HTTPS and SSL
Certificate, redirects, HSTS and transport security.
Assessment
Review the practical controls that protect your website, customers and digital reputation.
Certificate, redirects, HSTS and transport security.
Frame protection, content type, referrer and permissions policies.
CDN, backups, malware scanning and supported software.
Check for .git, .env, backups and configuration files.
Validate with SSL Labs and Mozilla Observatory.
Document a repeatable secure release process.