Website security fix guides
Short guides for the problems we find most often on websites, with copy-paste code for your platform: WordPress, Cloudflare, Next.js, Netlify, nginx, Apache and IIS.
Email security
Security headers
- How to add the HSTS header to your site
- How to get your site on the HSTS preload list
- How to add the X-Frame-Options header (clickjacking protection)
- How to add X-Content-Type-Options: nosniff
- How to add the Referrer-Policy header
- How to add the Permissions-Policy header
- How to add a Content-Security-Policy (CSP)
- How to remove unsafe-inline from your CSP