HTTP Strict Transport Security
A header that forces browsers to only connect via HTTPS, preventing downgrade attacks.
How it works
A header that forces browsers to only connect via HTTPS, preventing downgrade attacks.
In WordPress
Essential for WordPress sites handling sensitive data. WP HealthKit verifies HSTS headers are set correctly.
Related terms
WP HealthKit checks for HTTP Strict Transport Security-related vulnerabilities automatically
Run a Free Audit