From a website addressto a report you can act on.

What your website shows the internet: HTTPS and redirects, a full encryption (TLS) test, security headers, email security (SPF, DMARC, DKIM), outdated software and plugins, known vulnerabilities in what we find, cookie security, exposed keys in public code, DNS health and, for verified sites, exposed files. Light, read-only checks, from the outside.

What we found, how confident we are, what it means for your visitors, how to fix it and roughly how long that takes — plus the scope it covered.

Neither. A Quick Scan checks eligible public websites with no ownership-verification step and reads public information only, so you can start straight away on your own site or a client's, within the Acceptable Use Policy. Verifying a domain is optional. Site owners can opt out at any time.

Packs are $8 for 1 Quick Scan credit, $18 for 5 or $59 for 20, plus applicable tax. One credit checks one website. Credits are valid for 12 months. There's no subscription.

Only to keep the full report. Buy and run a check without one; a free account saves every finding, the evidence, and PDF and JSON downloads.

The credit comes back to your account automatically if your scan can't run because of something on our side, or if half or fewer of its checks run. If your website blocks us but most checks ran, you keep your results and get one free re-check of the website checks, once, within 30 days of the scan, with a verified email address, after you've allowed ScanDefend. Credit isn't returned for scans stopped under our Terms. The Refund and Credit Policy has the details. Every area in the report shows what it found, with a note on anything it couldn't see. At busy moments your scan starts automatically as soon as there's room, and we email you.

It depends on the site. You see real progress while it runs, and you can close the page: we email you when the report is ready if you ask.

It's a hand-written example in the exact format a real report uses, for example.com, an address reserved for documentation that belongs to no customer. Customers' reports stay private.

A report may show a Configuration health figure: a versioned formula over the checks that ran, with its weights and coverage shown, so you always know what it measures. It counts what our checks can see; it is not a guarantee.

Every report prints its scope. A Quick Scan stays on the public surface, and these sit outside it: pages beyond your homepage; logins, forms or anything behind a password; sensitive files on domains you have not verified; other services on your server, and your mail server itself.