CM-103 · Core · 1 point

    HTTPS everywhere

    HTTPS everywhere means your site loads over HTTPS and every plain http:// address redirects there.

    Also searched as

    • http to https redirect
    • force https
    • always use https on cloudflare
    • site loads on http and https
    • 301 redirect from http to https

    What you might notice

    Typing http:// and your domain into a browser loads the page and the address stays http://, or your site doesn't load over https:// at all.

    Why it matters

    In search engines

    Without the redirect, http:// and https:// are two copies of every page, and Google has to pick one.

    In AI assistants

    Assistants cite the URL they fetched. A single HTTPS address keeps those citations pointing at one page.

    How we test it

    We check where your homepage ends up after redirects, and whether http:// redirects to https://.

    How to fix it

    Turn on a permanent (301) redirect from HTTP to HTTPS. On Cloudflare that's SSL/TLS → Edge Certificates → Always Use HTTPS.

    Related checks

    • CM-202 Canonical URL: Checks which host your canonical tag names. This check tests whether http:// redirects to https://.

    Sources

    Scan your site

    The free scan runs CM-103 and the other 12 checks on your site, then shows what to fix.

    Scan your site