Home›Security›Website Security›SiteLock

XcellSecure|SiteLock Website Security

Your website never closes. Its protection shouldn't either.

SiteLock scans your site every day for malware, removes what it finds and, on Pro and Business, puts a web application firewall and CDN in front of it. XcellHost sets it up, makes the DNS change and watches it 24×7 from Mumbai — billed in INR with GST.

Daily malware & blacklist scan
SMART automatic malware removal
WAF on Pro & Business
CDN acceleration
CMS vulnerability patching
SiteLock Trust Seal
View plans → Which plan do I need? WhatsApp
✦Ask AI about SiteLockChatGPTClaudePerplexityGoogle AICopilot
www.yourbusiness.inDaily malware scan Sample data
Files scanned—today
Malware found—files
Status—SMART
SMART SCAN · 02:00 ISTsample
    Powered bySiteLockAuthorised SiteLock reseller* · set up & supported by XcellHost
    ISO 27001 & 20000-1Microsoft Gold Partner10,000+ customersSince 1999 · Mumbai99.95% uptime SLA24×7 NOC + SOC
    SiteLockper website · excl. GST
    Compare
    Emergency

    Hacked right now?

    Browser warning, defaced homepage, spam pages in Google or a hosting suspension? Send us the domain. Our SOC starts the clean-up with SiteLock and gets you back online — then we work out how they got in.

    Enter the domain
    Enter a phone number
    On quote — 24×7 response*. No prices guessed; we quote after a look at the site.
    Overview · what is SiteLock?

    Find it. Fix it. Stop it coming back.

    SiteLock is a cloud website-security service. Every day it scans your site for malware, known vulnerabilities and blacklisting, and its SMART tool removes malicious code from your files automatically. The Pro and Business plans add a web application firewall (WAF) and a content delivery network (CDN), so attacks are filtered before they reach your server and pages load faster for real visitors. The SiteLock Trust Seal shows visitors the site has been scanned.

    XcellHost resells and runs SiteLock for Indian businesses. We activate the licence, verify your domain, connect SMART to your hosting, make the DNS change for the firewall and CDN, tune the rules so nothing legitimate is blocked and keep the seal live. If something is found, our 24×7 Mumbai SOC sees the alert too. Every order comes with a GST invoice.

    01 · FindDetect threats early

    Daily scans look for malware, vulnerabilities and blacklisting before customers or Google notice.

    • Daily malware & file scan
    • Vulnerability detection
    • Blacklist monitoring
    02 · FixRemove it automatically

    SMART cleans infected files on its own, so an infection doesn't sit there spreading.

    • Automatic malware removal
    • File-level clean-up
    • Help getting off blacklists
    03 · PreventBlock attacks up front

    On Pro and Business, the WAF and CDN drop bad traffic and speed up the good.

    • Web application firewall
    • DDoS protection + CDN
    • SiteLock Trust Seal
    SiteLock plans & pricing · INR

    Three plans, one website each. Pick how much protection it needs.

    Plans start at ₹892 a month, billed annually — about ₹29 a day. Every plan scans daily and removes malware; Pro and Business add the firewall and CDN.

    Annual prices, billed once a year

    Basic

    Personal sites, blogs and brochure sites with no current infection.

    • 2 GB website backup
    • Malware detection
    • Malware removal
    • Trust seal
    Most popular

    Pro

    Business sites, and sites with a security problem today.

    • Everything in Basic, plus
    • 5 GB website backup
    • Repair an existing infection
    • Block malicious DDoS traffic
    • CDN acceleration

    Business

    Online stores, corporate sites and sites holding important data.

    • Everything in Pro, plus
    • 10 GB website backup
    • CMS vulnerability detection & patching
    • Database protection
    • Advanced CDN acceleration

    Prices converted from USD reference pricing at ₹95.07/USD on 19 Oct 2026 — Indicative, confirm with XcellHost price list. Rounded to end in 99, per website per year, excl. 18% GST. "List price" is the reference MSRP. Monthly view shows the annual price ÷ 12, as the reference does; Basic can also be billed month to month. Pay by UPI, card or net banking; multi-site bundles on request.

