Security guides your team can ship this week

Qualys SSL Labs is the gold standard for TLS testing, but it only covers one dimension of website security. Learn what it misses and how to get the full picture.

HTTP security headers are your website's first line of defense. Learn what CSP, HSTS, X-Frame-Options, and other headers do — and how to configure them correctly.

Learn what a security.txt file is, why it matters for responsible disclosure, and how to create one for your website in under 10 minutes.

Email spoofing costs businesses billions every year. Learn how SPF, DKIM, and DMARC work together to protect your domain from phishing — with DNS record examples you can copy.

Learn what a website security score measures, why it matters for your business, and the exact steps to improve yours from any starting point.

We tested the top free website security scanners. See which tools catch the most issues, which are easiest to use, and which one we recommend.