Security issues
Every Security finding Crawl Cove's crawler checks for, each with an example finding and a step-by-step fix.
Security findings cover how safely a page is delivered. Neither is a direct ranking factor, but both decide whether a browser trusts the page, and the browser decides what a visitor actually sees.
Mixed content is High severity: an HTTPS page that loads an image, script or stylesheet over plain http://. Browsers block or warn about those requests, so images go missing and the padlock can disappear on a page you believed was secure. The fix is usually a find-and-replace of hard-coded http:// URLs.
Missing security headers covers HSTS, Content-Security-Policy, X-Frame-Options and X-Content-Type-Options: what each one does, where to set it, and why Content-Security-Policy goes in last, since a strict policy added in one step can break analytics, fonts and embeds on a working site.
HTTPS problems that live in the head of the page rather than in its resources, such as a canonical tag naming the http:// version, are in the Meta category.
-
Medium severity
Missing Security Headers: HSTS & CSP
What HSTS, CSP, X-Frame-Options and X-Content-Type-Options do, an example finding, how to add each one, and when the check stays quiet.
-
High severity
Mixed Content: What It Is and How to Fix It
An HTTPS page loading an insecure http:// image. What it means, an example finding, how to fix it, and two things that look like it but aren't.
Find what is wrong with your site
and how to fix it
Crawl Cove runs on your own computer, explains every issue in plain words and puts the most urgent fixes first. Connect Search Console and it weighs each fix by the traffic on that page.
Free plan, no account or card needed. Paid plans add exports, reports, scheduling and more, with a 14-day trial. 14-day money-back guarantee once you subscribe.