Confirm your entire site runs over HTTPS

30 min Impact: high ✓ Manual completion — a permanent stone

Confirming your entire site runs over HTTPS — every page, every subdomain, no exceptions — closes the basic trust and security gap that undermines every other credibility signal, since browsers actively warn visitors away from any page that isn't secure.

This is foundational infrastructure trust — a single non-HTTPS page anywhere on an otherwise-secure site is a real, visible red flag to any visitor who encounters it.

How to do it

1

Check every major section and subdomain

Not just the homepage — blog, checkout, subdomains for tools or apps, everything.
2

Confirm HTTP redirects to HTTPS everywhere

Not just that HTTPS works, but that plain HTTP requests are actively redirected, not left to load insecurely.
3

Check for mixed content

An HTTPS page loading even one resource over HTTP breaks the full security guarantee.
4

Re-verify after any infrastructure change

New subdomains or third-party integrations can introduce gaps that weren't there before.

Common mistakes

This overlaps with several of your Hardening Ring scan checks (HTTPS enforcement, mixed content) — if those are already passing, this Legacy Ring mission may already be effectively complete.

How you will know it is done

Every page and subdomain on the site loads exclusively over HTTPS with no mixed content.

Tools that help

SSL Labs Test ↗

Deep check of your HTTPS configuration.

Set this stone in your hive

The Legacy Ring is permanent — once set, it stays set. This is the kind of work that outlasts any single scan or campaign.

Open this mission in H.I.V.E. →