Sitebulb’s Security report allows you to efficiently verify that your website meets key security requirements. When the report is enabled, Sitebulb performs server analysis on protocols and certificates, in addition to checking every URL for on-page security issues and vulnerabilities.
Start by enabling the report under Audit Settings> Audit Data:
In the finalised Audit, you’ll find the Security report in the left-hand menu. Within the report, you’ll find details about the protocols, cipher suites, and security certificates found on the websites. The hints list provides you with further insights into potential vulnerabilities across your pages.
Protocols
The protocol table provides a breakdown of all the TLS protocol versions supported by the website server. You’ll want to check that the latest secure TLS versions are supported, and that deprecated versions are disabled.
Sitebulb will also provide a recommended action as appropriate, depending on whether the protocol is supported.
Cipher Suites
The cipher suites section checks all supported cipher suites, and highlights weak and vulnerable supported suites, along with the recommended action.
Certificates
The certificates section outlines every security certificate found on the website, raising an error at the top of the section if any invalid certificates are found.
Security Hints
Sitebulb’s security hints focus on the Hyper Text Transfer Protocol Secure (HTTPS) and HTTP security headers. As it crawls, Sitebulb will check your pages for critical issues, like resources loaded over an insecure HTTP connection, and pages loaded over insecure HTTP connections.