Find HTTP resources loaded on an HTTPS page — scripts, styles, images, iframes. Fix the browser security warning.
Mixed Content Scanner checks an HTTPS site for HTTP resource loading (images, iframes, scripts). Chrome blocks active mixed content entirely; passive triggers a warning. The tool lists every problem URL + upgrade-insecure-requests recommendations.
Mixed Content is loading HTTP resources (images, scripts, CSS) on an HTTPS page. Browsers block active mixed content (JS, CSS) and warn about passive (images).
Find all HTTP resources on the page: scripts, styles, images, frames.
Divide into active (critical) and passive (non-critical) mixed content.
Each HTTP resource listed with type and fix recommendation.
Results in seconds — we check the page without full browser rendering.
post-HTTPS migration audit
insecure resource detection
browser warning fixes
third-party resource audit
// scheme everywhere to adapt to protocol.Content-Security-Policy: upgrade-insecure-requests automatically upgrades HTTP to HTTPS.src="/images/logo.png" instead of src="http://example.com/images/logo.png".Mixed content check history and HTTPS security monitoring.
Sign up freeMixed content occurs when an HTTPS webpage loads resources (scripts, images, stylesheets) over HTTP. Browsers block active mixed content (scripts, iframes) and warn about passive mixed content (images, audio, video). This tool scans the page source and identifies all HTTP resources that could trigger browser warnings or be silently blocked.
Longer-form reading on this topic from the knowledge base.
Set up continuous monitoring and get an alert when something breaks. No manual runs to remember.