    All SiteLock products

    Everything we sell for website security, on one list.

    Click a product name or Buy to open the cart — choose the term, number of websites and add-ons there.

    ProductKey featuresFromBuy
    Daily malware scan · malware removal · 2 GB backup · trust seal₹10,699/yr
    Popular+ WAF & CDN · repair existing infection · DDoS blocking · 5 GB backup₹17,799/yr
    + CMS patching · database protection · custom WAF rules · PCI report · 10 GB backup₹24,999/yr
    Hacked-site emergency clean-upSOC-led malware removal, blacklist and suspension help, root-cause noteOn quote24×7 response*Get help
    Activation, domain verification, SMART file access, DNS change, WAF tuning — by XcellHost₹1,999*per site · one-time
    SSL installation serviceCSR, install, chain and HTTPS redirect checked on your server₹2,999per serverDetails
    Compare plans

    Every feature, side by side.

    Feature names follow SiteLock's plan sheet. TrueShield is SiteLock's firewall; TrueSpeed is its CDN.

    FeatureBasic₹10,699/yrPro₹17,799/yrBusiness₹24,999/yr
    Scan, fix & back up
    Daily file & database backup2 GB5 GB10 GB
    Malware & blacklist scan✓✓✓
    SMART scan✓✓✓
    SMART patch + fix (automatic removal)✓✓✓
    Repair an existing malware infection—✓✓
    SSL scan · spam scan✓✓✓
    SQL injection & XSS scans✓✓✓
    Risk score · basic CMS scan✓✓✓
    CMS vulnerability detection & patching——✓
    Database protection——✓
    Firewall & CDN
    TrueShield WAF & TrueSpeed CDN—✓✓
    CDN acceleration—StandardAdvanced
    Bad-bot blocking · backdoor protection—✓✓
    OWASP Top 10 prevention—✓✓
    Layer 3 & 4 DDoS protection—✓✓
    Weekly WAF reporting—✓✓
    WAF custom & network SSL support—✓✓
    Custom WAF rules——✓
    Firewall PCI report——✓
    WAF two-factor login (SMS + email)——✓
    Trust & support
    SiteLock Trust Seal · domain verification✓✓✓
    24×7×365 support✓✓✓
    Buy
    How it works

    Scan, detect, fix, protect, report — every single day.

    The dot is one day in the life of a protected site. SiteLock does the scanning and filtering; XcellHost watches the alerts and steps in when a person is needed.

    1. Scan

      Files, database and pages checked daily; blacklists polled.

    2. Detect

      Malware, injected spam, SQLi/XSS flaws and outdated CMS code flagged.

    3. Fix

      SMART removes malicious code; Business patches known CMS flaws.

    4. Protect

      WAF filters attacks and bots; CDN absorbs floods and caches pages.

    5. Report

      Dashboard, alerts and weekly WAF reports; seal stays current.

    SiteLock SMART · TrueShield

    Malware removal that never sleeps, and a firewall that never blinks.

    SMART file clean-upscanning 3,960 files
    0 scanned0 infected0 cleaned

    SMART (Secure Malware Alert & Removal Tool) checks your files every day, finds malicious code and removes it automatically, so an infection is cleaned before it spreads or gets you blacklisted. It needs file access to your hosting account — we set that up. Illustrative.

    TrueShield WAFfiltering requests
    0 allowed0 blocked0 bots

    On Pro and Business your traffic passes through SiteLock's cloud firewall first. SQL injection, cross-site scripting, backdoor uploads and bad bots are dropped there, with OWASP Top 10 rules and a weekly report. Illustrative.

    Who it's for

    Five situations we see every week, and the plan that fits.

    Your site is already infected

    Google shows "This site may harm your computer", your host has suspended the account or customers report redirects. Start with an emergency clean-up, then put Pro in place — it can repair an existing infection and the WAF stops the same hole being used again.

