Skip to content
Check a domain

For small online shops

Is your online shop secure?

Find out from your web address. You get a plain-English report on the shop your customers buy from, with fixes you can forward.

For WooCommerce and other small online shops.

Quick Scan

Areas checked
11
In good shape
2
Fixes in minutes
4 of 6
  1. Medium

    Keep the login cookie on HTTPS

    F2 · Confirmed · Minutes

    Evidence

    Observed
    Set-Cookie: PHPSESSID=…; path=/
    Expected
    Set-Cookie: PHPSESSID=…; path=/; Secure; HttpOnly; SameSite=Lax

    Fix

    1. Add the Secure and HttpOnly flags (and SameSite=Lax) to session cookies.
    2. In PHP: session.cookie_secure = 1 and session.cookie_httponly = 1.
  2. Low

    Add a DMARC record for your domain

    F3 · Confirmed · Minutes

    Evidence

    Observed
    _dmarc.example.com TXT (no record)
    Expected
    _dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

    Fix

    1. Publish a _dmarc TXT record.
    2. Start with v=DMARC1; p=none; rua=mailto:dmarc@your-domain to monitor, then move to p=quarantine.
  3. Medium

    Update an outdated component

    F1 · Likely · Hours

+ 5 more findings in the full report Open the sample report

What we check

What matters for your shop.Each one links to the check that covers it.

In plain words, with a fix you can forward.

  • A secure connection from the first page

    Your shop should load over HTTPS with strong encryption, so shoppers see a secure connection everywhere.

    HTTPS and HSTS check

  • Shop plugins and themes up to date

    Online shops often run on plugins. We spot old versions your site gives away, and any published issues in them.

    Outdated software check

  • Cookies set safely

    We check the cookies your homepage sets for Secure, HttpOnly and SameSite.

    Cookie security check

  • Order emails only you can send

    SPF, DKIM and DMARC help stop others sending order or delivery emails in your name.

    Email security check

  • A shop that isn't flagged

    Check that Google doesn't list your shop as unsafe, so shoppers can reach it.

    Google blocklist status check
  • Everything a check covers

What you get

Know what to fix.Hand it to whoever can.

Open the sample report

  • A plain-English report

    What each finding means, how much it matters and how to fix it, with the evidence.

  • A PDF to forward

    Send it as it is to your web designer, host or IT support.

  • Re-check after the fixes

    Credits last 12 months, so you can see the fixes land.

Pricing

From $8 a check.No subscription.

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). Weekly checks for verified sites use 1 credit a week, and your card is never charged automatically.

See pricing

Quick Scan

Available

5 checks cover a month of weekly checks for $18. No subscription.

  • One credit checks one website
  • Credits last 12 months
  • No subscription, no auto-renewal
  • Credit back automatically if your scan can't run or half or fewer of its checks run. If your website blocks us but most checks ran, the website checks re-run free, once, within 30 days. How credits work

Your first check is free — on a website you've verified you own.

Check my shop

Checkout by Stripe. We never see your card.

Prices before tax. Final total shown before you pay.

Powered by Stripe

Apple Pay Google Pay · Link · Visa · Mastercard · American Express

Where available for your device and country.

Questions

Short answers.

Something else? support@scandefend.com

Do you check my checkout or card payments?

A check reads your shop and domain from the outside. It doesn't log in, place orders or test payment pages. If a payment provider takes the card details, that part is run by them.

Do I need to install anything or share a password?

No. Type your web address. A check reads what your website and domain already show the internet, so there is nothing to install and no login to hand over.

How much does it cost?

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). One credit checks one website, and credits last 12 months. Weekly checks for verified sites use 1 credit a week and wait when your credits run out. No subscription, and your card is never charged automatically.

What do I get?

A plain-English report: what each finding means, how much it matters, the evidence, and how to fix it. Download it as a PDF to forward to your web designer, host or IT support.

Other industries

Also useful: For small businesses Sample report Pricing

See what your website shows.Know what to fix first.

See pricing