HTTPS Check
Confirm the audited page reaches a final URL over an encrypted HTTPS connection.
Check your websiteWhy this check matters
HTTPS protects content, credentials, and session data in transit. It is also a baseline browser trust and modern search requirement.
Passing evidence
Final URL: https://example.com/accountCommon failing evidence
Final URL: http://example.com/accountPossible false positives
- Development environments commonly use localhost HTTP.
- A reverse proxy can terminate HTTPS before forwarding internally over a private network.
How to fix it safely
- Provision a valid certificate for every public hostname.
- Redirect public HTTP requests directly to HTTPS.
- Update canonical URLs and internal links to use HTTPS.
How to verify the fix
- Open the HTTP URL and confirm its final destination is HTTPS.
- Check certificate validity and ensure there is no redirect loop.
Related Security checks
Run the complete audit
Check this signal together with the related category evidence on the current public page.
Open the security audit tool
