Skip to content
digitalaudits.com.au

Free website security check

Check the basics that keep your visitors safe and stop browsers warning people away: HTTPS, your certificate and your security settings.

What this audit checks

  • HTTPS

    Whether your site uses a secure connection.

  • Certificate expiry

    How long until your security certificate runs out.

  • Secure redirect

    Whether the insecure version sends people to the secure one.

  • Security headers

    Settings that tell browsers how to protect visitors.

  • Mixed content

    Images or scripts still loading insecurely.

  • Clickjacking protection

    Whether other sites can hide your pages inside theirs.

  • Content type protection

    Stops browsers guessing file types in unsafe ways.

What results look like

Real examples of what a security report flags, and what to do about each one.

PoorYour security certificate expires in 9 daysHigh impact · Quick fix

What it means

When it expires, browsers show a full-page warning and almost everyone leaves.

What to do

Ask your host to renew it and set it to renew automatically.

Needs work4 security settings are missingMedium impact · Some effort

What it means

These settings tell browsers how to protect your visitors from common attacks. They're invisible but important.

What to do

Ask your web person to add the missing security headers (like HSTS and X-Content-Type-Options).

Why it matters

When something's wrong with your site's security, browsers show a "Not secure" label or a full-page warning, and almost everyone leaves. These checks don't cover everything a hacker might try, but they catch the problems your customers can see.

Who fixes this?

HTTPS and certificates are usually a switch in your hosting account. Security headers and anything more serious are a job for your web developer or host.

See top-rated security providers

Related guides

All guides

Security check questions

Is this a full security audit?

No. It checks the settings anyone can see from outside your site. It doesn't try to break in or check your passwords, plugins or server. For that you need a security specialist.

Do I really need HTTPS if I don't sell online?

Yes. Browsers label every site without it "Not secure", even if you only have a contact form. It's also free with most hosts and helps your Google ranking.

What happens when my certificate expires?

Visitors see a full-page warning saying your site may be unsafe, and almost all of them leave. Most hosts renew certificates automatically, so check that's switched on.

My site was hacked. Can you help?

We don't fix sites ourselves, but your report tells you what to look at, and you can get quotes from top-rated providers who handle security.

Check your security now

Paste your web address and get your report in about a minute.