    • Emergency clean-up by our SOC (on quote)
    • Blacklist and hosting-suspension follow-up
    • Pro afterwards to keep it clean

    Nothing's wrong — and you want it to stay that way

    Most sites are hit by automated bots trying known flaws, not by someone targeting you. Basic gives you daily scanning and automatic removal; Pro adds the firewall that blocks those bots before they arrive.

    • Daily scan from day one
    • SMART removes what it finds
    • Add the WAF and CDN with Pro

    You take payments or store customer data

    Checkout pages and customer databases are what attackers want. Business adds database protection, CMS patching, custom WAF rules and a firewall PCI report you can hand to your payment provider or auditor.

    • Database protection
    • Firewall PCI report
    • WAF login with two-factor

    WordPress, Joomla, Magento or another CMS

    Most clean-ups we do trace back to an outdated plugin or theme. Every plan runs a basic CMS scan; Business detects known CMS vulnerabilities and patches them.

    • Outdated plugin and theme detection
    • Automatic patching on Business
    • Daily backup before anything changes

    You look after many client sites

    Each SiteLock licence covers one website, so pick the number of sites in the cart. We set up every one, keep the seals live and send alerts to you — with a single GST invoice.

    • Up to 10 sites per order online
    • One invoice for every client site
    • Bigger bundles quoted on request
    Website security in India

    Regulators now expect you to notice an attack fast. SiteLock helps you see it.

    No Indian rule names a security product. These are the obligations a website-security service helps you meet — it does not make you compliant on its own.

    0hours

    CERT-In incident reporting

    CERT-In's April 2022 directions require reportable cyber incidents — the list includes website defacement and malicious-code attacks — to be reported within 6 hours of noticing them. Daily scans and SOC alerts mean you notice sooner and have the scan log to attach.

    DPDP Act 2023

    Expects reasonable security safeguards for personal data and breach intimation to the Data Protection Board. A malware-free site and a firewall in front of customer forms are basic safeguards.

    Payment pages · RBI & PCI DSS

    PCI DSS v4.0 expects public-facing web apps to be protected by an automated solution that detects and blocks attacks, such as a WAF. Business includes a firewall PCI report for your acquirer or payment aggregator.

    Search & browser blacklists

    A Google Safe Browsing warning can cut traffic overnight. Blacklist monitoring and clean-up help get it lifted faster.

    Backups you can restore

    Daily file and database backup (2–10 GB by plan) gives you a clean copy to roll back to — keep it alongside your host's backups.

    Website risk quick-check · try it

    Six questions. One plan recommendation.

    Nothing is sent anywhere and we don't scan your site from this page — the answer is worked out in your browser.

    Add-ons & managed services

    The parts SiteLock doesn't do on its own, done by XcellHost.

    Setup & DNS/CDN onboarding

    Activation, domain verification, SMART file access, the DNS change for WAF/CDN and first-week rule tuning.

    ₹1,999* per site · one-time
    SSL installation

    The WAF needs your SSL certificate to inspect HTTPS. We install and check it on your server.

    ₹2,999 per server
    Additional websites

    One licence per website. Add up to 10 in the cart; larger bundles quoted.

    per plan × sites
    Priority response

    Faster clean-up and named escalation from our 24×7 SOC for revenue-critical sites.

    On quote
    Why XcellHost

    Powered by SiteLock. Set up and looked after by XcellHost.

    INR prices, GST invoice

    UPI, card or net banking; input credit for your business.

    01
    We make the DNS change

    WAF and CDN switched on without downtime.

    02
    Transparent renewals

    Renewal price shown up front; 15-day money-back*.

    03
    Free migration

    Moving hosting to us too? We migrate the site free.

    04
    Everything together

    Domain, hosting, email, SSL and security in one place.

    05
    24×7 people, Mumbai

    NOC & SOC since 1999 — English and Hindi.

    06