Site Checkup
Sample report · fictional data

Healthy

  1. A
  2. B
  3. C
  4. D
  5. F

Check-up report

atelier-nour.example

Atelier Nour ceramics, Gemmayzeh · Sunday 1 November 2026, 09:58 Beirut time

Your website is in very good shape. Everything we can see from outside is set up the way we would recommend: a certificate that renews by itself, browser protections switched on, and no files or admin pages left open. Run a check-up every few months, or after big changes, to stay here.

Run a deeper scan
  • Nothing urgent to fix
  • 1 small extra worth doing

What’s already done well

  • Your certificate is strong and renews by itself

    TLS 1.3 only, valid until 22 Jan 2027, renewal every 60 days.

  • Every visit is encrypted

    Plain http:// redirects to https://, and browsers are told to remember that for two years.

  • Browsers are told to protect your visitors

    All five standard protections are on, including a strict content policy.

  • No private files are exposed

    We asked for .env, .git, backups, database dumps and 33 other paths. All were refused.

  • No admin pages open to the public

    The shop is managed elsewhere, so there is no login on the site itself.

  • Your one cookie is fully protected

    The basket cookie is Secure, HttpOnly and SameSite=Lax.

  • Nothing on the site needs updating

    A static site with no plugins, and the server hides its version.

One thing worth doing

Worth doingSecurity headers· SecurityFix time: 5 minutes

Give security researchers a way to reach you

If someone ever spots a problem on your site, a small security.txt file tells them who to email. It costs nothing and many careful people look for it first.