SiteLock Support

kevin · 2020-06-05 03:00:51

A couple of questions regarding SiteLock.

For those, you may not know what SiteLock is: SiteLock is "SITELOCK IS THE GLOBAL LEADER IN WEBSITE SECURITY. WE FOUNDED THE COMPANY IN 2008 WITH A PASSION TO MAKE CYBERSECURITY AND WEBSITE SECURITY SERVICES AFFORDABLE AND ACCESSIBLE TO SMALL BUSINESSES, A PREVIOUSLY UNDERSERVED MARKET. WE PROTECT OVER 12 MILLION SITES AROUND THE WORLD AND ARE ONE OF THE TOP CYBERSECURITY COMPANIES IN ARIZONA."
My site is hosted by Blue Host. Blue host as an add on feature that uses SiteLock security addon that scans my site and warns me of any security issues and vulnerabilities.

question one: Is the basic SiteLock Security option worth the $15.00 per year?... I know that this is really basic! SiteLock subscription can go up to in access of $50.00 per month (out of the question for me).

Question two: The biggest problem that I have with the weekly SiteLock security scan is the warnings that I receive. I have no F#%*#^G clue as to what they are telling me ... let alone who to speak to or how to deal with the problem. The lastest warning gave me a warning about 3 XSS vulnerabilities and 77 XSS nonvulnerable issues. I am more concerned about the Vulnerabilities, rather than the Nonvulnerabilies. The URLs that are being flagged are buried in the "backlight" folder, of course, they are. The first one looks like an image to me. The second is a script in the publisher and galleries module. The third has to do with the style sheet. I have a screengrab of the SiteLock dashboard if you need it, probably not prudent to publish it on this forum. Is this a problem that I should be addressing, if so, who should I be talking to?

as always,

Thanks in advance,

Kevin

Ben · 2020-06-05 08:06:59

Hi Kevin, I don't have experience with Site Lock. Are you running any other software on your site, in particular Wordpress? That is typically the biggest area of concern. If you are running Wordpress then use the Wordfence plugin, which does a lot of the work to protect the installation and provides security warnings.

I recommend running SSL if you're not already, and to enable two-factor authentication in Backlight. We have no known security vulnerabilities and code defensively to avoid common security issues.

Feel free to share the warnings here, and I'll advise on the nature of them and if I can, whether there's anything of concern. If they're confidential in nature (e.g. revealing local server paths or similar) then please email them to me instead.

kevin · 2020-06-21 18:57:46

Sorry for the delay in getting back to you on this Ben... The following report is from the Site Lock security scan. It is showing 3 XSS Vulnerability Issues.... The vulnerability issues are listed at the bottom of the report. I am guessing that the issues are summarized in the "a c m p1 and p2" codes. I have not had a chance to explore what these issues are. I am hoping that you can let me know what can be done.

Thanks

Kevin

Community @ The Turning Gate

#1 2020-06-05 03:00:51

SiteLock Support

#2 2020-06-05 08:06:59

Re: SiteLock Support

#3 2020-06-21 18:57:46

Re: SiteLock Support

Board footer