P2 · MediumSecurity
HSTS max-age too short
HSTS header max-age is under 1 year
Code: hsts_short_max_age
Why it matters
HSTS header max-age is under 1 year. Browsers and users expect sites to be secure. Missing protections expose visitors to data theft, phishing, and loss of trust.
Related checks in Security
Run a free scan to check your site
Get a complete audit in under 2 minutes. No account required.
Start Free Scan