SITEPULSE / INFORMATION & CAPABILITIES
Security you can understand.
A practical review of publicly visible security configuration, backed by specific observations.
Pun tekst ispod je na engleskom.
A CLOSER LOOK
Four layers of visible protection.
The secure connection, certificate, headers and accessible files reveal different parts of the picture. The analysis brings them together.
- 01HTTPSSecure transport
- 02CertificateValidity and domain
- 03HeadersBrowser rules
- 04FilesPublic exposure
HTTPS and redirects
We examine HTTPS usage and redirect behaviour. Inconsistent or misdirected addresses can create confusion and leave unprotected entry points. SSL checks add detail about the certificate itself.
Headers that strengthen protection
We inspect HSTS, Content-Security-Policy, X-Content-Type-Options, framing protection and Referrer-Policy. A missing header is a review signal, not proof of compromise. Configuration must suit the site’s scripts, external services and behaviour.
Publicly exposed files
A limited set of checks looks for signs of files that should generally not be public. If flagged, review the content, server rules and reason for exposure. Renaming a file alone should not be your only protection.
Limits of automated analysis
Checks do not exploit vulnerabilities or replace penetration testing or a manual audit. Sensitive systems also need access reviews, updates, backups and specialised monitoring. Assess compatibility before applying recommendations.
