Security Scan Results
https://mag.at
Scan complete
mag.at
Excellent Security
11 issues detected
Scanned 4 months ago
11
Total
0
Critical
0
High
2
Medium
WP_DEBUG is disabled (no PHP errors visible)
Missing security header: Strict-Transport-Security -- Enforces HTTPS connections
How to fix: Add to .htaccess or nginx: Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Missing security header: Referrer-Policy -- Controls referrer information
Missing security header: Permissions-Policy -- Controls browser feature access
3 of 6 security headers configured
SSL certificate valid (61 days remaining) — issued by Let's Encrypt
HTTP correctly redirects to HTTPS
Cookies missing security flags (SameSite): 4p5fo80a, 7674fqs5
How to fix: Set cookie security flags in wp-config.php: @ini_set("session.cookie_httponly", 1); @ini_set("session.cookie_secure", 1); @ini_set("session.cookie_samesite", "Lax");
REST API user enumeration blocked
No external scripts detected
Checked against 11 blacklist services
Looking good!
Your site passed the surface scan. For complete peace of mind, a deep scan checks file integrity, database injections, and hidden backdoors at the server level.
Run Deep Scan — $1