Skip to content
Check a domain

For accountants and bookkeepers

Is your accounting firm's website and email secure?

Find out from your web address. You get a plain-English report on your website and email setup, with fixes you can forward.

For accountants, bookkeepers, tax advisers and payroll services.

Quick Scan

Areas checked
11
In good shape
2
Fixes in minutes
4 of 6
  1. Medium

    Keep the login cookie on HTTPS

    F2 · Confirmed · Minutes

    Evidence

    Observed
    Set-Cookie: PHPSESSID=…; path=/
    Expected
    Set-Cookie: PHPSESSID=…; path=/; Secure; HttpOnly; SameSite=Lax

    Fix

    1. Add the Secure and HttpOnly flags (and SameSite=Lax) to session cookies.
    2. In PHP: session.cookie_secure = 1 and session.cookie_httponly = 1.
  2. Low

    Add a DMARC record for your domain

    F3 · Confirmed · Minutes

    Evidence

    Observed
    _dmarc.example.com TXT (no record)
    Expected
    _dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

    Fix

    1. Publish a _dmarc TXT record.
    2. Start with v=DMARC1; p=none; rua=mailto:dmarc@your-domain to monitor, then move to p=quarantine.
  3. Medium

    Update an outdated component

    F1 · Likely · Hours

+ 5 more findings in the full report Open the sample report

What we check

What matters for your firm.Each one links to the check that covers it.

In plain words, with a fix you can forward.

  • Invoices only your firm can send

    Clients expect invoices and reminders by email. SPF, DKIM and DMARC help stop others sending email as your firm.

    Email security check

  • A secure start to your client portal

    Clients often reach their portal from your website. Check the site uses HTTPS with strong encryption.

    HTTPS and HSTS check

  • Website software kept current

    We spot old software and plugin versions your site gives away, and any published issues in them.

    Outdated software check

  • No settings files or backups online

    Once you verify your domain, we also check for files that shouldn't be public.

    Exposed files check

  • A clean reputation

    Check that Google doesn't list your site as unsafe, so clients can reach you.

    Google blocklist status check
  • Everything a check covers

What you get

Know what to fix.Hand it to whoever can.

Open the sample report

  • A plain-English report

    What each finding means, how much it matters and how to fix it, with the evidence.

  • A PDF to forward

    Send it as it is to your web designer, host or IT support.

  • Re-check after the fixes

    Credits last 12 months, so you can see the fixes land.

Pricing

From $8 a check.No subscription.

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). Weekly checks for verified sites use 1 credit a week, and your card is never charged automatically.

See pricing

Quick Scan

Available

5 checks cover a month of weekly checks for $18. No subscription.

  • One credit checks one website
  • Credits last 12 months
  • No subscription, no auto-renewal
  • Credit back automatically if your scan can't run or half or fewer of its checks run. If your website blocks us but most checks ran, the website checks re-run free, once, within 30 days. How credits work

Your first check is free — on a website you've verified you own.

Check my website

Checkout by Stripe. We never see your card.

Prices before tax. Final total shown before you pay.

Powered by Stripe

Apple Pay Google Pay · Link · Visa · Mastercard · American Express

Where available for your device and country.

Questions

Short answers.

Something else? support@scandefend.com

Can it stop phishing emails that use my firm's name?

No tool can stop every phishing email. The check shows whether your domain has SPF and DMARC set up, and the DKIM keys we can find, which helps receiving mail servers spot and handle email that fakes your address.

Do I need to install anything or share a password?

No. Type your web address. A check reads what your website and domain already show the internet, so there is nothing to install and no login to hand over.

How much does it cost?

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). One credit checks one website, and credits last 12 months. Weekly checks for verified sites use 1 credit a week and wait when your credits run out. No subscription, and your card is never charged automatically.

What do I get?

A plain-English report: what each finding means, how much it matters, the evidence, and how to fix it. Download it as a PDF to forward to your web designer, host or IT support.

Other industries

Also useful: For small businesses Sample report Pricing

See what your website shows.Know what to fix first.

See pricing