Skip to content
Check a domain

For clinics and practices

Is your clinic website secure?

Find out from your web address. You get a plain-English report on the site patients contact and book through, with fixes you can forward.

For dental, physio, GP, optician, vet and therapy practices.

Quick Scan

Areas checked
11
In good shape
2
Fixes in minutes
4 of 6
  1. Medium

    Keep the login cookie on HTTPS

    F2 · Confirmed · Minutes

    Evidence

    Observed
    Set-Cookie: PHPSESSID=…; path=/
    Expected
    Set-Cookie: PHPSESSID=…; path=/; Secure; HttpOnly; SameSite=Lax

    Fix

    1. Add the Secure and HttpOnly flags (and SameSite=Lax) to session cookies.
    2. In PHP: session.cookie_secure = 1 and session.cookie_httponly = 1.
  2. Low

    Add a DMARC record for your domain

    F3 · Confirmed · Minutes

    Evidence

    Observed
    _dmarc.example.com TXT (no record)
    Expected
    _dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

    Fix

    1. Publish a _dmarc TXT record.
    2. Start with v=DMARC1; p=none; rua=mailto:dmarc@your-domain to monitor, then move to p=quarantine.
  3. Medium

    Update an outdated component

    F1 · Likely · Hours

+ 5 more findings in the full report Open the sample report

What we check

What matters for your practice.Each one links to the check that covers it.

In plain words, with a fix you can forward.

  • Patient forms on a strong connection

    Contact and booking pages carry personal details. Check your site uses HTTPS with up-to-date encryption.

    HTTPS and HSTS check

  • Appointment emails patients can trust

    SPF, DKIM and DMARC help stop others sending email that pretends to come from your practice.

    Email security check

  • Website software kept current

    We spot old software and plugin versions your site gives away, and any published issues in them.

    Outdated software check

  • Cookies set safely

    We check the cookies your homepage sets for Secure, HttpOnly and SameSite.

    Cookie security check

  • No settings files or backups online

    Once you verify your domain, we also check for files that shouldn't be public.

    Exposed files check
  • Everything a check covers

What you get

Know what to fix.Hand it to whoever can.

Open the sample report

  • A plain-English report

    What each finding means, how much it matters and how to fix it, with the evidence.

  • A PDF to forward

    Send it as it is to your web designer, host or IT support.

  • Re-check after the fixes

    Credits last 12 months, so you can see the fixes land.

Pricing

From $8 a check.No subscription.

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). Weekly checks for verified sites use 1 credit a week, and your card is never charged automatically.

See pricing

Quick Scan

Available

5 checks cover a month of weekly checks for $18. No subscription.

  • One credit checks one website
  • Credits last 12 months
  • No subscription, no auto-renewal
  • Credit back automatically if your scan can't run or half or fewer of its checks run. If your website blocks us but most checks ran, the website checks re-run free, once, within 30 days. How credits work

Your first check is free — on a website you've verified you own.

Check my website

Checkout by Stripe. We never see your card.

Prices before tax. Final total shown before you pay.

Powered by Stripe

Apple Pay Google Pay · Link · Visa · Mastercard · American Express

Where available for your device and country.

Questions

Short answers.

Something else? support@scandefend.com

Does this make my practice compliant?

No single check can do that. ScanDefend helps you check what your website and domain show the internet, with fixes to pass to whoever runs your site. Your practice and its advisers stay in charge of compliance.

Do I need to install anything or share a password?

No. Type your web address. A check reads what your website and domain already show the internet, so there is nothing to install and no login to hand over.

How much does it cost?

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). One credit checks one website, and credits last 12 months. Weekly checks for verified sites use 1 credit a week and wait when your credits run out. No subscription, and your card is never charged automatically.

What do I get?

A plain-English report: what each finding means, how much it matters, the evidence, and how to fix it. Download it as a PDF to forward to your web designer, host or IT support.

Other industries

Also useful: For small businesses Sample report Pricing

See what your website shows.Know what to fix first.

See pricing