30 checks in Security & Privacy. Automated Its subsection has a live automated checker in the engine.
| ID | Check | Passes when |
|---|---|---|
| 7.1.01 | Validate SSL certificate not expired | Valid |
| 7.1.02 | Validate certificate issued by trusted authority | Trusted |
| 7.1.03 | Validate certificate chain complete | Complete |
| 7.1.04 | Validate intermediate certificates correct | Correct |
| 7.1.05 | Detect self-signed certificates | None |
| 7.1.06 | Validate SAN (Subject Alternative Names) configured correctly | Correct |
| 7.1.07 | Detect domain mismatches | None |
| 7.1.08 | Validate certificate renewal automation in place | Automated |
| 7.1.09 | Validate wildcard certificate configured correctly | Correct |
| 7.1.10 | Compute Certificate Integrity Score | Finalized |
| ID | Check | Passes when |
|---|---|---|
| 7.1.11 | Validate TLS 1.2 or 1.3 enabled | Enabled |
| 7.1.12 | Validate TLS 1.0/1.1 disabled | Disabled |
| 7.1.13 | Validate strong cipher suites used | Strong |
| 7.1.14 | Detect insecure ciphers (RC4, 3DES, NULL) | None |
| 7.1.15 | Validate forward secrecy supported | Supported |
| 7.1.16 | Validate HSTS enabled | Enabled |
| 7.1.17 | Validate OCSP stapling enabled | Enabled |
| 7.1.18 | Detect weak DH parameters | None |
| 7.1.19 | Validate AES-GCM or CHACHA20 in use | In use |
| 7.1.20 | Compute TLS Strength Score | Finalized |
| ID | Check | Passes when |
|---|---|---|
| 7.1.21 | Validate HTTP redirects to HTTPS | Redirecting |
| 7.1.22 | Validate no mixed content present | None |
| 7.1.23 | Validate no downgrade attacks possible | None |
| 7.1.24 | Validate preload-ready HSTS configuration | Ready |
| 7.1.25 | Validate canonical URLs use HTTPS | HTTPS |
| 7.1.26 | Validate sitemap URLs use HTTPS | HTTPS |
| 7.1.27 | Validate robots.txt references HTTPS versions | HTTPS |
| 7.1.28 | Validate embedded resources use HTTPS | HTTPS |
| 7.1.29 | Detect insecure external scripts | None |
| 7.1.30 | Compute Transport Layer Security Compliance Score | Finalized |
A Deep Audit scores every check here that applies to your page, then an AI pass of up to 150 checks. Included on Pro and Ultra, or $9 for one audit.
See plansMachine-readable: catalog totals and the full catalog as JSON (IDs, section, weight, status).