Skip to content

Mixed content scan

Mixed content scan

Your site has a certificate but the browser still says "Not secure", or the layout breaks on https. The usual cause is a file the page still loads over plain http. Enter the page address and we list every insecure file in its HTML.

WDS / Mixed content Ready

Enter the page that shows "Not secure" or a broken padlock, or a domain to scan its homepage.

We check from the outside, the way visitors see your site, and keep a simple log of sites checked. Privacy policy.

How it works

What this checks

  • Images and media Images, picture and video sources, audio, icons and form actions that use http://.
  • Scripts and styles Scripts, stylesheets, frames, embeds, preloads, and url() or @import inside the page’s style blocks.
  • Blocked or upgraded Which files browsers block outright (scripts, styles, frames, fonts) and which they try to upgrade (images, audio, video).
  • Base address A base tag that turns every relative link into http://.
  • Upgrade policy Whether an upgrade-insecure-requests policy is already asking browsers to fix addresses for you.

Search the field manual

What is going wrong?

Press / to search from any page, Esc to close