Fix guides
Website problems, explained and fixed.
These are the problems EverThread looks for when it checks a website each day. Each guide explains what the problem means for your business, how to check your own site in a couple of minutes, and how to fix it on WordPress, hosted builders like Shopify and Squarespace, or your own server. There's also a note you can forward to your developer.
Not sure where to start? The guides marked "Fix today" are the ones that can cost you visitors or customers right away.
Looking for urgent alerts? Time-sensitive warnings about software many websites run on, like PHP, WordPress plugins and Magento, are on Security notices.
Certificate and secure connection
The padlock, the certificate behind it, and whether every visitor gets the secure version of your site.
- Your site is showing visitors a security warning · Fix today
- Your site's security certificate runs out in 12 days · Fix this week
- Some visitors are seeing a security warning on your site · Fix today
- We could not reach your site securely · Fix today
- The plain, unlocked version of your site still works · Fix this week
- Part of your secure page loads over an insecure connection · Fix this week
Signs of tampering
Things on the page that suggest someone other than you has changed your site.
- Your page is advertising something that is not yours · Fix today
- Your page contains an invisible embedded window · Fix today
- Your page runs code that is deliberately scrambled · Fix today
- Your address forwards visitors to a different website · Fix this week
- Your page automatically sends visitors somewhere else · Fix this week
- A link on your page points to a look-alike address · Fix this week
- Your page runs code from 2 outside companies · When convenient
Files and logins open to the internet
Private files and admin pages that anyone can reach if they know where to look.
- A file with your site's passwords is downloadable · Fix today
- Your site's source code folder is downloadable · Fix today
- Your admin login page is open to the public internet · Fix this week
Forms and passwords
Where the details your visitors type in end up, and whether they travel safely.
- Your login page is not secure · Fix today
- A form on your site sends what people type insecurely · Fix today
- A form on your site sends data to another website · Fix today
Security settings on your server
Small instructions your server sends with every page that tell browsers how to protect your visitors.
- Your site lets browsers fall back to an insecure connection · When convenient
- A small browser safety switch is off · When convenient
- Another website can put your pages inside its own · When convenient
- Your site does not say how much of your page address to share with other sites · Optional hardening
- Your site has no list of what scripts are allowed to run · Optional hardening
- Your pages do not restrict camera, microphone or location access · Optional hardening
Files for search engines and researchers
Small files that help search engines read your site and help security researchers reach you.
- Your site has no instructions file for search engines · When convenient
- Search engines are allowed to index everything on your site · When convenient
- Your site has no sitemap · When convenient
- Security researchers have no way to reach you · When convenient
Last updated September 27, 2026. Written by the EverThread team.