Step-by-step security fix guides

Finding a problem is only useful if you know how to fix it. Each guide here takes one scanner finding and walks you through the fix, with the exact values to copy.

Most take a few minutes. None require you to install anything on your website.

How do fix guides connect to my scan results?

When you run the free website security scan, every check gets a status. Items marked "Needs attention" are the ones to fix first. Items marked "Worth improving," "Partially configured" or "Monitoring only" are working but could be stronger.

Each of those findings links to a short fix inside your report. The guides in this section are the full public versions of those fixes. For example, if your report says your email impersonation protection is missing or set to monitoring only, the guide for DMARC policy not enabled explains what that means and how to move forward. You can see how findings and fixes line up in our example report.

What does each fix guide include?

Every guide follows the same pattern, so you always know where to look:

• A sentence or two explains what the finding means and why it matters.
• A rough time estimate helps you decide whether to do it now or later.
• Numbered steps include tabs for common providers like GoDaddy, Cloudflare, Google Workspace and Microsoft 365.
• The exact record or setting is filled in, with yourbusiness.com as an example.
• A final check shows how to confirm it worked, usually with one of our free checkers.

Some providers get their own walkthrough. Our GoDaddy DMARC guide goes screen by screen.

Which fixes should I do first?

Start with anything that affects visitors or customers directly. An expired certificate or missing HTTPS shows a browser warning, so follow what to do when an SSL certificate expires first. Missing email authentication lets scammers impersonate you, so stopping email spoofing comes next.

After that, work through items like security headers and DMARC policy upgrades. Your report sorts findings with the most important and quickest wins near the top.

What if a fix doesn't work?

First, give it time. DNS changes can take a few hours to appear everywhere. Then re-check with the matching tool, like the free DMARC checker, to see exactly what's published now.

If it still looks wrong, check for common slips: a record added to the wrong name, a second copy of a record that should be unique, or a typo in a value. See what we check for how each test works. Hands-on Guided Help is opening soon on our pricing page for businesses that want someone to walk through fixes with them.