Website Checker / Connection security
Website security check: HTTPS certificate and security headers explained
Whether the site opens over HTTPS, whether the certificate is valid and trusted, how soon it expires, which encryption protocol is used, and whether four basic security headers are present.
What the colours mean
- OK. HTTPS works, the certificate is valid, and most protective headers are in place.
- Needs attention. HTTPS works, but some protection is missing — for example, security headers or a redirect from http:// to https://.
- Problem. There is no HTTPS, the certificate is expired or not trusted. Browsers show visitors a "Not secure" warning.
Why it matters for your business
- A "Not secure" warning makes visitors leave and stops them from filling in forms.
- Without encryption, anything typed on the site can be read on public Wi-Fi.
- Missing security headers make common browser attacks easier.
What you can do yourself
- Turn on a free Let's Encrypt certificate in your hosting panel and enable automatic renewal.
- Add a permanent redirect from http:// to https://.
- Ask your developer to add HSTS, Content-Security-Policy, X-Content-Type-Options and X-Frame-Options.
What OLBO can do
Technical website audit — from €490, 2 working days: a report with exact instructions for your developer.
Common doubts
Our site takes no payments — do we still need HTTPS?
Yes. Browsers mark every page without HTTPS as «Not secure», and contact forms still send names and emails.
Do certificates cost money?
Usually not: Let's Encrypt certificates are free and renew automatically at most hosting providers.
What this usually costs
Approximate prices from open sources — for orientation only.
| USA | $800–2,400 |
|---|---|
| Europe | $400–1,600 (UK) |
| OLBO | from €490 |
Estimate: a technical audit takes about 8–16 hours × average agency hourly rates (Clutch). Sources: Clutch «Web design pricing» (updated 21 September 2026). Prices vary with scope; OLBO prices are fixed after a free brief.