SiteLock API overview

SiteLock is a cloud-based web security provider that offers a range of products and services designed to protect websites for small, medium-sized businesses, and individuals.

The SiteLock API is a SOAP (Simple Object Access Protocol) interface that allows you to interact with and manage SiteLock products and services.

This guide provides the information you need to manage SiteLock products and services programmatically using the SiteLock API.

The API endpoint is:

https://api.sitelock.com/v1/partner

SiteLock product and service categories

SiteLock offers the following categories of products and services that can be managed through the SiteLock API:

SiteLock products are available to reseller customers based on agreements between SiteLock LLC and the reseller or partner organization.

As a result, some products or features described in this section might not be available to all reseller/partner organizations.

For more information about product availability, please contact SiteLock Sales.

Surface scans

Surface scans provide an external view of the website’s security posture by scanning publicly accessible pages for malware, vulnerabilities, and other visible threats.

The following surface scan services are available through the SiteLock API:

  • Vulnerability Scan — detects vulnerable plugins, themes, Cross-Site-Scripting (XSS) and SQL injection vulnerabilities on the website.

  • Webpage Scan — monitors public website pages for malware, injected spam, and malicious redirects that could harm visitors or search engine trust.

  • SSL Monitor — helps manage and monitor the SSL/TLS certificates for the website, ensuring secure communication between the server and visitors.

  • Email Reputation Scan — checks whether the email domain appears on major blacklist services, Spamhaus and SURBL.

SMART scans

SMART scans perform comprehensive, server-level analysis of the website to identify, alert, and automatically remove malware and other threats.

The following SMART scan services are available through the SiteLock API:

  • SMART Database Scan — identifies and remediates vulnerabilities, malware, and suspicious activity in the website’s databases.

  • SMART File Scan — detects and removes malware from the website’s file system for sites that support SFTP, FTP, or FTPS connections.

  • SMART Patch — detects and automatically remediates vulnerabilities in the website’s software components by applying necessary patches.

Metrics and verification services

SiteLock offers a variety of metrics and verification services that provide insight into the security and health of the website.

The following metrics and verification services may be available through the SiteLock API, depending on the partner agreement:

  • Site Health — represents the overall health of the website in a chart. It uses data from the various SiteLock scans to categorize the health of the website as healthy, at risk, impaired, or compromised.

  • SiteLock Trust Seal — shows visitors the site is protected by SiteLock and that it has passed security checks.

  • Domain name verification — verifies that you actually own and are authorized to use the domain name for the site.

Add-on products

SiteLock add-ons are additional products and services that can be added to SiteLock subscription to provide enhanced security and performance for the website.

The following add-on products may be available through the SiteLock API:

  • Firewall & CDN — The Firewall & CDN add-on provides two key services to protect and optimize the website:

    • Web Application Firewall (WAF) — Filters and blocks malicious traffic before it reaches the web server.

    • Content Delivery Network (CDN) — Distributes website content across multiple global locations so visitors can access it from the server closest to them.

  • Payment Card Industry (PCI) Compliance — monitors and manages the PCI compliance status to ensure all transactions are secure and protected from credential theft or identity theft.

  • Backup & Recovery — safeguards the website data by creating secure backups of files and databases to protect against data loss from cyber attacks, server failures, or accidental deletions.

    It offers two backup services:

    • File backup — backup the website’s files on demand or on a scheduled basis.

    • Database backup — backup the website’s MySQL database on demand or automatically on a schedule.