Website security, fixed step by step.
Short, practical guides with lines you can paste into nginx, Apache, Cloudflare or WordPress. Every guide links to its sources.
All guides
Security headers
Copy-paste HTTP security headers for nginx, Apache (.htaccess), Cloudflare and WordPress: HSTS, X-Content-Type-Options, frame protection, Referrer-Policy and Permissions-Policy.
GuideContent-Security-Policy
Roll out a Content-Security-Policy without breaking your site: start in report-only mode, build an allow-list, then enforce. Examples for nginx, Apache and WordPress.
GuideHSTS
What HSTS does, why a short max-age first, when to use includeSubDomains and preload, with copy-paste lines for nginx, Apache and Cloudflare.
GuideIs WordPress hacked?
The signs of a hacked WordPress site, how to confirm it with WP-CLI checksums, and a clean-up checklist: users, files, salts, updates and a Google review.
GuideWordPress hardening
A practical WordPress hardening checklist with copy-paste snippets: block XML-RPC, hide usernames, disable the file editor, protect wp-config.php and stop PHP in uploads.
GuideHTTPS & mixed content
Force HTTPS with a single 301 redirect, fix mixed-content warnings, avoid Cloudflare redirect loops and update old http:// links in WordPress with WP-CLI.
GuideCheckout skimmers
How card skimmers get into online stores, and how to stop them: script inventory, CSP on checkout, SRI, hosted payment fields and change detection (PCI DSS 4.0 6.4.3 and 11.6.1).
GuideExposed .git, .env & backups
Leaked .env files, .git folders and database backups hand attackers your passwords. Check if yours are public, block them on nginx or Apache, and rotate the secrets.
GuideSPF, DKIM & DMARC
Stop scammers sending email as your domain. Copy-paste SPF and DMARC records for Google Workspace and Microsoft 365, plus a safe path from p=none to p=reject.
Free checks
Find out your grade before someone else does.
Free to start. Paid plans from $12 a month, or a one-time report for $29. See pricing
This page is in English. Translations are on the way.