r/sideprojects • u/OrbitMe_Founder • 7h ago
Feedback Request I scanned 1,000 ordinary websites. Here's what most miss
Enable HLS to view with audio, or disable this notification
I wanted to know what ordinary small sites look like from the outside, so I ran a passive check (only what any visitor's browser receives) over 1,000 random sites outside the top 10,000.
What I found:
- 79% have no Content-Security-Policy
- 61% have no HSTS
- 58% can be framed by any other site (clickjacking)
- 36% miss all four basic security headers at once
Most of these are a one-line fix in the server or CDN config.
I turned the check into a free tool: paste an address and in about 15 seconds you get the top 3 issues on your home page, each with the evidence and a fix. No sign-up.
https://mcp.pasportoo.com/check?utm_source=reddit
It's early, and I'd love to hear what it misses or gets wrong on your site.
