What the Security Status in Your Monthly Report Means
Table of contents
Your monthly report includes a security status so you can quickly see whether the website showed any signs of a problem during the reporting period.
In most healthy reports, the security status is meant to reassure you. It confirms that scans ran, protection stayed active, and no urgent issue needs your attention.
If you are reviewing the full monthly report for the first time, start with How to Read Your Monthly Website Care Report. This article goes deeper into the security section only.
Start With the Plain-English Status
The first thing to look at is the status message near the top of the report. If it says your website is healthy and no urgent action is needed, the security numbers below are mostly there for transparency.
That means you do not need to investigate every blocked request, bot category, or scan count. We include those details so you can see that monitoring is happening in the background.
What “Clean” Means
When the report says the site is clean, it means the security scan did not find malware or suspicious changes that require action.
Clean does not mean the internet is quiet or that no one has tried to access the site. It means the checks we reviewed did not show an active compromise.
What “Scanned” Means
The Scanned box shows how many files or database rows were reviewed by the security system. A larger number is not automatically bad.
For most clients, the takeaway is simple: the site was checked. If a scan finds something concerning, the report should call that out clearly instead of leaving you to interpret the scan count yourself.
What “Bad Traffic” Means
Bad traffic refers to unwanted requests that were filtered before they could interact with the website normally.
Examples can include spam bots, repeated login attempts, vulnerability scans, or other automated activity. This is common for public websites. Seeing blocked traffic usually means protection is working, not that the website was hacked.
What the Firewall Log Shows
The Firewall Log shows security filtering activity over the reporting period. It may include both regular traffic and requests that were challenged, filtered, or blocked.
These numbers can look large because automated traffic happens constantly across the web. We look for unusual patterns, not just a high number by itself.
What Bot Protection Shows
Bot Protection separates automated activity into categories, such as helpful bots, unknown bots, and unwanted bots.
Not every bot is bad. Google uses bots to discover and index pages for search. The goal is to allow useful bots while filtering suspicious ones.
When You Should Contact Us
Contact our team if the report says action is needed, if the site is behaving strangely, or if you notice real-world symptoms such as spam spikes, suspicious redirects, unexpected admin users, or visitors reporting security warnings.
If the report says scans are clean and no urgent action is needed, there is usually nothing you need to do.
Frequently Asked Questions
Does a high number of blocked traffic mean my website was hacked?
No. Blocked traffic means requests were stopped. A hacked website usually has other signs, such as malware, strange redirects, unauthorized users, or visible changes you did not make.
Should I worry about bot activity?
Usually not. Bots are normal on public websites. The important question is whether unwanted bots were filtered and whether security scans were clean.
Why does the report show technical security details?
We include them for transparency. You do not need to understand every row. The main takeaway is whether the website stayed clean, protected, and available.
What should I do if I am unsure?
Reply to your report email with the section or metric you are asking about. We can explain whether it is informational or something that needs attention.
