Useful tools
Move from guidance to a practical check with the tools available on this site.
Web guidance · Security
Web security: reduce common risks
Web security relies on several complementary layers. These guides do not replace a specialist audit, but they help reduce common risks through practical configuration and disciplined maintenance.
3 guides
Reduce the most common website risks
Strengthen forms, HTTP headers and dependencies with simple checks that limit exposure to common errors and vulnerabilities.
Security
HTTP security headers: practical foundations
Learn the role of CSP, HSTS, X-Content-Type-Options and Referrer-Policy in strengthening HTTP configuration.
Read the guideSecurity
Securing a website through updates and dependencies
Organise updates for CMS components, libraries and dependencies to reduce exposure to known vulnerabilities.
Read the guideSecurity
Secure contact forms
Learn the best practices for securing a contact form: validation, honeypot, anti-spam, field cleaning, CRLF protection, and consent.
Read the guideExplore all web guidance
Return to the main hub to browse every topic and move between complementary guides.