What we check
The six headers that matter most: a Content Security Policy, HTTPS enforcement (HSTS), MIME sniffing protection, clickjacking protection, a referrer policy, and a permissions policy. Each one gets a plain fix if it is missing.
A handful of small settings, sent with every page, are your website's first line of defence against common attacks like script injection and clickjacking. Type your site below and we will grade them and tell you in plain English exactly what to add.
No login and nothing to install. We only read the headers your site already sends to every visitor. Please only check sites you own or look after.
The six headers that matter most: a Content Security Policy, HTTPS enforcement (HSTS), MIME sniffing protection, clickjacking protection, a referrer policy, and a permissions policy. Each one gets a plain fix if it is missing.
These headers are free to add and cost nothing in performance, yet most small business sites are missing several. They are often the first thing a security review or a cautious customer looks at.
We add and test these safely on sites we host and on sites we do not, so nothing breaks and your site comes out stronger. We support businesses across Norfolk and Suffolk.
Book a free review ↗A free technology review. We map your systems, flag the risks and tell you what we’d do first. No obligation to move anything to us.