Security
Basic protection is in place, with room to harden the site further.
67
of 100
SSL certificate: Passed
Valid certificate issued by a trusted authority, auto-renewing and not close to expiry.
HTTPS everywhere: Passed
The homepage is served over HTTPS and plain HTTP is redirected to it.
Security headers: Problem found
Almost all recommended security headers are missing, which leaves visitors more exposed to attacks.