ERT-CONFIG-008
HTTP not redirected to HTTPS
MediumA04:2025CWE-319
Why it matters
Security headers, TLS, email spoofing, takeovers. This check looks specifically for: http not redirected to https.
How to fix it
Redirect all HTTP traffic to HTTPS with a 301/308.
How we test it
Passive — runs in the free check, looks only at what a browser can see.