Website and email security guides
Practical explanations and checklists for the people responsible for your website, domain and email.
Website Security Audit: What to Check and How to Score It
Use a practical website security checklist for HTTPS, headers, email and certificates, with recommended settings, staged fixes and honest scoring limits.
HTTPS, TLS and HSTS: what your website should check
Configure TLS 1.2/1.3, permanent HTTPS redirects and one-year HSTS. Follow a staged rollout with exact headers and preload requirements.
Security headers: practical checks for your website
Deploy CSP in report-only mode, then enforce it. Set framing, nosniff, referrer and cookie protections with exact headers and rollout steps.
Email security: how to check SPF, DKIM and DMARC
Configure SPF, 2048-bit DKIM and DMARC reporting, then move to enforcement. Includes DNS examples, lookup limits and bulk-sender requirements.
Domain and certificate hygiene: checks your IT team can own
Set CAA records, automate certificate renewal and monitor expiry. Use exact DNS examples and staged changes to protect website and email continuity.