Security & HTTPS
Browsers are not told to always use HTTPS
One of the 136 checks Lala SEO runs on every page of a site in a free audit.
- How serious
- Worth knowing. Small, or only matters in some cases. Read it and decide.
- Score
- Reported, but it does not lower your site's score.
- Based on
- Industry standard: Google does not document this one, so the check follows established practice.
What the audit tests
- The start page, when served over HTTPS, sends a Strict-Transport-Security header
- The Strict-Transport-Security max-age is above zero (zero switches it off)
Check your site
Run a free audit of up to 300 pages. No card needed.
Start a free auditOr check a single address with the free tool.
Other security & https checks
- Any website can display this site inside a frame
- Forms on secure pages send their contents over plain HTTP
- Pages served over HTTP
- Secure pages loading scripts or styles over plain HTTP
- The HTTPS certificate expires soon
- The HTTPS certificate has expired or does not validate
- The nosniff security header is not sent