Website and email security guides for small businesses
Plain-English, step-by-step fixes for the things our free scan checks: email spoofing, DMARC, HTTPS, security headers and more. Every guide links to the standards and official documentation it's based on.
-
How to set up DMARC, step by step
The safe order: SPF and DKIM first, then a monitoring-only DMARC record, then enforcement. Copy-paste records and where to add them at Cloudflare, GoDaddy, Namecheap, Squarespace, Wix and Porkbun.
-
Someone is sending email from your domain: what to do right now
Spoofed or hacked? How to tell the difference, lock down a hacked mailbox, check and fix SPF, DKIM and DMARC, warn customers and report it.
-
Small business website security checklist
Eight essentials, from HTTPS and security headers to MFA on your domain account and tested backups, with what our free scan checks, what you need to check yourself, and a quarterly routine.
Free security check
See how your site scores, free, in about a minute
We check email spoofing (SPF and DMARC), HTTPS and your certificate, security headers, exposed files, DNS and outdated software. The A–F grade is free; the full report with every fix is a one-time $7.
Passive and read-only. Only scan a domain you own or are authorized to check. Informational, not a guarantee: our scan and guides point out common gaps, not every risk.