Skip to content
Check a domain

For small businesses

Someone else built your website.Find out what it tells the world.

No jargon. What's worth fixing, how much it matters, and who to tell.

What you get

Know what to fix.Hand it to whoever can.

Nothing to install and no passwords to hand over.

  • See what your site shows

    Email setup, software versions, HTTPS and headers, read from the outside.

  • Know what matters first

    Findings ranked by severity, each with a rough effort to fix.

  • Forward it as it is

    Plain-English fixes your web designer or host can act on.

What it finds

Five things we check.Each with a fix you can forward.

Now you'll know, in plain words.

  • Email only you can send

    SPF and DMARC help receiving servers spot and handle mail that fakes your domain.

    Email spoofing check

  • Software kept current

    We spot versions your homepage shares, like "PHP 7.4", so you can update them.

    Outdated software check

  • Browser protections on

    Security headers switch on extra browser protections for your visitors.

    Security headers check

  • A clean reputation

    We check whether Google lists your site as unsafe.

    Google blocklist check

  • A way to report a problem

    A published contact, so anyone who spots a flaw can tell you.

    Security contact check

  • What a check covers

Real format

Two findings, as you'd read them.Paste them into an email as they are.

In the sample report, 4 of the 6 fixes take minutes, 1 takes hours and 1 takes days.

F3 · dns-email-auth

Add a DMARC record for your domain

Low Confirmed Minutes

What it means
A DMARC record tells receiving mail servers what to do with email that claims to come from your domain, so they can turn away mail that only pretends to be you.
Evidence
_dmarc.example.com  TXT  (no record)
Expected
_dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"
Fix
Publish a _dmarc TXT record. Start with v=DMARC1; p=none; rua=mailto:dmarc@your-domain to monitor, then move to p=quarantine.

F1 · technology-fingerprint

Update an outdated component

Medium Likely Hours

What it means
Your homepage announces PHP 7.4. Moving to a supported version brings back regular security updates and closes the issues public vulnerability data lists for 7.4.
Evidence
X-Powered-By: PHP/7.4.3
PHP 7.4 — end of life 2022-11-28
Expected
A supported PHP 8 release (8.3 or later), version not announced (expose_php = Off)
Fix
Ask your host to move the site to a supported PHP version (8.x). Then stop advertising the version at all: set expose_php = Off.

Pricing

From $8 a website.Re-check after the fixes.

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). Credits last 12 months, so you can re-check after the fixes.

See pricing

Quick Scan

Available

5 checks cover a month of weekly checks for $18. No subscription.

  • One credit checks one website
  • Credits last 12 months
  • No subscription, no auto-renewal
  • Credit back automatically if your scan can't run or half or fewer of its checks run. If your website blocks us but most checks ran, the website checks re-run free, once, within 30 days. How credits work

Your first check is free — on a website you've verified you own.

Check my website

Checkout by Stripe. We never see your card.

Prices before tax. Final total shown before you pay.

Powered by Stripe

Apple Pay Google Pay · Link · Visa · Mastercard · American Express

Where available for your device and country.

By industry

Pages for your kind of business.The same check, in your words.

Questions

What people ask first.

Something else? support@scandefend.com

What will the report tell me?

What we found, how much it matters, what to do about it, and exactly what was in scope.

Is it safe for my site?

It's built to stay light: a small number of polite, read-only requests. It reads your public homepage and the files it links to, a few standard public files like robots.txt and security.txt, and your public DNS records.

What if a finding needs explaining?

Each one has a plain "what it means" line and a fix you can forward. Still unclear? support@scandefend.com is read by a person.

Do I need an account?

Pay, run the scan and read the preview straight away. A free account keeps the full report.

Keep exploring

Also useful: Small business scanner Sample report Pricing

See what your website shows.Know what to fix first.

See pricing