Skip to content
Check a domain

For restaurants, cafés and hospitality

Is your restaurant website secure?

Find out from your web address. You get a plain-English report on the site guests book and order from, with fixes you can forward.

For restaurants, cafés, bars, takeaways, guesthouses and small hotels.

Quick Scan

Areas checked
11
In good shape
2
Fixes in minutes
4 of 6
  1. Medium

    Keep the login cookie on HTTPS

    F2 · Confirmed · Minutes

    Evidence

    Observed
    Set-Cookie: PHPSESSID=…; path=/
    Expected
    Set-Cookie: PHPSESSID=…; path=/; Secure; HttpOnly; SameSite=Lax

    Fix

    1. Add the Secure and HttpOnly flags (and SameSite=Lax) to session cookies.
    2. In PHP: session.cookie_secure = 1 and session.cookie_httponly = 1.
  2. Low

    Add a DMARC record for your domain

    F3 · Confirmed · Minutes

    Evidence

    Observed
    _dmarc.example.com TXT (no record)
    Expected
    _dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

    Fix

    1. Publish a _dmarc TXT record.
    2. Start with v=DMARC1; p=none; rua=mailto:dmarc@your-domain to monitor, then move to p=quarantine.
  3. Medium

    Update an outdated component

    F1 · Likely · Hours

+ 5 more findings in the full report Open the sample report

What we check

What matters for your restaurant.Each one links to the check that covers it.

In plain words, with a fix you can forward.

  • Bookings on a secure connection

    Guests type names and phone numbers into your site. Check it loads over HTTPS with strong encryption.

    HTTPS and HSTS check

  • Booking and menu plugins up to date

    Booking, menu and ordering plugins need updates like any software. We spot old versions your site gives away.

    Outdated software check

  • Confirmations that are really from you

    SPF, DKIM and DMARC help stop others sending email to your guests in your name.

    Email security check

  • A site guests can open

    Check that Google doesn't list your site as unsafe, so guests who find you online reach your menu.

    Google blocklist status check

  • Browser protections switched on

    Security headers turn on extra protection for guests using your site, on phones and laptops alike.

    Security headers check
  • Everything a check covers

What you get

Know what to fix.Hand it to whoever can.

Open the sample report

  • A plain-English report

    What each finding means, how much it matters and how to fix it, with the evidence.

  • A PDF to forward

    Send it as it is to your web designer, host or IT support.

  • Re-check after the fixes

    Credits last 12 months, so you can see the fixes land.

Pricing

From $8 a check.No subscription.

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). Weekly checks for verified sites use 1 credit a week, and your card is never charged automatically.

See pricing

Quick Scan

Available

5 checks cover a month of weekly checks for $18. No subscription.

  • One credit checks one website
  • Credits last 12 months
  • No subscription, no auto-renewal
  • Credit back automatically if your scan can't run or half or fewer of its checks run. If your website blocks us but most checks ran, the website checks re-run free, once, within 30 days. How credits work

Your first check is free — on a website you've verified you own.

Check my website

Checkout by Stripe. We never see your card.

Prices before tax. Final total shown before you pay.

Powered by Stripe

Apple Pay Google Pay · Link · Visa · Mastercard · American Express

Where available for your device and country.

Questions

Short answers.

Something else? support@scandefend.com

Will it check my booking or ordering system?

It checks your website and domain: HTTPS, browser protections, software versions, email setup and reputation. It doesn't log in, fill in forms or place orders. If your bookings run on another company's system, that part is run by them.

Do I need to install anything or share a password?

No. Type your web address. A check reads what your website and domain already show the internet, so there is nothing to install and no login to hand over.

How much does it cost?

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). One credit checks one website, and credits last 12 months. Weekly checks for verified sites use 1 credit a week and wait when your credits run out. No subscription, and your card is never charged automatically.

What do I get?

A plain-English report: what each finding means, how much it matters, the evidence, and how to fix it. Download it as a PDF to forward to your web designer, host or IT support.

Other industries

Also useful: For small businesses Sample report Pricing

See what your website shows.Know what to fix first.

See pricing