A security scan shows where a site is vulnerable. That information should only be visible to those who manage the site. That’s why you verify a site once before scanning it. It takes three steps.
Step 1: Give consent
Tick three boxes. You manage the site or the owner gave you written permission. You’ll only use the results to make the site more secure. And you agree to the terms. Then click Agree.
Step 2: Show you manage the site
Pick the easiest option for you.
- Via Search Console. Handy if you already have access. Go to Settings, then Users and permissions. Add Snaglist’s address with restricted access. The address is on the page, with a Copy button next to it. Then start a crawl of the site.
- Via a file on the site. Click Create a key. You’ll get a filename and a line of text, both with a Copy button. That file must be placed in the root directory of the site. Can’t do it yourself? Click Send to your web developer. An email will open with everything already filled in. Once the file is in place, click Verify.
Step 3: Scan
If steps 1 and 2 are done, a Scan now button will appear. The scan takes about half a minute.
Good to know
- Snaglist checks every scan to see if the file or access is still there. If it’s gone—for example, because a client switches to another agency—verification expires. After thirty days, the results for that site disappear.
- For Security, Snaglist also asks for your access key: your fingerprint, face, device password, or password manager. This way, a stolen mailbox isn’t enough to see a site’s vulnerabilities.
- A security scan is included in every subscription, not in the trial.