Guide · 12 min read
Website security headers explained for small business sites
Each header in plain English, a safe starting value, how to add it on common hosts, and how to avoid breaking the site.
Website and SSL security
What a small business website shows the world before anyone logs in: its certificate, its headers and the warnings browsers display. Each guide ends with a practical fix.
The complete guide
Go deeper
SSL certificate validity 47 days · 6 min read
SSL certificates are moving to 47 days: what MSPs should tell clients
The CA/Browser Forum schedule, why it is happening, and why manual renewals stop being viable for client websites.
mixed content fix · 5 min read
Mixed content warnings: what they mean and how to fix them
Why a padlock disappears, which mixed content browsers block, and how to find and fix every http:// reference.
security.txt · 4 min read
security.txt: what it is and how to add one in 10 minutes
A short file that tells people how to report a security problem. The required fields, an example, and what to do with reports.