Flags forms submitting to HTTP or insecure external endpoints.
Checks all `<form>` elements on the page to ensure their `action` attributes point to secure HTTPS endpoints.
Submitting form data (like passwords or PII) over plaintext HTTP allows man-in-the-middle attacks to intercept the data.
Insecure forms put user data at critical risk and will cause modern browsers to show severe security warnings.
Run a free audit to see how your site performs on Form Security Audit and 159 other checks.
Start Free AuditVerifies the validity and configuration of the SSL certificate.
Checks if the site is secured with a valid SSL certificate.
Ensures that HTTP traffic is automatically redirected to HTTPS.
Checks for insecure (HTTP) resources on a secure (HTTPS) page.