Scan Check Library

Tools & Scan Checks

90 real, step-by-step guides — one for every automated security, performance, and SEO check H.I.V.E. runs. Fix it, re-scan, and the check confirms itself. No manual checkbox, the scan is the truth.

Content & Files (8)Crawlability (6)DNS Security (4)Domain & DNS Health (6)Email Deliverability (5)Exposed Files (14)On-Page SEO (28)Performance (7)Security Headers (10)Transport Security (2)

Content & Files 8

Create a security.txt file at /.well-known/security.txt
Read the guide →
Add Subresource Integrity (SRI) to third-party scripts
Read the guide →
Add rel="noopener" to links that open in a new tab
Read the guide →
Remove sensitive data from URL query parameters
Read the guide →
Fix mixed content — load every resource over HTTPS
Read the guide →
Fix open redirect vulnerabilities in redirect parameters
Read the guide →
Remove exposed JavaScript source maps in production
Read the guide →
Fix forms that submit over plain HTTP
Read the guide →

Crawlability 6

Create a robots.txt file and reference your sitemap
Read the guide →
Create an XML sitemap and submit it to Google Search Console
Read the guide →
Generate and publish your llms.txt file
Read the guide →
Collapse redirect chains into a single hop
Read the guide →
Confirm robots.txt allows AI answer-engine crawlers
Read the guide →
Fix: HTTPS / SSL
Read the guide →

DNS Security 4

Install and verify a valid SSL certificate
Read the guide →
Register your domain for at least 5 years and enable auto-renewal
Read the guide →
Enable DNSSEC to cryptographically protect your DNS records
Read the guide →
Check for subdomain takeover risk
Read the guide →

Domain & DNS Health 6

Enable HSTS to prevent protocol downgrade attacks
Read the guide →
Add a CAA DNS record to restrict who can issue SSL certs for your domain
Read the guide →
Fix your domain's A/AAAA DNS record so it resolves correctly
Read the guide →
Point your domain to reliable nameservers
Read the guide →
Add domain verification TXT records
Read the guide →
Redirect www and non-www to one canonical version
Read the guide →

Email Deliverability 5

Set up SPF record to authenticate your sending domain
Read the guide →
Configure DKIM signing for your email domain
Read the guide →
Implement DMARC policy to prevent email spoofing
Read the guide →
Verify MX records are correct and mail can be received
Read the guide →
Fix: BIMI (Brand Logo)
Read the guide →

Exposed Files 14

Verify your hosting server software version is not publicly exposed
Read the guide →
Move your login page to a non-default URL
Read the guide →
Set up automated backups with offsite storage and test restoration
Read the guide →
Verify .env and credential files are not publicly accessible
Read the guide →
Block public access to .git directories and version control files
Read the guide →
Disable directory listing so visitors cannot browse your file system
Read the guide →
Disable xmlrpc.php if you don't need it
Read the guide →
Remove version-disclosing files (readme.html, CHANGELOG.txt)
Read the guide →
Remove exposed .DS_Store files
Read the guide →
Block access to composer.json and package.json
Read the guide →
Restrict access to exposed API documentation
Read the guide →
Block public access to your .htaccess file
Read the guide →
Check for publicly exposed cloud storage buckets
Read the guide →
Block access to .svn and .hg version control directories
Read the guide →

On-Page SEO 28

Add a unique title tag to every page
Read the guide →
Add a meta description to every page
Read the guide →
Add descriptive alt text to every image
Read the guide →
Fix: Accessibility
Read the guide →
Add exactly one H1 tag to every page
Read the guide →
Fix heading hierarchy — no skipped levels
Read the guide →
Add a self-referencing canonical tag to every page
Read the guide →
Remove any accidental noindex tag
Read the guide →
Expand thin pages with genuinely useful content
Read the guide →
Fix broken internal links
Read the guide →
Validate your XML sitemap structure
Read the guide →
Add Open Graph tags so shared links look right
Read the guide →
Add Twitter Card meta tags
Read the guide →
Add Schema.org structured data
Read the guide →
Add the lang attribute to your html tag
Read the guide →
Declare character encoding explicitly
Read the guide →
Add a proper viewport meta tag
Read the guide →
Add a favicon
Read the guide →
Add width and height attributes to images
Read the guide →
Fix soft 404s — return a real 404 status code
Read the guide →
Keep sitemap lastmod dates accurate
Read the guide →
Fix hreflang implementation for international pages
Read the guide →
Verify your homepage canonical tag points to itself
Read the guide →
Build a real 404 page with navigation, not a blank error
Read the guide →
Fix: Best Practices
Read the guide →
Fix: Crawlable Links
Read the guide →
Fix: Mobile Friendly
Read the guide →
Fix: Lighthouse SEO Score
Read the guide →

Performance 7

Optimize images for faster load times
Read the guide →
Fix: Layout Stability (CLS)
Read the guide →
Fix: Desktop Speed
Read the guide →
Fix: Mobile Speed
Read the guide →
Fix: Render-Blocking Resources
Read the guide →
Fix: SEO Score
Read the guide →
Fix: Server Response (TTFB)
Read the guide →

Security Headers 10

Set X-Frame-Options header to prevent clickjacking
Read the guide →
Add X-Content-Type-Options header to stop MIME sniffing
Read the guide →
Set Referrer-Policy header to control data leakage
Read the guide →
Configure Permissions-Policy to disable unused browser features
Read the guide →
Implement a Content Security Policy (CSP) header
Read the guide →
Suppress server version disclosure in response headers
Read the guide →
Set secure cookie flags: HttpOnly, Secure, and SameSite
Read the guide →
Fix CORS configuration — never combine wildcard origin with credentials
Read the guide →
Disable unnecessary HTTP methods (TRACE, PUT, DELETE)
Read the guide →
Add no-store cache headers to sensitive pages
Read the guide →

Transport Security 2

Force HTTPS sitewide and verify no HTTP pages exist
Read the guide →
Submit your domain to the HSTS preload list
Read the guide →