Website security & health, explained.
Short, practical guides to the things AstraScope checks — what each issue means, why it matters, and exactly how to fix it. No jargon for its own sake.
The security headers every site should send
HSTS, X-Content-Type-Options, Referrer-Policy, frame protection and Permissions-Policy — what each response header does and how to set it.
A practical guide to Content-Security-Policy
CSP is the strongest defence against cross-site scripting. Learn what it controls, how to roll it out safely with report-only, and how to avoid unsafe-inline.
Alt text that actually helps
Alternative text is how images work for screen-reader users and when images fail to load. Learn the difference between decorative and informative images, with examples.
Canonical URLs and duplicate content
One page can be reachable at many URLs. Canonical tags tell search engines which one counts — done wrong, they quietly bury your pages.
HTTPS, TLS and mixed content explained
Why every site needs HTTPS, what TLS versions to support, how mixed content undermines a padlock, and where HSTS fits in.
Securing cookies: HttpOnly, Secure and SameSite
Three cookie attributes stop most session-theft and cross-site request attacks. Learn what each does and how to set them.