Skip to content

For trades and local services

Is your trade business website secure?

Find out from your web address. You get a plain-English report of what to fix, ready to forward to whoever built your site.

For plumbers, electricians, builders, roofers, cleaners and other local services.

Quick Scan

Areas checked
11
In good shape
2
Fixes in minutes
4 of 6
  1. Medium

    Keep the login cookie on HTTPS

    F2 · Confirmed · Minutes

    Evidence

    Observed
    Set-Cookie: PHPSESSID=…; path=/
    Expected
    Set-Cookie: PHPSESSID=…; path=/; Secure; HttpOnly; SameSite=Lax

    Fix

    1. Add the Secure and HttpOnly flags (and SameSite=Lax) to session cookies.
    2. In PHP: session.cookie_secure = 1 and session.cookie_httponly = 1.
  2. Low

    Add a DMARC record for your domain

    F3 · Confirmed · Minutes

    Evidence

    Observed
    _dmarc.example.com TXT (no record)
    Expected
    _dmarc.example.com TXT "v=DMARC1; p=none; rua=mailto:dmarc@example.com"

    Fix

    1. Publish a _dmarc TXT record.
    2. Start with v=DMARC1; p=none; rua=mailto:dmarc@your-domain to monitor, then move to p=quarantine.
  3. Medium

    Update an outdated component

    F1 · Likely · Hours

+ 5 more findings in the full report Open the sample report

What we check

What matters for your business.Each one links to the check that covers it.

In plain words, with a fix you can forward.

  • A secure connection for every visitor

    Your site should load over HTTPS with a valid certificate, so customers feel safe sending a quote request.

    HTTPS and HSTS check
  • Quotes and invoices only you can send

    SPF, DKIM and DMARC help stop others sending email that looks like it came from your business.

    Email security check
  • Website software kept current

    We spot old software and plugin versions your site gives away, so whoever runs it knows what to update.

    Outdated software check
  • A clean reputation

    Check that Google doesn't list your site as unsafe, so people searching for you can reach you.

    Google blocklist status check
  • Browser protections switched on

    Security headers turn on extra protection in your visitors' browsers. A settings change for your host or web designer.

    Security headers check
  • Everything a check covers

What you get

Know what to fix.Hand it to whoever can.

Open the sample report
  • A plain-English report

    What each finding means, how much it matters and how to fix it, with the evidence.

  • A PDF to forward

    Send it as it is to your web designer, host or IT support.

  • Re-check after the fixes

    Credits last 12 months, so you can see the fixes land.

Pricing

From $8 a check.No subscription.

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). Weekly checks for verified sites use 1 credit a week, and your card is never charged automatically.

See pricing

Quick Scan

Available

5 checks cover a month of weekly checks for $18. No subscription.

  • One credit checks one website
  • Credits last 12 months
  • No subscription, no auto-renewal
  • Credit back automatically if your scan can't run or half or fewer of its checks run. If your website blocks us but most checks ran, the website checks re-run free, once, within 30 days. How credits work

Your first check is free — on a website you've verified you own.

Check my website

Checkout by Stripe. We never see your card.

Prices before tax. Final total shown before you pay.

Powered by Stripe

Apple Pay Google Pay · Link · Visa · Mastercard · American Express

Where available for your device and country.

Questions

Short answers.

Something else? support@scandefend.com

I don't know who built my website. Can I still check it?

Yes. All you need is the web address. The report is in plain English, so you can forward it to whoever looks after the site, or to a new web designer.

Do I need to install anything or share a password?

No. Type your web address. A check reads what your website and domain already show the internet, so there is nothing to install and no login to hand over.

How much does it cost?

$8 for 1 check, $18 for 5, $59 for 20 (+ applicable tax). One credit checks one website, and credits last 12 months. Weekly checks for verified sites use 1 credit a week and wait when your credits run out. No subscription, and your card is never charged automatically.

What do I get?

A plain-English report: what each finding means, how much it matters, the evidence, and how to fix it. Download it as a PDF to forward to your web designer, host or IT support.

See what your website shows.Know what to fix first.

See pricing