Matan · Security · Transport

HTTPS (transport)

All user traffic should be encrypted. This is the Security-pillar twin of the SEO HTTPS check.

Pass condition in our engine: The fetched URL uses https:.

1. Problem description

Plain HTTP exposes cookies and form bodies to anyone on the path. Browsers will block many features. We only inspect the URL we fetched — we do not run an active SSL audit (cipher suites, CT logs).

2. Most common causes

  • Certificate never installed.
  • A leftover :80 vhost.
  • Internal links still targeting http://.

3. How to fix it

  1. Terminate TLS at the load balancer or origin.
  2. Redirect HTTP to HTTPS.
  3. Use a publicly trusted certificate.

Test this check

We fetch only this URL (plus robots.txt / llms.txt at the domain root when the check needs them). We do not crawl the rest of the site like a full report.

Scoring rules for the full site crawl are documented in methodology. Want every category at once? Generate a free report.

Get your free SEO & GEO report

Enter your URL and receive a full audit with scoring and recommendations. No sign-up required.

Generate a free reportView sample report