Feature docs · Website security · Module: hsts
HSTS is a Guardbee scan module under website security. Validates Strict-Transport-Security configuration.
What does it check?
Validates Strict-Transport-Security configuration. Results appear in the dashboard and scan detail as score, findings, and recommended actions.
Business impact
Without HSTS, first-visit SSL stripping risk remains.
Guardbee presents risk, impact, and priority — so product, legal, and engineering share one screen.
How to run it
- Create a Guardbee account (25 credits for new accounts)
- Add a brand / URL
- Select HSTS under Website security
- Run the scan; optionally explain findings with BeeAI
Related docs
Frequently asked questions
Is HSTS required?
No. Pick modules as needed; you only spend credits on what you run.
Is scanning destructive?
No. Guardbee uses controlled, read-only, limited requests.
Does it work with BeeAI?
Yes. After a scan, BeeAI can summarize findings in business language.