2 min read
How to Read a Website Security Scan Report
A scan returns dozens of findings and a score. Here is how to turn that output into a short, prioritized fix list without drowning in noise.
ReportsGetting startedRemediationRead
Website Security Blog
Practical guides on reading scan reports, hardening HTTP headers, fixing TLS misconfigurations and configuring CORS the safe way.
2 min read
The 10 Most Common Security Header Mistakes (and How to Fix Them)
Security headers are the cheapest hardening you can ship — and the easiest to get subtly wrong. Here are the ten mistakes scanners flag most, with the exact fix for each.
HeadersHardeningCSPRead
2 min read
SSL/TLS Misconfigurations That Put Your Site at Risk
A valid padlock does not mean your TLS is healthy. These are the certificate and protocol misconfigurations that quietly weaken HTTPS, and how to catch them.
TLSCertificatesHTTPSRead
2 min read
CORS Explained: Safe Cross-Origin Configuration for Modern Sites
CORS is misunderstood as often as it is misconfigured. Here is what the headers actually do, the wildcard-plus-credentials trap, and how to lock an API down correctly.
CORSAPIsHardeningRead