Readiness checks
The 31 readiness checks
Each check, how often popular sites pass it, and how to fix it.
Enable
Crawlability, discoverability, mobile readiness and clean redirects.
Harden
Transport security, certificates, DNS integrity and safe browser defaults.
- HTTP requests move to HTTPS91%
- HSTS kept for at least a year34%
- TLS 1.3 negotiated91%
- Certificate has more than 14 days left99%
- Certificate lifetime of 100 days or less67%
- CAA records limit who can issue certificates13%
- DNSSEC signed8%
- security.txt published7.1%
- DMARC policy enforces quarantine or reject39%
- X-Content-Type-Options: nosniff48%
- Framing restricted51%
- Content Security Policy present32%
- Referrer-Policy set24%
Accelerate
Delivery protocols, compression, caching and image and script loading.
Recover
Choices that limit how far a single provider problem can spread.