Domain Security Scanner
Theme
Light Dark System
Sign in Start free
Features Free tools Checks Sample report Pricing
Sign in
Web security

Site is served over HTTPS

Security headers, HTTPS enforcement, cookies and cross-origin rules of the website.

Why it matters

Every password, cookie and form entry crosses the internet unencrypted. Browsers mark the site 'Not secure', which costs trust and conversions, and search engines rank it lower.

How to fix it

Moderate · a few hours
  1. Get a free certificate from Let's Encrypt (most hosting panels have a one-click option).
  2. Configure the web server to serve the site on port 443.
  3. Redirect all HTTP traffic to HTTPS and then enable HSTS.
certbot (nginx)
sudo apt install certbot python3-certbot-nginx
sudo certbot --nginx -d example.com -d www.example.com --redirect
Test this now, free: Security headers checker - no sign-up.

How we test it

The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.

Does your domain pass this check?

Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.

Scan your domain free