Free tool · no signup · runs now

HTTPS & HSTS checker

HTTPS is table stakes for trust and search; HSTS keeps visitors from being downgraded on their second visit.

Part of the Technical SEO audit & onpage SEO audit group — also included in the free full scan.

Checks this exact page only — it does not crawl the rest of your domain.

One free scan · anonymous preview · sign in to save the full report

Sample resultServed over HTTPS with an HSTS headerStatic example for HTTPS & HSTS checker; run the check above for your own result.

What it checks

See whether your page is served over TLS and stays protected on the second visit.

Final URL protocol, HSTS header presence.

Reads the no-JS response only, never runs JS. One fetch shared with the full scan.

What good looks like

Good looks like HTTPS on the final URL after redirects, with Strict-Transport-Security keeping the second visit from being downgraded. Plain HTTP fails; HSTS is optional but noted.

How to fix it

Serve everything over HTTPS and add Strict-Transport-Security with a long max-age.

What the full scan adds

  • All 34 checks in one pass — one URL, every category, a single report.
  • Evidence on every row: the values found, why it fails, the fix, and a deep link per check.
  • Your score against the global distribution — see where you stand.
  • Sign in and the report is kept for 1 year; anonymous reports expire after 7 days.

Official source: Search Central, SEO starter guide · Rule: https-hsts v1 · checker library

Tracking a Google update? Run the update impact check or read the search update radar.

Frequently asked questions

Is the HTTPS & HSTS checker free?

Yes — one free run without an account, with an anonymous preview. Sign in to save the full report and keep the evidence.

How often should I run it?

After every deploy that touches routing, templates or the checked file — and after each Google core update, to confirm nothing regressed.

Does the check run JavaScript?

No — it reads the no-JS response only, exactly what a crawler or AI agent sees when it fetches the URL.

How is this different from a full audit?

This page runs one check with its full criteria and fix notes. The free full scan runs every category at once and keeps the evidence per URL — use it once you know which checks matter.

Visdenda free toolshttps-checker · v1