Security4 CHECKS
What a stranger can see and copy from your live site.
HTTPS and SSL
Is your site served over a valid, current certificate, so visitors and their data are encrypted?
What is HTTPS?Exposed secret keys
Looks through the code your site sends to browsers for API keys and tokens anyone could copy and use on your account.
API key exposureSecurity headers
Checks that your site tells browsers to switch on the protections that make common attacks harder.
Security headersSource code exposed
Checks whether files that should stay private, like .env files, are publicly reachable.
Exposed .env files