Could thieves steal from your website?
It looks great on top. Check what's underneath, before they do.
- Out-of-date software with known holes
- Secret keys anyone visiting can read
- Browsers aren't asked to protect your visitors
- Strangers can send emails pretending to be you
- The connection to your website isn't always private
- 1Type your website
- 2We check it
- 3See what to fix
- First check free*
- From $8
- Or $6/month to keep watching
Checks eligible public websites, including ones built on, emailed through or served behind:
-
WordPress - Shopify
- Wix
- Squarespace
- Webflow
- Google Workspace
- Microsoft 365
- Cloudflare
- Let's Encrypt™
Nothing to install, nothing to grant: a check reads what a site already shows the internet. Names belong to their owners; ScanDefend is not affiliated with or endorsed by any of them.
See what's hiding, in plain English
Your free website security check shows how many problems there are. Unlock the report to see every one.
- See it all Every problem, most serious first.
- Plain English What it means and what to do.
- Unlock once One payment opens the whole report.
Send it to whoever looks after your website
You don't need to fix anything yourself. Forward the brief and they'll know exactly what to do.
- A brief for your developer What to change, step by step, in their language.
- Send it on Download it and forward it. Nothing to explain.
- Then check again, free Within 30 days of a full check you buy or unlock.
Simple prices.Start free.
-
First check
Free*
Any website. Low-risk findings in full, and how many serious ones.
-
One full check
$8
Everything we find, a brief for your developer and a free re-check.
-
Watch
$6/month
We check a website you've shown is yours every month and email you when we find new or fixed issues. Cancel any time.
* Serious findings unlock with a one-time payment. Several websites? Packs cost less per check. Prices + applicable tax.
What thieves look for first.We check for all of it.
-
Fake emails in your name
Sent by strangers, to your customers.
-
Out-of-date software
Known holes thieves try first.
-
Secret keys in your code
Secret keys anyone visiting can read.
-
A connection that isn't private
Visitors' details, not fully protected.
Try a free tool now.No account needed.
- Can strangers send emails as you? Email faking check
- Does your site ask browsers to protect visitors? Browser protection check
- Is your website on an old PHP version? PHP2Shell check
- Is Google warning people about your site? Google warning check
- Who is allowed to send your email? Email sender check
- Where does your email go? Email delivery check
Exploited this month
One short email a month: the website flaws attackers are using right now, and the plain-English fix.
Check your inbox to confirm. If this address can be signed up, we'll email a confirmation link that works for 48 hours. Open it and press the confirm button, and you're all set.
Questions.
Something else? support@scandefend.com
Do I need to be technical?
No. You type your website address and we tell you what we found in plain English. Anything technical goes in a brief you can send to your developer.
Will it slow down or break my website?
It's built to stay light: we look at your website the way a visitor would, with a small number of polite, read-only requests. Nothing to install.
What does 'First check free*' mean?
Your first check is free with a new account. You see every low-risk finding in full and how many serious ones there are. The serious ones open with a one-time payment.
Can I cancel Watch?
Yes, online any time. Cancel in the first 14 days and you get your first payment back; after that it runs to the end of the month you've paid for. Watch is for a website you've shown is yours (free, and it takes a few minutes).
From the blog
Latest articles.Plain-English security guides.
Is your Magento store on a patched version? How to check this week
Find your Magento version, compare it with Adobe's bulletin and learn what to do if your store is behind on its…
The agency guide to client website security hygiene
A monthly checklist for agencies to keep client websites on HTTPS, send browser protections and report clearly to…
Why does Chrome warn that my site is dangerous, and how do I get the warning removed?
Find out which service flagged your site, what the reason is, and how to start getting a dangerous site warning removed.
Could thieves steal from your website?
Find out free, in minutes.