shouldiuse.io

VERDICT

Should I use SiteLock?

Secure your website with our security monitoring and protection services. - sitelock.com

Skip. Skip it for typical WordPress/SMB sites: G2 averages 2.4/5, billing complaints recur, and its own plugin shipped auth-bypass CVEs. Only consider if your host bundles it cheap and you want zero-effort scanning.

Confidence

Medium. Based on 14 public sources: G2/Reddit/Capterra reviews, two CVE databases, official pricing pages, and reseller listings.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$9.37/yr (via resellers)

Basic

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Profrom ~$14.99/mo
Volume pricingMulti-site discounts

Best for

  • Non-technical SMB site owners
  • Host-bundled hands-off scanning
  • Multi-site volume discount buyers

Not for

  • WordPress sites — free Wordfence scans better
  • Anyone avoiding 12-month contracts
  • Developers who can run Cloudflare or a WAF themselves
  • Buyers wary of host-checkout upsells

Gotchas - check before you buy

high

12-month contract requirement reported by reviewers; hard to exit

high

Billing complaints are a repeated theme across 160 PissedConsumer reviews

high

Its own WP plugin had auth-bypass CVEs in 2025-2026; patch or remove

medium

Frequently upsold at host checkout (HostGator, Bluehost); value questioned on Reddit

Pros and cons

Pros

  • Automated malware detection, removal, and vulnerability diagnostics
  • Sold through major hosts (Bluehost, HostGator, Namecheap) for easy bundling
  • Volume discounts when securing multiple sites
  • Case studies show non-technical SMB owners recovering hacked sites

Cons

  • 2.4/5 across 33 verified G2 reviews
  • Reviewers report a 12-month contract requirement
  • Own WordPress plugin shipped missing-authorization CVEs
  • Billing complaints recur across 160 PissedConsumer reviews
  • Wordfence's scanner called 'vastly superior' in head-to-head reviews

Sources & method

Analyzed 9/20/2026 - 14 sources - SiteLock's own WordPress plugin has published missing-authorization/auth-bypass CVEs.

official x5review x6security x3
  • CVE-2026-24532, Missing authorization / authentication bypass in SiteLock Security WP plugin (<= 5.0.2).
  • CVE-2025-62128, Missing authorization vulnerability in the SiteLock Security WordPress plugin.

Key stats

  • Value for money: 2/5

    Rating

  • $9.37/yr (via resellers)

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 2/5. 12-month contracts, billing complaints, better free rivals
  • Ease of use: 3/5. Automated scans and malware removal, minimal effort
  • Feature depth: 3/5. Broad suite, but reviewers say Wordfence scans deeper
  • Support quality: 2/5. 'Customer service is just ok' on G2; billing disputes
  • Security posture: 2/5. Own WordPress plugin shipped two auth-bypass CVEs
  • 2.4/5 G2 rating 33 verified reviews
  • from $2.08/mo Starting price reseller tiers; MalCare cites $14.99/mo plans
  • 160 PissedConsumer reviews billing complaints repeatedly noted
  • 2 CVEs in its own WP plugin missing-authorization, 2025-2026

Pricing

Basic

$9.37/yr (via resellers)

  • Entry-level scanning
  • Most commonly resold tier

Pro

from ~$14.99/mo

  • Deeper scanning and threat removal
  • Positioned for business sites

Volume pricing

Multi-site discounts

  • Per-site savings at scale

Security

SiteLock's own WordPress plugin has published missing-authorization/auth-bypass CVEs.

  • CVE-2026-24532Missing authorization / authentication bypass in SiteLock Security WP plugin (<= 5.0.2).
  • CVE-2025-62128Missing authorization vulnerability in the SiteLock Security WordPress plugin.⁸

What users say

Sentiment is strongly negative: 2.4/5 on G2, recurring billing and support complaints, and Reddit threads openly questioning its value.

“Hostgator and Sitelock are total scams. They will”
Reddit, r/Wordpress
“There were no pros to having Sitelock. It was a waste”
SoftwareAdvice
“The customer service is just ok. The rep”
G2

Alternatives

Compare SiteLock with each alternative.

  • Wordfence

    Free WordPress firewall/scanner reviewers call vastly superior

  • Cloudflare

    Free CDN/WAF; G2's top SiteLock alternative

  • Intruder

    Vulnerability scanner favorably compared on G2

    SiteLock vs Intruder

Companies that use it

  • Amanda Naor Photography
  • The Blogging 911
Full analysis

Based on 14 public sources: G2/Reddit/Capterra reviews, two CVE databases, official pricing pages, and reseller listings.

2.4/5 on G2, billing complaints, auth-bypass CVEs in its own plugin. Free Wordfence or Cloudflare does more for less.

Methodology

Based on 14 public sources: G2/Reddit/Capterra reviews, two CVE databases, official pricing pages, and reseller listings.

Sources

  1. SiteLock seller profile on G2g2.com
    review
  2. SiteLock Reviews on G2g2.com
    review
  3. Is SiteLock a legitimate service or a scam? - Redditreddit.com
    review
  4. SiteLock Review - MalCaremalcare.com
    review
  5. SiteLock PissedConsumer reviewssitelock.pissedconsumer.com
    review
  6. SiteLock vs Wordfence - MalCaremalcare.com
    review
  7. CVE-2026-24532cve.org
    security
  8. CVE-2025-62128 - NVDnvd.nist.gov
    security
  9. SiteLock Security <= 5.0.2 - WPScanwpscan.com
    security
  10. SiteLock pricing pagesitelock.com
    official
  11. SiteLock volume pricingsitelock.com
    official
  12. SiteLock reseller tiers - name.comname.com
    official
  13. SiteLock (Japanese reseller) - FujiSSLfujissl.jp
    official
  14. SiteLock via HostGatorhostgator.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.