What it reads
How your domain answers a plain http:// request. A redirect straight to HTTPS passes, and so does refusing plain HTTP connections. Anything else, such as a page or a redirect to another http:// address, warns.
Check 20 of 54 · Web and TLS
Typing your address without https still lands on the secure site.
Engine 1.57.0, read 25 October 2026
Is your website set up safely?
How your domain answers a plain http:// request. A redirect straight to HTTPS passes, and so does refusing plain HTTP connections. Anything else, such as a page or a redirect to another http:// address, warns.
A site that answers on plain HTTP hands an attacker on the same network the whole conversation.
A failure is a finding in your result. The check is scored, so it can lower your score, and the Full Report gives every finding its severity and a fix. If the check cannot finish, it is recorded as unknown: it carries no penalty, and it is never a pass.
Asks your domain itself, not www. It reports unknown if your domain does not point at a server.
Check 20 is one of 15 in Web and TLS. See it in its row on the scanner page, beside the rest of Web and TLS.
The free check includes this one and takes about 30 seconds. No account. Nothing to install.