Guides / Basic website security checklist

Basic website security checklist

Low-cost security hygiene for small sites. Not a substitute for a professional audit.

• Serve over HTTPS with a valid certificate.
• Do not put secrets or API keys in client-visible code.
• Use a Content-Security-Policy where practical.
• Keep dependencies updated.
• Validate and authorize on the server, not only in the browser.
• Do not log credentials or tokens.

This is basic hygiene, not a security audit. PreShip does not guarantee security.