Knowledge Center — Security
Website Security
In this report, website security means the baseline, browser-facing security practices that protect visitor data in transit and satisfy the trust signals browsers themselves check for.
Why it matters to your business
Modern browsers actively warn visitors when a site fails basic security practices — which can damage trust in your business before a visitor even reads your content.
A real-world example
A website that doesn't use HTTPS shows a “Not Secure” warning directly in the browser's address bar, which can make visitors hesitant to enter any information at all, even just their name and email.
Exactly What WebScan Checks
WebScan checks a curated set of browser-security signals, based on Google Lighthouse's best-practices audits:
- Whether the site uses HTTPS, and redirects HTTP traffic to it
- Whether the site sends an HSTS header
- Content-Security-Policy protections against cross-site scripting (XSS)
- Clickjacking protections
- Other related browser-security signals from Lighthouse's best-practices audits
WebScan checks these browser-visible security signals only. It is not a penetration test, vulnerability scan, malware scan, or any form of security certification. It doesn't test server-side vulnerabilities, evaluate your hosting infrastructure, or guarantee your website is secure against attack.
Explore Deeper
View a sample WebScan report to see what a real security section looks like.
See This For Your Own Website
Get a free snapshot of your homepage — no cost, no obligation.