Web security
Forms submit over HTTPS
Security headers, HTTPS enforcement, cookies and cross-origin rules of the website.
Why it matters
Form data sent over HTTP - logins, contact details, payment data - can be read and changed by anyone on the network path. Browsers also warn visitors before they submit.
How to fix it
Quick fix · under 1 hour- Point every form action at an https:// address (or a relative path on an HTTPS page).
- Redirect all HTTP requests to HTTPS and enable HSTS.
- Re-run the scan to confirm.
HTML
<form method="post" action="/contact"> <!-- relative: follows the page's HTTPS -->
How we test it
The check runs from the public internet as part of every scan, read-only and without touching your data. If it fails, your report shows the evidence that proves it - the record, header, file or banner we observed - together with the fix above, tailored to the issue we found.
Does your domain pass this check?
Run all 97 checks in about a minute. Your first scan is free, with the complete fix for your most urgent finding.
Scan your domain free