Guides
In-depth guides
Longer walkthroughs for specific setups: real screenshots, code you can paste and the reason behind every step. The short fix page for each check lives under Learn.
All guides
54 guides, page 5 of 5.
- Security11 min read
HSTS: enabling it safely and joining the preload list
Turn on Strict-Transport-Security without locking anyone out, raise max-age in three stages, and decide whether the browser preload list is worth a commitment that is hard to undo.Updated 25 Sept 2026 - Security10 min read
Mixed content: finding and fixing http:// leftovers after HTTPS
Moved to HTTPS and lost the padlock, a stylesheet or a slider? Find every http:// resource the page still loads, fix it at the source in the database and theme, and add a safety net for the rest.Updated 25 Sept 2026 - Security11 min read
security.txt: the contact file for security researchers
A security.txt file tells whoever finds a hole in your site where to report it. The required fields, the Expires trap, a complete sample, and hosting it on WordPress, Next.js and nginx.Updated 25 Sept 2026 - Security10 min read
Server and X-Powered-By headers: why version numbers matter
Apache/2.4.29, PHP/7.2.24, Express. Two response headers hand every scanner your exact software versions. What they reveal, what hiding them does and does not achieve, and the fix for each server.Updated 25 Sept 2026 - Security13 min read
Subresource Integrity for third-party scripts: help and harm
What an integrity hash protects against (the polyfill.io kind of incident), what it cannot (tag managers, chat, anything that updates), how to generate hashes, and when self-hosting is better.Updated 25 Sept 2026 - Security13 min read
The Japanese keyword hack: symptoms, where it hides, how to recover
Japanese titles for your site in Google, a Search Console owner you did not add. How the Japanese keyword hack works, how the checker sees it through the cloaking, and the recovery steps in order.Updated 25 Sept 2026
Guides tell you how. Your report tells you what.
Run a free report to see which of these guides apply to your site.