Matan · Security · Transport
HTTPS (transport) (Security)
All user traffic should be encrypted. This is the Security-pillar twin of the SEO HTTPS check.
Pass condition in our engine: The fetched URL uses https:.
This Security check is part of SEO-GEO scoring 2.2.1, last updated 2026-09-18. About 90 percent of the evaluation runs on the HTML we crawl, so you can verify the same pass condition with a free report.
1. Problem description
Plain HTTP exposes cookies and form bodies to anyone on the path. Browsers will block many features. We only inspect the URL we fetched — we do not run an active SSL audit (cipher suites, CT logs).
2. Most common causes
- Certificate never installed.
- A leftover :80 vhost.
- Internal links still targeting http://.
3. How to fix it
- Terminate TLS at the load balancer or origin.
- Redirect HTTP to HTTPS.
- Use a publicly trusted certificate.
Test this check
We fetch only this URL (plus robots.txt / llms.txt at the domain root when the check needs them). We do not crawl the rest of the site like a full report.
Scoring rules for the full site crawl are documented in methodology. Want every category at once? Generate a free report.
Get your free website audit
Enter your URL and receive a full audit with scoring and recommendations. No sign-up required.