There are two kinds of website security: how safe your site is, and how safe it looks. Breaches punish the first. Lost sales punish the second — quietly, every day. This checklist covers both, and you can run it in about ten minutes.
Minute 1–2: The address bar
- Visit your homepage, a product page, and checkout. Is the padlock present on all three?
- Type your domain with
http://— does it redirect to HTTPS automatically? - Does your site work identically with and without
www?
Minute 3–4: The browser's opinion
- Open your site in a private window. Any "Not secure" warnings or mixed-content icons?
- Check your site on your phone. Mobile browsers are stricter — and most of your visitors are there.
Minute 5–6: The stranger test
Pretend you've never heard of your business and land on your homepage cold:
- Can you tell within five seconds who runs this site and how to reach them?
- Is there any third-party evidence of legitimacy — a security seal, reviews, recognizable payment logos?
- Does anything look abandoned? An out-of-date copyright year or a dead blog reads as "nobody is watching this site."
Minute 7–8: The checkout walk-through
- Add a product to the cart and go as far as the payment step. Is security reassurance visible right where you'd enter a card number?
- Are all costs shown before the payment fields?
- Could a first-time buyer check out without creating an account?
Minute 9–10: The parts you can't see
The visible layer only earns trust if it's true underneath:
- When did you last update your store platform and plugins?
- When was your site last scanned for vulnerabilities — and would you know if that scan failed?
- If your site were defaced or blacklisted tonight, who would notice first: you, or your customers?
Scoring yourself
Every unchecked box is one of two things: a doubt planted in a visitor's mind, or a door left open behind the scenes. The first costs you conversions today. The second could cost you everything later.
The invisible items are the hardest to keep up manually — which is exactly why we automated them. Trust Guard scans your site daily, alerts you before customers ever see a problem, and gives you a seal that shows visitors the scanning is real. Run your free scan and check the last three boxes today.
Comments
No comments yet. Be the first to share your thoughts!