The fixes library

Website problems, in plain English.

Everything we check for, explained the way we explain it to customers: what we saw, why it matters, and what to do. Grouped by how quickly it needs attention.

Fix today

• A file with your site's passwords is downloadable
• A form on your site sends data to another website
• A form on your site sends what people type insecurely
• Some visitors are seeing a security warning on your site
• We could not reach your site securely
• Your login page is not secure
• Your page contains an invisible embedded window
• Your page is advertising something that is not yours
• Your page runs code that is deliberately scrambled
• Your site is showing visitors a security warning
• Your site's source code folder is downloadable

Fix this week

• A link on your page points to a look-alike address
• Part of your secure page loads over an insecure connection
• The plain, unlocked version of your site still works
• Your address forwards visitors to a different website
• Your admin login page is open to the public internet
• Your page automatically sends visitors somewhere else
• Your site's security certificate runs out in 12 days

When convenient

• A small browser safety switch is off
• Another website can put your pages inside its own
• Search engines are allowed to index everything on your site
• Security researchers have no way to reach you
• Your page runs code from 2 outside companies
• Your site has no instructions file for search engines
• Your site has no sitemap
• Your site lets browsers fall back to an insecure connection

Optional hardening

• Your pages do not restrict camera, microphone or location access
• Your site has no list of what scripts are allowed to run
• Your site tells other websites which of your pages people came from