Attackers stopped making noise.
In 2025, they got in quietly, left fewer traces, and stayed.
SiteLock's analysis of 20 million monitored websites shows backdoors now sit on 7 in 10 infected sites — up 43% in a year. This is what a compromise looks like when nobody notices.
WHAT THE 2025 DATA SHOWS
Six numbers that define the year
Volume fell. Persistence rose. Every figure below is drawn from SiteLock's own scanning network — the full method sits at the end of this section.
THE 2025 SHIFT
Volume down, persistence up
Attackers traded volume for staying power. Fewer infections per site, reaching far more sites, with defacement no longer the objective. What they want is a durable foothold that can be resold, reused and returned to.
WHO IT'S FOR
Built for the people keeping websites safe
WHAT YOU CAN DO WITH IT
Three things to act on this quarter
WHY TRUST THIS DATA
Eighteen years of website telemetry
18 | 20M+ | 99.9% |
Years of website security research. Trusted by businesses and hosting partners worldwide. | Websites monitored in real time. Telemetry collected at network scale, not from a sample survey. | Malware detection rate. Measured across every major CMS platform. |
FAQs
What is the SiteLock annual security report?
An annual analysis of real website compromise, built from SiteLock's own scanning network. The 2025 edition tracks a specific shift: infections got quieter and smaller while backdoor persistence rose sharply.
How does the data come from?
SiteLock analyzes more than 20 million websites, scanning over 32 billion files every month — across files, databases, webpages and vulnerabilities — to track and mitigate cyber threats. No customer site is identified, and figures are aggregated network-wide.
What types of threats does the report cover?
The report includes insights on malware, phishing, DDoS attacks, website vulnerabilities, and AI-driven cyber threats.
How can SiteLock help me secure my website?
We offer automated malware removal, real-time threat detection, and security solutions designed for SMBs and hosting providers.
Get started with SiteLock today
SiteLock quickly removes threats, restores functionality, and helps prevent future attacks, all backed by continuous monitoring and support.
