Site not served over HTTPS
High priorityTechnical
The page loads over plain HTTP, so browsers mark it “Not secure” and it misses Google’s HTTPS ranking signal.
What triggers this issue
- The audited page’s final URL starts with
http://.
Why it matters
Chrome and other browsers label HTTP pages “Not secure”, which scares visitors away, especially on forms and checkouts. HTTPS is also a confirmed Google ranking signal and is required for modern browser features.
Certificates are free from Let’s Encrypt and most hosts and CDNs set them up automatically.
How to fix it
- Turn on HTTPS in your hosting control panel or CDN, or install a Let’s Encrypt certificate.
- Redirect every HTTP URL to its HTTPS version with a 301.
- Update internal links, canonicals and your sitemap to https:// URLs.