Client portal for agencies
Give clients a read-only, branded view of only their own websites, with an optional monthly report email.
Agencies can invite their clients to a read-only portal. A client signs in with their own Webforta login and sees only the websites you share with them: security status, uptime, scans and findings, incidents and reports. Client logins are included in Pro (up to 5) and Business (up to 50) and do not use team seats.
Invite a client
- Go to Team > Clients, enter the client's email address and tick the websites they may see. At least one website is required.
- Share the invitation link (it is also emailed and expires after 7 days). The client registers or signs in with that address, verifies it and accepts.
- To change which websites a client sees, open the client's website list on the Team page, tick or untick websites and save. Changes apply on the client's next page load.
- Removing a client ends their access immediately. Their own login is not deleted.
What a client can and cannot do
Clients can view the overview, the website pages (overview, scans, monitoring, DNS and headers), scan results, incidents and reports made up only of their websites, and download scan PDFs and report exports when your plan includes downloads. They cannot change settings, start scans, triage findings, or open the team, billing, API key, integration, Shield, WordPress, alert or audit pages, and other websites in your organization do not exist for them. These rules are enforced on the server for every request, not only by hiding links.
Your branding
When your plan includes branding (Team > Branding), the portal shows your brand name, logo and accent colour instead of Webforta's. On Business with "Hide Powered by Webforta" switched on, the portal does not show the Webforta credit either.
Monthly report email
Off by default. Turn it on per client on the Team page (or when inviting). Once a month each opted-in client receives one short email with a link to sign in and view or download the report for the previous month. There is no attachment and no per-site email. Every email has an unsubscribe link; a client who unsubscribes can still view reports by signing in.