P3 · LowSecurity
SSL Labs: HSTS missing includeSubDomains
HSTS policy (per SSL Labs) does not include subdomains
Code: ssl_hsts_no_subdomains
Why it matters
HSTS policy (per SSL Labs) does not include subdomains. Browsers and users expect sites to be secure. Missing protections expose visitors to data theft, phishing, and loss of trust.
Related checks in Security
Run a free scan to check your site
Get a complete audit in under 2 minutes. No account required.
Start Free Scan