SEO checks / Security
Security checks
12 checks covering HTTPS, mixed content, and security-header gaps. Every one runs on every crawl, with the evidence it was raised on.
Content-Security-Policy is report-only
security_csp_report_onlyInfoDeveloper fixhttp serves the page instead of redirecting to httpshost_no_https_redirectHighDeveloper fixMissing Content-Security-Policy headersecurity_no_cspLowDeveloper fixMissing HSTS headersecurity_no_hstsMediumAuto-fixableMissing Permissions-Policy headersecurity_no_permissions_policyInfoAuto-fixableMissing Referrer-Policy headersecurity_no_referrer_policyLowAuto-fixableMissing X-Content-Type-Options headersecurity_no_xctoLowAuto-fixableMissing X-Frame-Options headersecurity_no_xframeLowAuto-fixableMixed content on an HTTPS pagemixed_contentVariesDeveloper fixPage not served over HTTPSsecurity_no_httpsCriticalDeveloper fixRedirect downgrades HTTPS to HTTPredirect_https_downgradeCriticalDeveloper fixThe site is not reachable over httpshost_https_unavailableCriticalDeveloper fixRun every security check on your site
Free for 500 URLs. Issues ranked by estimated impact, fixable ones opened as pull requests.