at non-technical website owners and small businesses.
Is SiteLock a public or private company?
SiteLock is a private company. It is classified as corporate owned and is currently operating.
When was SiteLock founded?
SiteLock was founded in 2008. It employs 101 to 250 people.
Where is SiteLock based?
SiteLock is headquartered in Scottsdale, United States, in the North America region.
How does SiteLock make money?
Three revenue lines are on record. Subscription Plans (Monthly/Annual) is the primary driver. The others are siteLock 911 Emergency Service and volume Pricing.
Who are SiteLock's main competitors?
Broad incumbents on record are StackPath, Cloudflare, Fastly, Imperva and Akamai. Direct peers are Wordfence, Sucuri, MalCare, Patchstack and Astra Security.
Does SiteLock have an API?
No public API is recorded for SiteLock.
What industry is SiteLock in?
SiteLock's product category is Website Security. Its primary akta.pro industry code is HDABAHAJ, Cloud Network Security (Microsegmentation, Cloud Firewall, WAF, DDoS), with a secondary code of HDADADAH, Cloud Network Security (Microsegmentation, Cloud Firewall). Its NAICS code is 5132 and its SIC code is 7372.