Checks for publicly accessible JavaScript source maps that expose original source code.
This check looks for exposed JavaScript source maps — files that map minified/bundled code back to original source code. Source maps referenced via `//# sourceMappingURL=` comments in your JavaScript files or `X-SourceMap` headers can expose your original, unminified code to anyone.
Source maps are invaluable for debugging during development but dangerous in production. They can reveal your original source code, internal comments, API endpoints, business logic, and potential security vulnerabilities to anyone who looks.
Exposed source maps give attackers a readable version of your code, making it trivial to find security vulnerabilities, understand your business logic, and craft targeted attacks. They can also reveal internal API endpoints and authentication patterns.
Run a free audit to see how your site performs on Exposed Source Map Detection and 159 other checks.
Start Free AuditVerifies the validity and configuration of the SSL certificate.
Checks if the site is secured with a valid SSL certificate.
Ensures that HTTP traffic is automatically redirected to HTTPS.
Checks for insecure (HTTP) resources on a secure (HTTPS) page.