Using Security Status Checks

The Security Status card shows whether your monitored websites have been flagged for malware, phishing, or other security threats.

What is Security Status?

WebMon integrates with VirusTotal and Google Safe Browsing to scan your websites for:

• Malware and viruses
• Phishing attempts
• Malicious redirects
• Suspicious content
• Known threat signatures

Setting Up Security Checks

Before you can use security status checks, you need to configure your API keys:

Step 1: Get Your API Keys

For VirusTotal (free):

1. Sign up at virustotal.com
2. Go to your profile settings
3. Copy your API key

Free tier: 4 requests/minute, 500/day

For Google Safe Browsing:

1. Go to Google Cloud Console
2. Create or select a project
3. Enable the "Safe Browsing API"
4. Create an API key

Free tier: 10,000 requests/day

Step 2: Add Keys to WebMon

1. Go to your Dashboard
2. Click "Security API Settings"
3. Enter your VirusTotal API key
4. Enter your Google Safe Browsing API key
5. Save settings

Step 3: Enable on Monitors

1. Edit any monitor
2. Find "Security Checks" section
3. Enable VirusTotal and/or Safe Browsing
4. Save the monitor

If No API Keys Configured

The Security Status card will show guidance to help you set up:

• Link to API Settings page
• Instructions for obtaining keys
• Benefits of enabling security checks

Understanding Results

Safe (Green)

No threats detected by either service. Your site passed all security checks.

Suspicious (Yellow)

Minor concerns flagged. May be false positives but worth investigating.

Malicious (Red)

Active threats detected. Investigate immediately and take action.

Running Manual Checks

1. Go to your monitor's detail page
2. Find the Security Status card
3. Click "Check Now"
4. View the results

Security Alerts

When threats are detected, you'll receive:

• Email notification with threat details
• Status change in your dashboard
• Recommended actions to take

Common False Positives

Sometimes legitimate sites get flagged:

• Recently changed hosting providers
• Shared hosting with other flagged sites
• New domains without reputation
• Aggressive advertising scripts

If you believe it's a false positive, you can submit your site for review on VirusTotal or Google Search Console.