← All checks
SecurityTypical severity: Medium

HTTPS Redirect Checker

Checks that the HTTP version of your site properly redirects to HTTPS instead of serving unencrypted.

What it checks

This checker verifies that when someone visits the HTTP version of your site, the server redirects them to HTTPS instead of serving the page unencrypted. It confirms the insecure door always leads to the secure version. It only observes the redirect behavior.

Why it matters

If the HTTP version is served as-is, visitors may browse your site without encryption and expose their data without noticing. It also enables attacks that intercept the connection before it reaches HTTPS. A proper redirect ensures all traffic ends up protected.

How to fix it

Configure your server or host so every HTTP request issues a permanent redirect to HTTPS. Combined with the HSTS header, the browser will go straight to the secure version on future visits. Many platforms offer this redirect with a single checkbox.

Check it on your site

Scan your site free and see if this and 44 other checks pass, with a fix prompt for every issue.

Scan my site free

From the blog

Related checks