Security report
Report for bbc.com
https://bbc.comFAQs about bbc.com
Related tools
Tool
Security Headers Checker
Test HSTS, CSP, X-Frame-Options, Referrer-Policy and Permissions-Policy in seconds.
Read
Tool
SSL Certificate Checker
Verify the SSL certificate for any domain in seconds.
Read
Tool
DNS Checker
All your DNS records, one clean view.
Read
Tool
Cookie Security Checker
See exactly which cookies a site drops and whether they're safe.
Read
Tool
Redirect Checker
See exactly where a URL ends up and how it gets there.
Read
Tool
HTTP Header Checker
Inspect raw HTTP response headers for any URL.
Read
Fix common issues
Guide
HTTP Security Headers: A Practical Guide
Every HTTP security header explained in plain English, with production-ready examples for Nginx, Apache, Cloudflare, Express and WordPress.
Read
Guide
HTTP Strict Transport Security (HSTS)
How HSTS works, how to enable it safely, and when (and how) to preload your domain into every major browser.
Read
Guide
Content Security Policy (CSP): What It Is and How to Ship It
A step-by-step guide to writing, testing and shipping a strict Content Security Policy without breaking your site.
Read
Guide
HTTPS: The Non-Negotiable Baseline
Every site needs HTTPS. Here's how to enforce it, why HTTP is worse than you think, and how to test your setup.
Read
Guide
Cookie Security: SameSite, Secure, HttpOnly
How to configure cookies so they can't be stolen by XSS, sent over HTTP, or used in CSRF attacks.
Read
Guide
DNS Security Basics
A checklist of DNS records every domain should have — CAA, DNSSEC, SPF, DKIM and DMARC — with why each one matters.
Read