SiteSecura Documentation
Learn how to assess website security, understand scan results, and configure SiteSecura's defensive security tools.
Explore by Category
Browse SiteSecura technical documentation, scanner specifications, and operational guides organized across four core areas.
Getting Started
Foundational guides on how SiteSecura evaluates website security, calculates scores, and verifies domain targets.
Security Checks Catalog
Technical specifications on how our scanning modules audit transport encryption, response headers, and DNS records.
Automated Monitoring & Alerts
How background automated workers continuously audit your domains and notify you of security regressions.
Agency & White-Labeling
Configuring client organizations, team member seats, and branded PDF audit exports.
Start Securing Your Website
Step-by-step guidance on running audits, hardening browser response headers, and securing domain email against spoofing.
How to Check Your Website Security: A Practical Guide
A complete 5-step checklist to evaluate your web server's transport security, certificate lifespan, defensive HTTP response headers, and email authentication.
Understanding Defensive HTTP Security Headers
Learn how HSTS, Content-Security-Policy, and X-Frame-Options instruct browsers to restrict risky behaviors and block client-side injection attacks.
What Is DMARC? A Practical Guide to Email Security
Protect your domain from spoofing and phishing. Step-by-step guidance on implementing SPF, DKIM, and DMARC enforcement policies.
Explore Standalone Security Tools
Need to investigate a specific technical configuration? Use SiteSecura's free standalone defensive utilities.
DNS Lookup Tool
Query real-time DNS records (A, AAAA, CNAME, MX, NS, TXT, SOA, CAA) with bounded timeouts.
HTTP Status & Redirect Checker
Inspect HTTP response status, complete redirect hop chains, SSL transitions, and response headers.
security.txt Validator
Verify RFC 9116 compliance, contact directives, expiration timestamps, and digital PGP signatures.
Robots.txt & Sitemap Checker
Inspect crawler rules, User-agent directives, disallow paths, and XML sitemap declarations.
CSP Policy Analyzer
Validate Content-Security-Policy syntax, directive strength, and identify XSS bypass vectors.
Security Config Generator
Generate copy-ready, production-hardened security header snippets for Nginx, Apache, Caddy, and Cloudflare.
SSL/TLS Certificate Checker
Inspect certificate trust chains, SAN coverage, cipher strengths, and renewal deadlines.
Technical Reference & Scanner Modules
Summary of the core scanning modules executed during an automated SiteSecura website audit.
SSL / TLS Handshake & Cipher Suites
Audits protocol versions (TLS 1.2, 1.3), certificate expiration countdown, hostname matching, and CA trust chains.
HTTPS Redirection & Connection Pinning
Checks whether port 80 automatically issues a permanent 301 redirect to HTTPS without cleartext interception gaps.
Defensive HTTP Security Headers
Inspects presence and configuration of HSTS, CSP, X-Content-Type-Options, X-Frame-Options, and Referrer-Policy.
Domain Email Authentication (SPF & DMARC)
Queries authoritative nameservers for SPF TXT records, DKIM public keys, DMARC policies, and DNSSEC validation.
Ready to test your website's security posture?
Documentation guides explain how web security works. SiteSecura's scanner actively audits your public endpoint in 60 seconds and delivers a plain-English remediation plan.