Companies Using SiteLock

I expected a trust-seal page to need some cleaning. I didn't expect to throw out half of it. Our October 2026 crawl finds a SiteLock seal on 5,303 domains, and when we asked SiteLock's own seal server about each one on 15 and 16 October, 2,575 pointed at no live record. The other 2,728 live domains, 2,035 of them matched to a company, are what this page is about. Two things decide who is in that number: which host sold the site its SiteLock, and whether the plan is still running.

Half the seals point at nothing

A SiteLock seal is an image the page loads from shield.sitelock.com with the site's name in the address. If SiteLock holds a record for that name, it draws a badge that reads "Passed" with the current date; if not, it sends back a blank one-pixel image. 1,989 seals were blank, 405 domains showed no seal we could see and had no record, and 181 showed a working seal for some other domain. In a random 50, 14 seals were blank (28%). One caution on the other side: the seal server answers "Passed" for any name it knows, google.com included, so a live seal means SiteLock holds a record, not that someone paid for a scan this month.

Sales signal: a seal on a page is a weak buying signal. Only a seal that still answers says the account exists, which is why this list keeps those alone.

One reading, and the exits

The usage chart has one point, October 2026, because our earlier monthly totals counted every seal, blank ones included. Counts also shift because the domains we crawl turn over every month and our detection widens, so I wouldn't read a trend into any of it yet. What we can count is exits: 720 domains took the seal off a hostname since 16 March 2026, and 83 of those still show it on another.

"More than a third of the SiteLock seals we found point at records that no longer exist. When the plan ends, the badge turns into a blank image, and nobody takes it down." - Sophie Clarke, Product Marketing Manager at TechnologyChecker.io

Sales signal: blank seals are a list of their own. Most of those 1,989 sites once had a SiteLock record that has since ended, many of them on hosts that stopped selling SiteLock, which makes them warm prospects for any scanner or firewall sold to small sites.

The host decides

I grouped all 5,303 domains by nameserver, a fair proxy for the host. Domains on Bluehost, HostGator (US and Brazil), iPage, Network Solutions, HostMonster, webhostbox, JustHost and FatCow nameservers numbered 1,381, and 988 of them (71.5%) failed the check. IONOS was the opposite: 685 domains, only 38 removed. IONOS says its free basic Site Scan, provided by SiteLock, "is already included in all IONOS hosting contracts", and lists a SiteLock seal among its features, so those seals keep answering for as long as the hosting does. HostGator and Bluehost used to resell SiteLock as an add-on, but both now say SiteLock is no longer available and existing plans won't renew (HostGator's notice dates from August 2026, Bluehost's from 29 September), which goes a long way to explaining the dead seals on those nameservers. In the live set, IONOS nameservers sit behind 647 domains (23.72%).

Sales signal: on IONOS a live seal comes free with hosting; on Bluehost and HostGator, SiteLock plans are running out because the host has stopped selling it. Split the list by host before you treat the seal as a budget line, and treat the Bluehost and HostGator seals as owners who need a replacement.

Who keeps a working seal

The live base is tiny businesses: 70.3% of matched companies have 1 to 10 staff, 21.82% have 11 to 50, and only 21 employ more than 500. Most were founded in the 2010s (37.02%) or 2000s (25.85%). The one surprise is industry. Insurance is 16.86%, and 271 of those 280 insurance companies run websites built on EZLynx, the insurance-agency software maker; across the whole live set, 420 domains (15.40%) are EZLynx sites. Every EZLynx site I opened showed a seal naming the agency's own domain. I couldn't find EZLynx saying it includes SiteLock, so I'd call it a pattern, not a confirmed bundle. Beyond the agencies, the names are regional businesses on several continents: O Povo, Kenya Women Microfinance Bank, TTK Banka, Lotus Eye Hospital, the University of Hargeisa.

Sales signal: independent US insurance agencies are the densest cluster here, and they share a website vendor. Reach them through EZLynx, or filter by agency size; an industry keyword alone won't find them.

Where they are

The United States has 805 matched companies, Germany 338, the United Kingdom 143, Brazil 114 and Spain 106. Germany again comes down to hosting: 320 of the 349 live .de domains use IONOS or Strato nameservers. In Brazil, HostGator's local nameservers held 186 seal domains, and 140 of them failed the check. India, Mexico, Japan and Colombia also make the top 15.

Sales signal: in Germany the seal mostly arrives with IONOS or Strato hosting, so the decision there sits with the hosting account.

Stacked, not switched

There is no switching table on this page, and the overlaps explain why. 163 SiteLock domains also show Imperva today, and 72 show Sucuri. The Imperva overlap is mostly SiteLock's own firewall, which runs on Imperva's network. A seal and a firewall do different jobs, so sites keep both, or keep an old seal after putting a firewall in front of the site.

"Where a SiteLock seal sits next to Sucuri, the seal usually came with the hosting and the firewall came later." - Sophie Clarke, Product Marketing Manager at TechnologyChecker.io

Sales signal: a firewall vendor can treat a SiteLock seal as a sign the owner already pays for security. Pitch an upgrade.

The stack around it

WordPress runs on 50.48% of the 2,728, Elementor on 15.18% and Joomla on 4.22%. Apache serves 52.64%, often a sign of shared hosting, and Cloudflare sits in front of 11.58%. Google Analytics is on 57.55%. For WordPress sites the do-it-yourself alternative is a security plugin such as Wordfence.

Sales signal: half these sites run WordPress on shared hosting. Plugins, managed WordPress and migration offers all fit.

What SiteLock says, and what we see

SiteLock's about page says it was founded in 2008, protects more than 20 million websites, has over 200 partners, and joined Sectigo, the certificate authority behind Sectigo TrustLogo, in 2021. Its pricing page (read 16 October 2026) lists Basic at $19.99 a month, Pro at $29.99 and Business at $44.99, or $199, $299 and $449 a year. Twenty million is SiteLock's count of protected websites; our 2,728 is seals on pages that still answer. Both can be true, since a customer doesn't have to show the badge, and many seals have since gone blank.

Sales signal: SiteLock's reach is the hosts. Win a host partnership and you reach its seals; target single sites and expect small budgets.

Key takeaways

1. 2,728 live domains after removing 2,575 seals with no live record; 6th of 18 in WAF & DDoS Protection.

2. 988 of 1,381 seal domains (71.5%) on Bluehost, HostGator and similar hosts' nameservers failed, against 38 of 685 on IONOS, which includes a basic SiteLock scan in its hosting.

3. Insurance agencies on EZLynx sites are 420 of the live domains.

4. 70.3% of matched companies have 1 to 10 staff.

5. A live seal proves a SiteLock record, not a paid scan.

How to use this list

Split the domains by host and by EZLynx before you prospect, and treat the blank-seal sites as former customers. For the full list of 2,728 SiteLock domains with company, size and stack data, explore TechnologyChecker.io. Our guide to technology detection methods explains why a badge on a page isn't always a customer.