Site basics (D8)

HTTPS

This page explains what this scan check measures. It is not legal advice or a compliance verdict.

What this check is

This check confirms the scanned URL is served over HTTPS.

Most modern WordPress hosts terminate TLS at the edge, but mixed content or HTTP canonicals still appear after migrations.

HTTP-only responses expose traffic to interception on the wire. This is a transport-security observation for the scanned URL.

Enforce HTTPS and fix redirects, then re-scan the same URL over https.

Run a free scan. If this check appears in your report, you will see the live status for your URL.