Checks · TLS-003

TLS-003 · HTTP not redirected to HTTPS

Why it matters

If plain HTTP stays open, a visitor can use the site without encryption.

How we detect it

A request to the HTTP URL does not redirect to HTTPS.

How we fix it

Redirect every HTTP request to HTTPS.

Can it be fixed automatically? Yes, with a template change

Related checks

• DB-006 · No backups or point-in-time recovery
• DB-007 · Backups never restore-tested
• TLS-001 · Certificate expires in under 14 days
• TLS-002 · TLS below 1.2 accepted