# TrustedSite (Certified Secure) trustmark — setup steps
TrustedSite (formerly McAfee SECURE) gives a free, embeddable "Certified Secure"
trustmark after a daily malware/blocklist scan. The signup is an interactive
SaaS onboarding (email + account + ToS) that must be done by a human; everything
else is pre-staged here so finishing is ~2 minutes.
## What's already staged
1. **Trustmark mount point** in `site/src/components/TrustStrip.astro` — a
commented `` slot + an opt-in `trustedsite` prop.
2. **Verification-file location**: drop their `.html`/`.txt` verification file in
`site/public/` (served at the web root verbatim by Astro).
3. This doc.
## Steps for Justin
1. Go to https://www.trustedsite.com/ → "Get Started" (free Certified Secure
tier). Sign up with `security@performancewest.net` (or your preferred inbox).
2. Add site `performancewest.net`. Verify ownership — they offer either:
- **Meta tag**: copy the `` →
paste into `site/src/layouts/Base.astro` `` (next to the other
`` tags around line 33), **or**
- **File upload**: download their verification file → put it in
`site/public/` and redeploy. (Astro copies public/ to the web root.)
3. After they finish the first scan (usually <24h) they give a **trustmark
snippet** (a small `