Free Scan Help – How to Read and Fix Your Results

The Free Security Scan checks your website for common vulnerabilities, misconfigurations and security weaknesses. This guide explains what each result means and provides simple steps to fix the most frequent issues.

1. SSL & HTTPS Status

What we check:

• If your website uses HTTPS correctly
• Whether your SSL certificate is valid and up to date
• If there are insecure HTTP redirects

How to fix common SSL issues:

No HTTPS or Invalid Certificate

• Enable a free SSL certificate in your hosting panel (e.g., Let’s Encrypt)
• Force your site to load over https:// in WordPress settings
• Update old http:// links using a Search & Replace plugin

Old TLS Version (Weak SSL)

Ask your hosting provider to:

• Enable TLS 1.2 or TLS 1.3
• Disable legacy TLS 1.0 / 1.1

2. Security Headers

What we check:

• Strict-Transport-Security (HSTS)
• X-Frame-Options
• X-Content-Type-Options
• Content-Security-Policy (CSP)
• Referrer-Policy

Your site may work normally without headers, but browser-level security is reduced.

How to add security headers (Apache / .htaccess)

# Force HTTPS
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"

# Protect against clickjacking
Header set X-Frame-Options "SAMEORIGIN"

# Prevent MIME-type sniffing
Header set X-Content-Type-Options "nosniff"

# Basic referrer policy
Header set Referrer-Policy "strict-origin-when-cross-origin"

Basic Content-Security-Policy (CSP)

Header set Content-Security-Policy "default-src 'self';"

Note: CSP can break content if not configured properly. T