Capeportal Website Security & Health Checker
Check important website security, technical and SEO health signals from one simple report.
Check Your Website Security and Health
Your website is one of the most important online assets for a small business. If it has an HTTPS problem, missing security configuration, broken technical files or other issues, visitors may experience problems and your online presence can be affected.
The Cape Portal Website Security & Health Checker gives small-business owners a straightforward way to review several important website signals from one report.
What Does the Website Security Checker Check?
- HTTPS: Checks whether the supplied website address uses HTTPS.
- HTTP to HTTPS redirect: Checks whether the HTTP version leads visitors to the HTTPS version.
- HTTP status: Shows the response status returned by the website.
- Response time: Shows approximately how long the Cape Portal server took to receive the response.
- Security headers: Checks for several commonly used HTTP security headers.
- Page title: Checks whether a standard HTML title was detected.
- Meta description: Checks whether a standard meta description was detected.
- robots.txt: Checks whether the standard robots.txt address responds.
- sitemap.xml: Checks whether the standard sitemap.xml address responds.
Why HTTPS Matters for a Business Website
HTTPS protects the connection between a visitor and a website. It is particularly important when visitors submit contact forms, make purchases or provide information.
A working HTTP-to-HTTPS redirect also helps ensure that visitors who use the older HTTP address are sent to the secure version of the website.
What Are Website Security Headers?
Security headers are instructions sent by a web server to a browser. They can help control how browsers handle content and certain web security features.
The checker looks for headers such as Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy.
A header marked NOT DETECTED does not mean that a website is hacked. Different websites can require different configurations, so missing headers should be reviewed in the context of the website.
What Does HTTP to HTTPS Redirect Mean?
A website may have both an HTTP address and an HTTPS address. A correctly configured website will normally redirect visitors from the HTTP version to the HTTPS version.
This helps prevent visitors from continuing to use an unsecured version of the website when a secure HTTPS version is available.
Why Check robots.txt and sitemap.xml?
robots.txt and XML sitemaps are common parts of a website’s technical SEO setup. A robots.txt file can provide crawler instructions, while an XML sitemap can help search engines discover website URLs.
Their presence does not automatically mean that technical SEO is correct. The contents of these files still need to be appropriate for the website.
What If the Checker Finds a Problem?
A result marked for review does not automatically mean that something is seriously wrong. Some results are recommendations or configuration items rather than evidence of a security incident.
If the checker reports an unexpected HTTP error, HTTPS problem or other issue you do not understand, investigate the cause before changing the live website. Keep a recent backup available when making significant WordPress or hosting changes.
Can This Tool Detect Malware?
The Cape Portal Website Security & Health Checker does not claim to perform a complete malware scan. Malware can exist in website files, databases, administrator accounts or server environments that a basic remote health check cannot fully inspect.
For additional security investigation, the results provide links to external security services such as Google Safe Browsing, Sucuri SiteCheck and SSL Labs.
Frequently Asked Questions
Can I check any website?
You can enter a publicly accessible HTTP or HTTPS website. Some websites may block automated requests or require special access, in which case the checker may not be able to retrieve all information.
Does NOT DETECTED mean my website is hacked?
No. NOT DETECTED means that the specific item was not found in the website response. It is not a malware diagnosis.
Does a successful HTTP status mean my website is completely healthy?
No. It only means that the website responded with a successful HTTP status. Other technical, security, content or SEO issues can still exist.
Does HTTPS mean my website is completely secure?
No. HTTPS protects the connection between the visitor and the website, but it does not by itself protect a website against malware, compromised passwords, vulnerable plugins or other security problems.
Does this replace a professional security audit?
No. This is intended as a practical first-level website health check. A suspected compromise, malware infection or serious hosting security problem should be investigated more deeply.