Security & Headers
Security and HTTP headers sit at the intersection of technical SEO and web security. HTTPS is a confirmed ranking signal; mixed content breaks browser security models; missing security headers leave sites open to clickjacking and XSS; and broken HTML structure corrupts how browsers and crawlers parse the entire document.
These checks cover the full security and structural health of each page — from protocol and transport security through response headers and down to the fundamental HTML document structure. Many of these are server-level configuration issues that fix all pages simultaneously when addressed at the template or server config level.
Select a topic below to see exactly what the platform checks and how to address each class of security or structural issue.
Protocol
HTTP pages, mixed content, HTTP links on HTTPS pages, HTTP sitemap URLs, and protocol-relative resource links.
View 5 checks →Security Headers
HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and unsafe inline scripts.
View 12 checks →Form Security
Forms on HTTP pages and forms with insecure action URLs submitting data without encryption.
View 2 checks →HTML Structure
Missing head/body tags, multiple head/body tags, content before html, and oversized HTML documents.
View 6 checks →