Security Checks / Mixed Content Check
Mixed Content Check
Detect HTTP subresources loaded on an HTTPS page.
Check a Website
Enter a URL to run a scan and review relevant security signals.
What It Is
Mixed content is when an HTTPS page loads scripts/images over HTTP.
Why It Matters
Browsers may block mixed content; it can also enable attacks or tracking.
How to Fix
- Upgrade subresource URLs to https:// or protocol-relative (where safe).
- Use a Content Security Policy upgrade-insecure-requests directive.
- Fix third-party embeds that only support HTTP.