The Monitoring solution provides the components you need to oversee your website security. It includes multiple scanners that, together, can cover all aspects of your website security monitoring.
Click to expand each portion to review the interface for that section.
Security Check / Monitoring
The general monitoring security check section will give you an overview of the most recent automated remote scan for your site which looks for: malware, vulnerabilities, defacement, and injected spam, as well as if the firewall is active.
You can also view the recent history of any events that have occurred so you can stay on top of what is going on with your website’s security.
Server Side Scanner
Please see these instructions on how to Configure the Server Side Scanner.
The server side scanner uses two PHP scripts that get uploaded to your hosting server. Those scripts allow us to run internal scans to find malware on the files that make up your site. This scan runs once daily.
Once active, you will see notifications for things, such as: how many issues were found or when the last scan occurred. Under the Status section, you can click to expand and review the recent scan results.
Uptime, SSL Scanner, DNS Scanner
- Uptime: Under the Uptime area of your site’s monitoring, you will find statistics and historical data of the results of the uptime scans. This will provide you with insight into when issues have occurred on your site related to whether the scanner has received a successful HTTP 200 response from the destination your site’s hosting server designates.
- SSL Scanner: The SSL Scanner section will show if there have been any changes to the status of your site’s SSL certificate.
- DNS Scanner: The DNS scanner will detect changes in your DNS records for this site’s domain name and alert it here.
This article provides more information on the different monitoring types and frequencies offered.
Settings
The Monitoring Settings section is where you will control the settings for each of the monitoring and reporting systems included with your plan. This includes scanning and email report frequency, server side scanner file uploads and enabling any monitoring or scanning API keys you might be using for this site.
Monitoring Settings
Each section shows if it is disabled with options to enable or disable.
Universal Monitoring Settings – This will allow you to enable or disable the monitoring Email Notifications for your site. Note: If you disable Email Notifications, you will not receive email reports. You can also toggle the HTTPS setting on or off to specify whether the scans should run on the HTTPS version of your site or not.
Monitoring Scanner – This section allows you to change the frequency of the Monitoring scanner to every 6 hours, 12 hours, or Daily.
Uptime Scanner – This section allows you to change the frequency of the Uptime scanner to every 5, 10, 20, or 60 minutes.
SSL Scanner – This section allows you to change the frequency of the SSL scanner to every 6 hours, 12 hours, or Daily.
DNS Scanner – This section allows you to change the frequency of the DNS scanner to every 6 hours, 12 hours, or Daily.
Server Side Scanner
Enable
Enabling the Server Side Scanner is done by entering in the appropriate credentials to access your site’s hosting server via SFTP or SSH. You may also manually download the file and upload it through an FTP client like FileZilla or through your server’s File Manager. Once uploaded, select the Verify File & Enable option.
Allowlist URL Paths
Adding entries to this list will cause any warnings that contain this path to be suppressed. This is useful if false positives are found and should be ignored. Remember that you accept the risks if allowlisting a URL with regards your site’s security.
Download Scanner Script
If you need to download a new version of the script for some reason, you can do so in this Settings option. After uploading to your server, select Verify File to ensure the Server Side Scanner is still able to connect to your server.
Email Report Settings
In the Email Reports settings you can enable or disable reports and adjust the frequency of the report to Weekly or Monthly. You can also request the report in an HTML or Plaintext format.
Monitoring API
Sucuri supports two Monitoring APIs to help you automate and extend your security monitoring:
Dashboard API
Enabling this dashboard API option will allow you to utilize our Monitoring API solution. You can find the documentation for this feature here.
Scanning API
Enabling this Scanning API option is a paid feature. Its purpose is for building your own interface to interact with our Sitecheck scanning options to run external malware checks on a regular or frequent basis. If you are interested in this feature please reach out to our Sales Consultants though chat.
