HTTPS and HSTS
HTTPS encrypts the connection. HSTS tells a browser to keep using HTTPS on later visits.
Photography website security / public settings check
Who’s looking after
your website security?Check the settings you can see.
Check HTTPS and the security headers your homepage sends. Then review account access and backups—the things that matter behind the website too.
Jason & Daniel2Blokes · Updated October 24, 2026
Try it with your business
Check your website’s public settings
A read-only check of your homepage connection and response headers.
Check the accounts
behind the website.
These checks need your own access. Tick each one once you’ve confirmed it.
What are we checking?
Content type and framing rules
These headers help a browser handle content as intended and control whether other pages can embed your site.
Content Security Policy
A CSP sets rules for resources such as scripts. Whether its rules suit your site needs a closer review.
Account access and backups
A public page can’t tell us who owns your accounts or whether a backup can be restored. The checklist above covers those questions.
A missing header is a setting to review with your host. This check doesn’t test for every vulnerability or inspect private accounts.
If something needs
sorting, send it over.
We can review the website plan, domain ownership, access, updates and backups with you. We’ll explain what your current services cover and agree what needs changing.
You won’t be asked for passwords in this tool. If we work together, we’ll agree a suitable way to grant the access needed for the job.
Questions photographers ask.
Does this check prove my website is secure?
It checks the public connection and several response headers. Account access, backups, updates and application vulnerabilities need a wider review.
Can you check my WordPress security?
We can check public settings here. A fuller review looks at hosting, updates, plugins, access and backups with the right account permissions.
What if my website builder controls these headers?
Ask the provider what it supports and what is already managed for you. We can review the answer and help decide what matters for your setup.
Do I need to give you a password for the check?
No. This tool only opens public pages.
Get Jason and Daniel to take a look
Help me look after security.
We review your website, security, services and bills, then agree what to fix. We work with your current setup and build a new site if you need one.
Our first 10 photographers
$149/month
Standard price $499/month
Apply for my tech auditApplication → review → a hello from the blokes.
Payment after approval.
