Site Security Settings Check

We open the top page of a site from outside and check HTTPS, the redirect from http, disclosure of PHP and server software versions, security headers, and whether WordPress user names can be retrieved. Each item is shown as Action needed, Caution, No issues, or Not checked / N/A.

We check only the top page, plus two additional locations if the site uses WordPress. We do not log in or write anything.