Guides
In-depth guides
Longer walkthroughs for specific setups: real screenshots, code you can paste and the reason behind every step. The short fix page for each check lives under Learn.
All guides
54 guides, page 4 of 5.
- Security10 min read
Magecart card skimming on WooCommerce: how skimmers get in and how to find them
Magecart is the name for attacks that inject card-skimming JavaScript into checkout pages. On WooCommerce, skimmers hide in the database, fake plugins and third-party scripts. Here is how they work, how to detect them and what to do.Updated 26 Sept 2026 - Security10 min read
Microsoft 365 SPF record, DKIM and DMARC: set up Office 365 email authentication
The Microsoft 365 SPF record is v=spf1 include:spf.protection.outlook.com -all. How to publish it, set up DKIM for Office 365 with the two selector CNAMEs, and add DMARC, with the exact records and how to verify them.Updated 26 Sept 2026 - Security10 min read
Multiple SPF records and the 10-lookup limit: how to fix SPF PermError
Multiple SPF records on one domain make SPF fail for every message, and so do more than 10 DNS lookups. How to merge two SPF records into one, count your lookups, and bring the count back under 10.Updated 26 Sept 2026 - Security17 min read
Outdated JavaScript libraries: find old jQuery and update it safely
Which jQuery, jQuery UI, Bootstrap, Lodash or Moment.js versions your site runs, which ones have known vulnerabilities, and how to update them safely on WordPress and custom sites.Updated 26 Sept 2026 - Security11 min read
SPF record: syntax, examples and ~all vs -all
An SPF record is the DNS TXT record that lists which servers may send email for your domain. Its syntax term by term, copy-ready examples, and when to end it with ~all or -all.Updated 26 Sept 2026 - Security18 min read
SPF, DKIM and DMARC: set up email authentication in the right order
SPF, DKIM and DMARC are the three DNS records that prove your mail is really yours. What each one does, how they fit together, and the order to set them up in.Updated 26 Sept 2026 - Security10 min read
What is BIMI? Your logo in the inbox, and what it takes
BIMI is the DNS record that lets Gmail, Yahoo and Apple Mail show your logo next to your emails. What it needs, what VMC and CMC certificates are, and how to set it up.Updated 26 Sept 2026 - Security10 min read
What is DKIM? Signatures, selectors and the DKIM record
DKIM signs every email your domain sends so receivers can prove it came from you and was not changed. How the signature works, what a selector is, and how to publish the DKIM record.Updated 26 Sept 2026 - Security12 min read
What is DMARC? How it works, and your first DMARC record
DMARC is the DNS record that tells mail servers what to do with email that pretends to be from your domain, and sends you reports about who uses it. How it works, and the record to publish first.Updated 26 Sept 2026 - Security12 min read
WordPress hacked redirect: why your site sends visitors to spam and how to find it
A WordPress hacked redirect sends visitors to scam, casino or adult sites, often only from Google, only on phones or only once. Here is how to reproduce it, where the redirect code hides and how to remove it for good.Updated 26 Sept 2026 - Security10 min read
Certificate chain errors: why it works in Chrome and fails elsewhere
A missing intermediate certificate hides in desktop browsers and breaks apps, curl, webhooks and crawlers. Read the chain, match the error to its cause and install the full chain on any server.Updated 25 Sept 2026 - Security10 min read
Directory listings and exposed files: .env, .git and backups
An "Index of /" page or a readable .env file hands database passwords and source code to the first scanner that asks. What leaks, how the report probes for it, and the server rules that close it.Updated 25 Sept 2026
Guides tell you how. Your report tells you what.
Run a free report to see which of these guides apply to your site.