Security Check Guide

Security Check evaluates your website’s SSL certificates, security headers, and HTTPS configuration. It runs locally using the native macOS Security framework, so no API key or external setup is required.

What Is Checked #

SSL Certificate #

• Validity of the certificate
• Issuer and trust chain
• TLS protocol version
• Detection of self‑signed certificates
• Subject Alternative Names (SANs)

Security Headers #

• HSTS (Strict‑Transport‑Security)
• Content Security Policy (CSP)
• X‑Frame‑Options (clickjacking protection)
• X‑Content‑Type‑Options (MIME sniffing protection)
• Referrer‑Policy
• Permissions‑Policy

HTTPS Configuration #

• HTTPS availability
• Automatic HTTP to HTTPS redirects
• Detection of mixed content

Understanding Your Security Grade #

• A Grade (90–100): Excellent security. Strong encryption and headers in place.
• B Grade (80–89): Good security. Minor improvements possible.
• C Grade (70–79): Fair security. Several improvements needed.
• D Grade (60–69): Poor security. Multiple issues require attention.
• F Grade (0–59): Critical issues. Immediate fixes required.