Website Monitoring

iTunes Podcasts Feed Error

Although Apple has announced that iTunes Podcasts are now compatible with Let’s Encrypt SSL, if you continue to face issues such as "Can’t read your feed", you have to upgrade to the Professional or Business plan (if your domain is...

Read more

JetPack Issues

If you are getting: The Jetpack server was unable to communicate with your site [HTTP 406] That usually means your hosting server has mod_security enabled and it is blocking the access. Contact your hosting support and ask them to disable...

Read more

How to Fix SSL Mixed Content Warnings

When a user visits a page served over HTTPS, their connection with the web server is encrypted and safeguarded from man-in-the-middle (MiTM) attacks. If the HTTPS page includes content retrieved through cleartext HTTP, then the connection is only...

Read more

Conditional redirections

Conditional redirections are classified differently than the iframe/javascript ones because they are generally done though the HTTP headers (via .htaccess) to redirect users from certain browsers or locations to malware/malicious locations. Referrer...

Read more

SSL Change Notifications

What is SSL? An SSL (Secure Sockets Layer) is a certificate on the website that allows for the safe passage of encrypted information from the client to the host server. If your site uses an SSL certificate, it is important to know the status of the...

Read more

Monitoring Types and Frequency

After adding sites to monitoring, you can choose which monitoring types you want and the monitoring frequency. To do that, just click on the site you would like to change and then Settings -> Monitoring Types. Simply toggle the On/Off to activate...

Read more

cPanel Outdated Warnings

One of the most common causes of website compromises and malware attacks are due to outdated and vulnerable software. cPanel is one of the most important pieces of software you have running your site, since it allows you to manage and access the...

Read more

HTTP Trace Method

In order to improve the security of your site (and your users), you should disable the TRACE method from your web server. This method has no real-life usage and can be misused for XST (cross-site tracing) attacks. That is how you can disable it on...

Read more

Disable Server Banners

Most web servers display its version and modules in use by default. Best security practices recommend that you disable this option, since it can be used to find vulnerabilities of your site. The NIST Guide for Securing Web Servers also recommends it...

Read more

Security Headers – X-Content-Type: nosniff

In order to improve the security of your site (and your users) against some types of drive-by-downloads, it is recommended that you add the following header to your site: X-Content-Type-Options: nosniff It is supported by IE (Internet Explorer) and...

Read more