Mixed Content Checker
Find HTTP resources loaded on an HTTPS page — scripts, styles, images, iframes. Fix the browser security warning.
Mixed Content Scanner checks an HTTPS site for HTTP resource loading (images, iframes, scripts). Chrome blocks active mixed content entirely; passive triggers a warning. The tool lists every problem URL + upgrade-insecure-requests recommendations.
Want what we publish, weekly?
Drop your email — one letter a week with the guides and tools we published. No re-checks for this tool yet.
One-click unsubscribe in every email. We never share email addresses. By subscribing you agree to our privacy policy.
Why teams trust us
How it works
Enter page URL
Scan all resources
Find HTTP resources on HTTPS
What is Mixed Content?
Mixed Content is loading HTTP resources (images, scripts, CSS) on an HTTPS page. Browsers block active mixed content (JS, CSS) and warn about passive (images).
Resource Scanning
Find all HTTP resources on the page: scripts, styles, images, frames.
Threat Classification
Divide into active (critical) and passive (non-critical) mixed content.
Problem URL List
Each HTTP resource listed with type and fix recommendation.
Fast Check
Results in seconds — we check the page without full browser rendering.
Who uses this
Security
post-HTTPS migration audit
Developers
insecure resource detection
SEO
browser warning fixes
Sysadmins
third-party resource audit
Common Mistakes
// scheme everywhere to adapt to protocol.Content-Security-Policy: upgrade-insecure-requests automatically upgrades HTTP to HTTPS.Best Practices
src="/images/logo.png" instead of src="http://example.com/images/logo.png".Get more with a free account
Mixed content check history and HTTPS security monitoring.
Sign up freeWhat is Mixed Content?
Mixed content occurs when an HTTPS webpage loads resources (scripts, images, stylesheets) over HTTP. Browsers block active mixed content (scripts, iframes) and warn about passive mixed content (images, audio, video). This tool scans the page source and identifies all HTTP resources that could trigger browser warnings or be silently blocked.
Learn more
Related guides
Longer-form reading on this topic from the knowledge base.
Automate this check
Set up continuous monitoring and get an alert when something breaks. No manual runs to remember.