Start your 7-day free trial, card not charged until it ends

Website malware monitoring

Find out your site is flagged before your customers do

Website malware monitoring tells you when your site has been flagged as dangerous. TLDTrack checks every site against Google Web Risk, the commercial version of Safe Browsing, twice a week for malware, phishing and unwanted software, and alerts you when a site is flagged and again when it is cleared.

Start your free trial

Card not charged until your trial ends

2

checks a week on every site

3

Google threat lists: malware, phishing and unwanted software

01 · What we check

What TLDTrack checks

No agent to install. No DNS changes. Switch it on for a site and the first check runs straight away.

Malware & phishing flags

Your homepage address is looked up in Google Web Risk for malware, phishing and unwanted software. A flag on these lists is what puts a browser warning in front of your visitors.

Checked from day one

Turning malware monitoring on for a site runs a check straight away, then twice a week after that.

SSL & certificate health

Expired or misconfigured SSL is a red flag for both customers and Google. We track certificate expiry for every domain, with the issuer recorded so you know who to call.

This is a lookup in Google's lists, not a scan of your files. To look further, run a security scan, or see everything TLDTrack watches in website security monitoring.

02 · When we find something

What happens when a site is flagged

01

An alert

A critical alert naming the threat types Google reported, by email to the contacts who chose blacklist and malware alerts, on the mobile app, and in Slack, Teams or a webhook if you use them.

02

The all-clear

When Google clears the site, you get an all-clear and the original alert closes itself.

03

Step-by-step guide

Every domain has a built-in incident runbook, plain-English next steps for blacklisting and malware findings, on every plan.

03 · Pricing

Simple, transparent pricing

Every paid plan starts with a 7-day free trial. Cancel during the trial and you won't be charged.

Free forever

Free

Monitor one site, free forever

$0/mo

1 website + 4 extra monitors

No credit card needed

  • Uptime checks every 5 minutes
  • Response time tracking
  • Domain expiry alerts
  • SSL certificate expiry alerts
  • Email alerts
Start free

7 days free

Starter

For individuals & small portfolios

$11/mo

Up to 5 websites

250 monitoring credits / month

  • Uptime, SSL, DNS & blacklist
  • Content & visual change monitoring
  • Accessibility (WCAG 2.2) monitoring
  • Email health & renewal alerts
  • PageSpeed & malware scanning
  • Free WordPress plugin
  • WHM & cPanel monitoring
  • Bulk import & export
  • Security, SEO & compliance scans
  • AI integration (Claude & ChatGPT)
Start free trial

Most popular

Pro

For active managers & agencies

$29/mo

Up to 25 websites

1,250 monitoring credits / month

  • Everything in Starter
  • Up to 5 team members
  • Client report builder
  • AI search visibility
  • Priority support
  • Security, SEO & compliance scans
  • AI integration (Claude & ChatGPT)
Start free trial

7 days free

Agency

For large portfolios & teams

$89/mo

Up to 100 websites

5,000 monitoring credits / month

  • Everything in Pro
  • Up to 20 team members
  • Agency CRM & white-label reports
  • Security, SEO & compliance scans
  • Dedicated support
  • AI integration (Claude & ChatGPT)
Start free trial

Bigger than 100 websites? Our Enterprise plan adds unlimited sites, custom data residency, an SLA, dedicated onboarding and custom integrations. Talk to us

*SMS alerts are an optional add-on on paid plans for UK mobile numbers, paid for with prepaid SMS credit packs. Prices exclude any applicable sales tax. Your card won't be charged during a paid-plan trial. Cancel anytime.

04 · Questions

Frequently asked questions

How is this different from Sucuri or Wordfence?

Sucuri and Wordfence scan files on the server and need a plugin or agent. TLDTrack checks Google's threat lists from the outside, for any platform, WordPress, Shopify, custom or static, and keeps that alongside uptime, DNS, SSL and renewal monitoring in one dashboard.

How fast will I be alerted?

Malware checks run twice a week, and a check runs straight away when you switch monitoring on for a site. The alert is raised by the check that finds the flag.

Will the check slow down my website?

No. It looks your address up in Google's lists and never visits your site.

Can you remove malware for me?

No. TLDTrack detects and reports; it does not change your site. Our guide to monitoring a website after a hack covers what to switch on once it is clean.

Is there a free trial?

Yes. 7 days, and your card is not charged until day 8. Each site is checked as soon as you switch malware monitoring on, so you know where you stand before you decide whether to subscribe.
Mark Grice, founder of TLDTrack

Mark Grice, founder of TLDTrack. Runs FullyCoded, a Cornwall web agency, and built this to keep 500+ client sites in front of him every day.

What happens next

Catch it before they catch you

Do it yourself

Start your free trial

Switch malware monitoring on and each site is checked straight away, then twice a week.

Start your free trial

Talk it through

Arrange a call with Mark

If you would rather talk through how this works across every site you look after, we can go through it together.

Book a call

05 · Explore

Explore more of TLDTrack

All features overviewEvery check TLDTrack runs and what it costs.For agenciesManage every client domain in one dashboard.TLDTrack vs UptimeRobotHonest feature-by-feature comparison.Free email deliverabilityFree SPF / DKIM / DMARC checker, report by email.iOS & Android appsPush alerts when something breaks.